The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Add upstream patch for CVE-2021-42521 - vtkXMLTreeReader: possible nullptr dereference
The system could be made to run programs as an administrator.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, spoofing or per…
SQL parse could be made to denial of service if it received a specially crafted regular expression.
Open vSwitch could be made to stop forwarding packets if it received specially crafted network traffic.
Several security issues were fixed in OpenStack Neutron.
OpenStack Heat could be made to expose sensitive information.
Several security issues were fixed in css-what.
Patch for CVE-2023-1729.
update to 113.0.5672.64. Fixes the following security issues: CVE-2023-2459 CVE-2023-2460 CVE-2023-2461 CVE-2023-2462 CVE-2023-2463 CVE-2023-2464 CVE-2023-2465…
**MySQL 8.0.33** Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html
**MySQL 8.0.33** Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html
update to 113.0.5672.64. Fixes the following security issues: CVE-2023-2459 CVE-2023-2460 CVE-2023-2461 CVE-2023-2462 CVE-2023-2463 CVE-2023-2464 CVE-2023-2465…
Several security issues were fixed in Ceph.
The container trento/trento-web was updated. The following patches have been included in this update:
FreeType could be made to crash or possibly execute arbitrary code if it opened a specially crafted font file.
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
The container bci/dotnet-aspnet was updated. The following patches have been included in this update:
The container bci/dotnet-aspnet was updated. The following patches have been included in this update:
A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue i…
A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue i…