The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This update upgrades Thunderbird to version 91.9.1. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
An update that fixes one vulnerability is now available.
The container bci/golang was updated. The following patches have been included in this update:
Security fix for CVE-2021-38714
Security fix for CVE-2021-38714
Security fix for CVE-2022-1379
Security fix for CVE-2022-1379
Security fix for CVE-2021-38714
Rsyslog could be made to crash if it received a specially crafted request.
Multiple security vulnerabilities were discovered in Puma, a HTTP server for Ruby/Rack applications, which could result in HTTP request smuggling or informatio…
Multiple vulnerabilities have been discovered in the lrzip compression program which could result in denial of service or potentially the execution of arbitrar…
An update that solves one vulnerability, contains one feature and has two fixes is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
- fix too eager reuse of TLS and SSH connections (CVE-2022-27782) ---- - fix credential leak on redirect (CVE-2022-27774) - fix auth/cookie leak on redirect (C…
HTMLDOC could be made to crash or run programs if it received specially crafted HTML files.
libXfixes could be made to crash or run programs if it received specially crafted input.
Several security issues were fixed in libXrender.
An update that fixes one vulnerability is now available.