The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
- Update the sequoia-openpgp crate to version 1.16.0. - Update the nettle crate to version 7.3.0. - Update the nettle-sys crate to version 2.2.0. - Update the …
Multiple issues were found in GPAC multimedia framework, whcih could result in denial of service or potentially the execution of arbitrary code. For the stable…
An issue has been found in sniproxy, a transparent TLS and HTTP layer 4 proxy with SNI support. Due to bad handling of wildcard backend hosts, a crafted HTTP o…
Update to 1.19.1. Fixes CVE-2023-32067, CVE-2023-31130, CVE-2023-31147, CVE-2023-31124
Important: libwebp security update
nvme-cli bug fix and enhancement update
Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
tomcat bug fix and enhancement update
A Django hardening measure could be bypassed.
The container bci/bci-init was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The CA certificates in the ca-certificates package were updated.
Jhead could be made to crash or run programs as your login if it opened a specially crafted file.
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/openjdk was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/bci-init was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
Important: git security update
Security fix for CVE-2023-31137, CVE-2022-30256
Security fix for CVE-2023-31137, CVE-2022-30256
HTML::StripScripts could be made to crash if it received specially crafted input.