The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rebase to version 2.1.55
This release fixes a memory heap corruption.
Fix several low severity security bugs.
This update upgrades Firefox to version 102.10.0 ESR. * MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp * Mozilla: Fullscreen notification obscured (CVE-202…
Brief introduction Two vulnerabilities were discovered in rails, the Ruby based server-side MVC web application framework, which could lead to XSS and DOM based
Several security issues were fixed in Chromium.
The container bci/openjdk-devel was updated. The following patches have been included in this update:
Rebase to version 2.1.55
Backport patch for CVE-2023-24593.
This release fixes a memory heap corruption.
Update to 102.9.1 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-12/ ; https://www.thunderbird.net/en- US/thunderbird/102.9.1/releasenotes/ ----…
Security fix for CVE-2023-1393
xwayland 22.1.9 Security fx for CVE-2023-1393
Apport could be used to escalate privilege on specially configured systems.
Applications using Flask-CORS could be made to expose sensitive information.
Ghostscript could be made to crash or run programs as your login if it received a specially crafted input.
It was reported that HAProxy, a fast and reliable load balancing reverse proxy, does not properly initialize connection buffers when encoding the FCGI_BEGIN_RE…
A security issue weas fixed in thenify.
David Marchard discovered that Open vSwitch, a software-based Ethernet virtual switch, is suspectible to denial of service via malformed IP packets.
Smarty could be made to crash or run programs if it received a specially crafted template.
Several security issues were fixed in Thunderbird.
- New upstream update (112.0)
Update to 102.10.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-15/ ; https://www.thunderbird.net/en- US/thunderbird/102.10.0/releasenotes/
config file permission change to increase security of polkitd