The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container bci/python was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
Security fix for CVE-2022-21698, skopeo likely not directly impacted ---- tests subpackage depends on /usr/sbin/unsquashfs
The newest upstream commit Security fix for CVE-2022-0943
Security fix for CVE-2022-21698
The system could be made to crash or run programs as an administrator.
Multiple security issues were discovered in pjproject, is a free and open source multimedia communication library. CVE-2021-32686
Libtasn1 could be made to crash if it opened a specially crafted file.
openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778) For more details about the security issue(s), including the impact,…
expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235) * expat: Namespace-separator characters in "xmlns[:prefix]…
Several security issues were fixed in Smarty.
GNU binutils could be made to crash if it opened a specially crafted file.
Several security issues were fixed in Python.
A security issue was discovered in Chromium, which could result in the execution of arbitrary code if a malicious website is visited. For the stable distributi…
Multiple speculative security issues [XSA-398]
Multiple vulnerabilities have been discovered in the freeware Advanced Audio Decoder, which may result in denial of service or potentially the execution of arb…
This is the March 2022 update for .NET Core 3.1: SDK 3.1.417 and Runtime 3.1.23 Release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.…
CVE-2022-24302: Creation of new private key files using `~paramiko.pkey.PKey` subclasses was subject to a race condition between file creation and mode modific…
This is the March 2022 update for .NET Core 3.1: SDK 3.1.417 and Runtime 3.1.23 Release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.…
CVE-2022-24302: Creation of new private key files using `~paramiko.pkey.PKey` subclasses was subject to a race condition between file creation and mode modific…
Fix for CVE-2022-0860
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update: