The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 16 vulnerabilities is now available.
Security fix for CVE-2023-24329
Security fix for CVE-2023-24329
Fix for CVE-2023-24329
Fix for CVE-2023-24329
Rebase to 2.4.13.2 version, fix CVE-2023-28625
Update to version 24.1.
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2023-0464
It was discovered that there was a potential arbitrary code execution vulnerability in libwebp, a library to support the WebP image compression format.
Several security issues were fixed in libvirt.
The container bci/python was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
An intended access restriction in snapd could be bypassed by strict mode snaps.
Fixes CVE-2023-32700. Also fixes issues with mptopdf.pl, thumb2pdf.pl, and mtxrun.
Several security issues were fixed in Apache Batik.
It was discovered that there was a potential buffer overflow and denial of service vulnerabilty in the gdhcp client implementation of connman, a command-line n…
Several security issues were fixed in Nanopb.
It was discovered that there was a potential denial-of-service (DoS) attack in the Kamailio SIP telephony server. This was caused by the Kamailio server mishan…
LuaTeX (TeX Live) could be made to run programs as your login if it compiled a specially crafted TeX file.
hawk could be made to crash if it opened a specially crafted file.
nth-check could be made to crash if it opened a specially crafted file.
Jhead could be made to crash if it opened a specially crafted file.