Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Due to improper input validation, Squid is vulnerable to an HTTP Request Smuggling attack. This problem allows a trusted client to perform HTTP Request
Several vulnerabilities were discovered in the shadow suite of login tools. An attacker may escalate privileges in specific configurations. CVE-2017-20002
On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), …
When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the di…
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one …
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description (CVE-2019-13990…
It was discovered that Pygments, a syntax highlighting package written in Python, could be forced into an infinite loop, resulting in denial of service.
Two vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary cod…
Anton Lydike discovered that sandbox restrictions in Flatpak, an application deployment framework for desktop apps, could by bypassed via a malicious .desktop …
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-snapshotter was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-resizer was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-provisioner was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-node-driver-registrar was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-attacher was updated. The following patches have been included in this update:
The container suse/sle-micro/5.0/toolbox was updated. The following patches have been included in this update:
The container suse-sles-15-sp2-chost-byos-v20210304-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp2-chost-byos-v20210304-gen2 was updated. The following patches have been included in this update:
The container sles-15-sp2-chost-byos-v20210304 was updated. The following patches have been included in this update:
The container sles-15-sp1-chost-byos-v20210304 was updated. The following patches have been included in this update:
The container suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The SolarWinds Sunburst attack has been in the headlines since it was first discovered in December 2020.ÂAs the so-called layers of the onion are peeled back, …
Let's first take a look back at 2020!Adding to the list of difficulties that surfaced last year, 2020 was also grim for personal data protection, as it has mar…
Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO) that could allow an unauthen…
