Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A heap use-after-free vulnerability was found in systemd, a system and service manager, where asynchronous Polkit queries are performed while handling dbus mes…
Several security issues were fixed in Libjpeg6b.
- Update to new upstream (102.0)
Update to 91.11.0
Security fixes for CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720, CVE-2022-2175, CVE-2022-2182, CVE-2022-2183, CVE-2022-2231, CVE-2…
Update to 102.0.5005.115. Fixes: CVE-2022-1633 CVE-2022-1634 CVE-2022-1635 CVE-2022-1636 CVE-2022-1637 CVE-2022-1638 CVE-2022-1639 CVE-2022-1640 CVE-2022-1641 …
uBlock, a Firefox add-on and efficient ads, malware and trackers blocker, supported an arbitrary depth of parameter nesting for strict blocking, which allows c…
cloud-init could be made to expose sensitive information.
Matthias Gerstner discovered that the --join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalatio…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
An update that fixes 9 vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes 9 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
Security fix for CVE-2022-1292 Upgrade to 1.1.1o, #2095817. See https://www.openssl.org/news/secadv/20220503.txt.
Several issues have been found in blender, a very fast and versatile 3D modeller/renderer.
An update that fixes one vulnerability is now available.
Two issues have been found in libsndfile, a library for reading/writing audio files.
python: CRLF injection via HTTP request method in httplib/http.client (CVE-2020-26116) * python-urllib3: CRLF injection via HTTP request method (CVE-2020-26137…
389-ds-base: sending crafted message could result in DoS (CVE-2022-0918) * 389-ds-base: expired password was still allowed to access the database (CVE-2022-099…
kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729) * kernel: a use-after-free write in the netfilter subsystem can lead to…
An update that fixes two vulnerabilities is now available.
An update that contains security fixes can now be installed.
