The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
PostgreSQL could be made to execute commands as the superuser.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Several security issues were fixed in Heimdal.
Several security issues were fixed in unzip.
XML Security Library could be made to crash if it opened a specially crafted file.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities were discovered in squid, a Web Proxy cache CVE-2022-41317
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
GMP could be made to crash if it received specially crafted input.
It was discovered that insufficient validation of "vnd.libreoffice.command" URI schemes could result in the execution of arbitrary macro commands.
Several security issues were fixed in AdvanceCOMP.
A command injection vulnerability was found in Rexical, a lexical scanner generator for the Ruby programming language. Processes are vulnerable only if the und…
Multiple vulnerabilities were discovered in Nokogiri, an HTML/XML/SAX/Reader parser for the Ruby programming language, leading to command injection, XML extern…
Security fix for CVE-2022-2476
Several security vulnerabilities were discovered in mediawiki, a website engine for collaborative work. CVE-2022-41765
.NET 6 could be made to execute arbitrary code.
It was discovered that there was a potential arbitrary file read vulnerability in twig, a PHP templating library. It was caused by insufficient validation of t…
An update that fixes one vulnerability is now available.
An update that fixes 6 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Update to 0.8.7. This new release fixes CVE-2022-25765.