Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that there was a potential reflected file download (RFD) vulnerability in ruby-sinatra, a Ruby library for writing HTTP applications. A Conte…
This update fixes a number of memory access violations and other input validation failures that can be triggered by passing specially crafted files to exiv2.
w3m could be made to crash or run programs as your login if it opened a malicious website.
The container bci/python was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/bci-init was updated. The following patches have been included in this update:
USN-5782-1 caused some minor regressions in Firefox.
Update to 43.2
xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow (CVE-2022-46340)…
xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow (CVE-2022-46340)…
Several security issues were fixed in WebKitGTK.
w3m could be made to crash or run programs as your login if it opened a malicious website.
Net-SNMP could be made to crash if it received specially crafted network traffic.
Libksba could be made to crash or run programs if it processed specially crafted data.
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling, cache poiso…
The container bci/bci-micro was updated. The following patches have been included in this update:
The container bci/bci-busybox was updated. The following patches have been included in this update:
The container bci/bci-micro was updated. The following patches have been included in this update:
Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
If you're looking for a new operating system that takes security seriously, but doesn't cause major user headaches, Vanilla OS might be just the ticket.
Several security issues were fixed in curl.
USN-5782-1 caused some minor regressions in Firefox.
Libksba could be made to crash or run programs if it processed specially crafted data.
GNOME Files could be made to crash if it opened a specially crafted file.
