The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Powerline Gitstatus, a status line plugin for the VIM editor, allows arbitrary code execution. Git repositories can contain per-repository configuration that c…
Unless your computer is pretty old, it probably uses UEFI (Unified Extensible Firmware Interface) to boot. The idea is that a bootloader picks up files from an…
Igor Ponomarev discovered that LAVA, a continuous integration system for deploying operating systems onto physical and virtual hardware for running tests, was …
It was discovered that the CompareTool of iText, a Java PDF library which uses the external ghostscript software to compare PDFs at a pixel level, allowed comm…
USN-5810-1 introduced a regression in Git.
urllib3 could be made to stop responding if it received specially crafted network traffic.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42852
- Update to 109.0
It was discovered that the CompareTool of iText, a Java PDF library which uses the external ghostscript software to compare PDFs at a pixel level, allowed comm…
Sudo could be made to possibly edit arbitrary files if it received a specially crafted input.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Several security issues were fixed in Sudo.
Matthieu Barjole and Victor Cutillas discovered that sudoedit in sudo, a program designed to provide limited super user privileges to specific users, does not …
Matthieu Barjole and Victor Cutillas discovered that sudoedit in sudo, a program designed to provide limited super user privileges to specific users, does not …
Security fix for CVE-2022-46391
Security fix for CVE-2022-46391
Several security issues were fixed in Git.
Several security issues were fixed in libXpm.
Ruby could allow for internet traffic to be modified if a vulnerable application processed malicious user input.
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
An update that contains security fixes can now be installed.
The container sles-15-sp4-chost-byos-v20230111-arm64 was updated. The following patches have been included in this update: