The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Redis could be made to run programs if it received specially crafted network traffic from an authenticated user.
The container bci/bci-init was updated. The following patches have been included in this update:
The container bci/bci-init was updated. The following patches have been included in this update:
Three issues have been discovered in gif2apng: tool for converting animated GIF images to APNG format. CVE-2021-45909:
An update that fixes 8 vulnerabilities is now available.
Several security issues were fixed in OpenJDK.
Several security issues were fixed in GNU C Library.
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitr…
Several security issues were fixed in PHP.
Firefox could be made to crash or run programs as your login if it opened a malicious website.
An update that fixes one vulnerability is now available.
Felix Wilhelm discovered that the containerd container runtime was susceptible to information disclosure via malformed container images. For the stable distrib…
Two security issues have been found in the Mozilla Firefox web browser, which result in the execution of arbitrary code. For the oldstable distribution (buster…
Several issues have been found in tiff, a library and tools to manipulate and convert files in the Tag Image File Format (TIFF). CVE-2022-22844
It was discovered that the SQL plugin in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer, is prone to a SQL injection attack. …
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
Update to v0.7.1 release; Fix of CVE-2022-23645
Update to v0.6.2 release
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
An update that fixes one vulnerability is now available.
An update that fixes 15 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.