The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that jupyter-core, the core common functionality for Jupyter projects, could execute arbitrary code in the current working directory while lo…
The container bci/python was updated. The following patches have been included in this update:
- Updated to latest upstream (114.0)
The system could suffer with performance degradation in certain conditions.
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2023-0464
Several security issues were fixed in SpiderMonkey.
Several security issues were fixed in Netatalk.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Update to 1.14.8
- fix more POST-after-PUT confusion (CVE-2023-28322) - fix IDN wildcard match (CVE-2023-28321)
Security fix for CVE-2023-24329
Security fix for CVE-2023-24329
Security fix for CVE-2023-24329
Fix for CVE-2023-24329
Sysstat could be made to crash or run programs if it processed specially crafted data.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Two regular expression Denial of Service (ReDoS) issues were discovered in Ruby: the first in the URI component, and the second in the Time module. Each of the…
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339) For more details about the security issue(s), including the impact, a CVSS score, ack…
Several security issues were fixed in libxml2.
Several security issues were fixed in LibreOffice.
Several security issues were fixed in Firefox.
Two vunerabilities were discovered in c-ares, an asynchronous name resolver library: CVE-2023-31130
- Updated to latest upstream (114.0)