The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
2.6.7
New version 3.2.5 Fix for CVE-2022-29154, CVE-2022-37434
lsi53c895a: Do not abort when DMA requested and no data queued (#552) lsi53c895a: Fix use-after-free in lsi_do_msgout (CVE-2022-0216) (rhbz#2070902)
zlib could be made to crash or run programs if it received specially crafted input.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
An update that fixes three vulnerabilities is now available.
An update that fixes 8 vulnerabilities is now available.
An update that fixes 8 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability, contains one feature and has one errata is now available.
USN-5526-1 introduced a regression in PyJWT.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792
Update to yara-4.2.3 ---- Update to 4.2.0 ---- Update to 4.2.2
Update to yara-4.2.3 ---- Update to 4.2.0 ---- Update to 4.2.2
The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-32792
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that contains security fixes can now be installed.
An update that solves 7 vulnerabilities and has 7 fixes is now available.
Yu Zhang and Nanyu Zhong discovered several vulnerabilities in net-snmp, a suite of Simple Network Management Protocol applications, which could result in deni…