The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Booth could be made to be stop working under certain circumstances.
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
Several security issues were fixed in protobuf-c.
Bottle could be made to leak sensitive information if it received a specially crafted request.
Researchers have discovered numerous zero-day bugs in the MiCODUS GPS tracker, threatening vehicle security. US…Multiple Zero-Day Bugs Spotted In Vehicle GPS T…
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation. In addition this updates provides mitigations …
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
A few years ago Google completed its switch from an Ubuntu-based Linux desktop to Debian. Now Google has detailed how this change has led to rolling releases f…
Consumer electronics maker Lenovo on Tuesdayrolled out fixesto contain three security flaws in its UEFI firmware affecting over 70 product models."The vulnerab…
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
The recent OpenSSL updates address two security bugs in the service, including a high-severity vulnerability…Severe Remote Code Execution Vulnerability Riddled…
If you spent the early days of June fighting kernel panics in Ubuntu 20.04, you were not alone '' and we now know why.
Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799) References: - https://bugs.mageia.org/show_bug.cgi?id=30532
Researchers have found more than 50 different security vulnerabilities affecting hundreds of industrial devices. Identified…Over 50 OT:ICEFALL Vulnerabilities …
uboot-tools-2022.04-2: * Fixes for Pine64 Pinebook Pro * Fix for CVE-2022-30767 (NFSv2) * Fix for CVE-2018-25032 (zlib)
postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox (CVE-2022-1552) For more details about the security issue(s), includin…
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
The container bci/dotnet-aspnet was updated. The following patches have been included in this update:
The container bci/dotnet-aspnet was updated. The following patches have been included in this update:
logrotate could be made to stop processing log files.
Prototype pollution in Top-Level Await implementation. (CVE-2022-1802) Untrusted input used in JavaScript object indexing, leading to prototype pollution. (CVE…
A serious cross-site scripting (XSS) vulnerability existed in the Swagger UI library that could allow…Swagger UI Library Vulnerability Potentially Affects Mult…
The container bci/dotnet-runtime was updated. The following patches have been included in this update: