Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 0.8.7. This new release fixes CVE-2022-25765.
Update to 0.8.7. This new release fixes CVE-2022-25765.
An update that fixes two vulnerabilities is now available.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. (CVE-2022-29970) References: - https://bugs.mageia.…
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities and has one errata is now available.
An update that fixes two vulnerabilities is now available.
New version 2.8.5 is released. This new version address the security issue CVE-2022-31033 related to header information leak.
An update that fixes one vulnerability is now available.
Security fix for CVE-2022-25648
Nokogiri did not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (s…
This rpm backports the patch for the issue for improper handling of unexpected data types, related to untrusted inputs to the SAX parsers, which is assigned as…
New version 1.13.6 is released. This rpm addresses the issue for improper handling of unexpected data types, related to untrusted inputs to the SAX parsers, wh…
This rpm backports the patch for the issue for improper handling of unexpected data types, related to untrusted inputs to the SAX parsers, which is assigned as…
Fix for possible DOS by regex. (CVE-2022-24836) References: - https://bugs.mageia.org/show_bug.cgi?id=30322 - https://lists.fedoraproject.org/archives/list/pac…
An update that fixes three vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
Backport fix for possible DOS by regex assigned as CVE-2022-24836.
Double free in Regexp compilation (CVE-2022-28738). A buffer overrun was found in String-to-Float conversion (CVE-2022-28739). References: - https://bugs.magei…
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
