The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 2.8.1 (CVE-2022-39282, CVE-2022-39283).
This update adds size checks to thumbnail extraction. Prior to these checks, it was possible to overflow arguments to e.g. malloc and thus cause out-of-bounds …
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
Anytime you upgrade software, you risk something breaking. This is the nature of the IT beast. The purpose of patches is usually to fix a bug or, worse, a secu…
An update that fixes two vulnerabilities is now available.
The container trento/trento-web was updated. The following patches have been included in this update:
The container trento/trento-runner was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/bci-busybox was updated. The following patches have been included in this update:
**MariaDB 10.5.18 & Galera 26.4.13** Release notes: https://mariadb.com/kb/en/mdb-10-5-18-rn/
**MariaDB 10.5.18 & Galera 26.4.13** Release notes: https://mariadb.com/kb/en/mdb-10-5-18-rn/
Backport patch for CVE-2022-45061.
**MariaDB 10.5.18 & Galera 26.4.13** Release notes: https://mariadb.com/kb/en/mdb-10-5-18-rn/
libsamplerate could cause a crash if it processed a specially crafted audio file.
An update that solves three vulnerabilities and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that solves 6 vulnerabilities and has one errata is now available.
krb5: integer overflow vulnerabilities in PAC parsing (CVE-2022-42898) For more details about the security issue(s), including the impact, a CVSS score, acknow…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Security fix for CVE-2022-44020
Security fix for CVE-2022-44020
The container bci/nodejs was updated. The following patches have been included in this update: