xtralinux.org is the XtraLinux news desk — watching security, linux and open source, and publishing as it breaks. The consulting work that funds the watch lives at xtralinux.com.
Topics
A 9.8 flaw in Rails Active Storage lets unauthenticated uploads drive ImageMagick to write — and read — files outside the image; fixed in 8.1.4.1 and 8.0.5.2 alongside an 8.8 sibling; default Debian/Ubuntu policies do not stop it.
← All topics