The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container bci/rust was updated. The following patches have been included in this update:
The container bci/ruby was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
libXpm could be made to denial of service if it received a specially crafted XPM file.
A new kernel module rootkit malware was released recently on GitHub, dubbed Reptile. It's an open-source rootkit that has the ability to hide itself, other mal…
The container bci/rust was updated. The following patches have been included in this update:
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
The container bci/dotnet-aspnet was updated. The following patches have been included in this update:
Update to 102.13.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-24/ ; https://www.thunderbird.net/en- US/thunderbird/102.13.0/releasenotes/
version 0.29.1 fixes CVE-2008-2383
Bump version to 2.3.5
Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in "Zen 2" CPUs may not be written to 0 correctly. This flaw a…
Arbitrary file write vulnerabilities were discovered in pandoc, an Haskell library and CLI tool for converting from one markup format to another. These vulnera…
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in bypass of sandbox restrictions, information disclosure, reduced c…
A memory allocation issue was found in iperf3, the Internet Protocol bandwidth measuring tool, that may cause a denial of service when encountering a certain i…
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of servi…
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of servi…
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of servi…
Trove could be made to run programs if it received specially crafted backup commands.
The container bci/python was updated. The following patches have been included in this update:
AMD processors may allow an attacker to expose sensitive information due to a vector register speculative execution vulnerability.