Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue has been found in tinyxml, a C++ XML parsing library. Crafted XML messages could lead to an infinite loop in
Three issues have been found in libarchive, a multi-format archive and compression library.
The newest upstream commit Security fixes for CVE-2022-1381, CVE-2022-1420
Fix CVE-2022-29536
zgrep applied to a crafted file name with two or more newlines can no longer overwrite an arbitrary, attacker-selected file. reproducer: $ touch foo.gz $ echo …
Update to 41.4, fixes CVE-2022-29536
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes 5 vulnerabilities is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Security fixes for CVE-2022-1227, CVE-2022-21698, CVE-2022-27191, CVE-2022-27649
Security fix for CVE-2021-28021, CVE-2021-42715, CVE-2021-42716, and CVE-2022-28041
Security fix for CVE-2021-25220
Security fix for CVE-2018-25032
SDL (Simple DirectMedia Layer) could be made to crash or run programs if it opened a specially crafted file.
An update that fixes four vulnerabilities is now available.
An update that fixes four vulnerabilities is now available.
Several security issues were fixed in curl.
Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
An update that fixes four vulnerabilities is now available.
Several security issues were fixed in networkd-dispatcher.
An update that solves one vulnerability, contains one feature and has one errata is now available.
