Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The Black Basta ransomware-as-a-service (RaaS) syndicate has amassed nearly 50 victims in the U.S., Canada, the U.K., Australia, and New Zealand within two mon…
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
The c_rehash script allows command injection. (CVE-2022-2068) References: - https://bugs.mageia.org/show_bug.cgi?id=30573 - https://www.openssl.org/news/secadv…
Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799) References: - https://bugs.mageia.org/show_bug.cgi?id=30532
An attacker submitting the JWT token can choose the used signing algorithm (CVE-2022-29217) References: - https://bugs.mageia.org/show_bug.cgi?id=30485
A heap use-after-free vulnerability was found in systemd, a system and service manager, where asynchronous Polkit queries are performed while handling dbus mes…
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
uBlock, a Firefox add-on and efficient ads, malware and trackers blocker, supported an arbitrary depth of parameter nesting for strict blocking, which allows c…
Matthias Gerstner discovered that the --join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalatio…
Several issues have been found in blender, a very fast and versatile 3D modeller/renderer.
Two issues have been found in libsndfile, a library for reading/writing audio files.
Multiple vulnerabilities were discovered in Node.js, which could result in HTTP request smuggling, a bypass of certificate verification or prototype pollution.
It was discovered that the c_rehash script included in OpenSSL did not sanitise shell meta characters which could result in the execution of arbitrary commands.
The container bci/python was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
The chromium-browser-stable package has been updated to the 103.0.5060.53 branch, fixing many bugs and 14 CVE. Some of them are listed below: Use after free in…
Heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c. (CVE-2022-1354) Stack-buffer-overflow in tiffcp.c in main(). (CVE-2022-1355) Out-of-bounds read…
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can…
Changed to prevent executing possibly malicious .desktop files from online sources (ftp://, http:// etc.). References: - https://bugs.mageia.org/show_bug.cgi?i…
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
