Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Maddie Stone reported a heap-based buffer overflow flaw in pixman, a pixel-manipulation library for X and cairo, which could result in denial of service or pot…
An update that fixes two vulnerabilities is now available.
The container bci/golang was updated. The following patches have been included in this update:
An update that solves two vulnerabilities and has one errata is now available.
An update that fixes 20 vulnerabilities is now available.
Several security issues were fixed in Thunderbird.
**Changes in version 1.6.0** Bug Fixes: * Introduce required service_name constructor argument to fix service hostname discovery exploitation vulnerability **C…
**Changes in version 1.6.0** Bug Fixes: * Introduce required service_name constructor argument to fix service hostname discovery exploitation vulnerability **C…
Security fix for CVE-2022-3705 2139842 - vim upgrade broke :! for displaying terminal output ---- patchlevel 803 ---- The newest upstream commit Security fixes…
**Changes in version 1.6.0** Bug Fixes: * Introduce required service_name constructor argument to fix service hostname discovery exploitation vulnerability **C…
https://lists.wikimedia.org/hyperkitty/list/mediawiki- announce@lists.wikimedia.org/thread/DMQKMFSH4K7KLBXWZTDBGI2PWLLHJHJZ/ https://lists.wikimedia.org/hyperk…
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Prevent denial of service (DoS) by very large integers.
Update to 1.14.4 * Fix CVE-2022-42010, CVE-2022-42011 and CVE-2022-42012
An update that fixes one vulnerability is now available.
USN-5709-1 introduced minor regressions in Firefox
WavPack could be made to crash if it opened a specially crafted file.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has one errata is now available.
This is the October 2022 monthly update for .NET 6. It updates the SDK to 6.0.110 and the Runtime to 6.0.10. This update includes a fix for CVE 2022-41032
- url: use IDN decoded names for HSTS checks (CVE-2022-42916) - http_proxy: restore the protocol pointer on error (CVE-2022-42915) - netrc: replace fgets with …
Two vulnerabilities were found in the Xkb extension of the X.org X server, which could result in denial of service or possibly privilege escalation if the X se…
It was discovered that libjettison-java, a collection of StAX parsers and writers for JSON, was vulnerable to a denial-of-service attack, if the attacker provi…
The container bci/openjdk-devel was updated. The following patches have been included in this update:
