The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
- Update to 4.8.4 Release notes: https://doc.powerdns.com/recursor/changelog/4.8.html
New release with bug fixes across the tree Contains security fix for CVE-2022-48434 .
Exo could be made to crash or run programs if it opened a specially crafted file.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
* The following was previously incorrectly announced to this list * * as DLA-3388-1. The correct DLA identifier for this advisory is * * DLA-3389-1. *
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially allowing User Enumeration, Cross-Site-Scripting or …
Several security issues were fixed in Json-smart.
Several security issues were fixed in Firefox.
Important: httpd and mod_http2 security update
Important: httpd:2.4 security update
update to 112.0.5615.49. Fixes the following security issues: CVE-2023-1528 CVE-2023-1529 CVE-2023-1530 CVE-2023-1531 CVE-2023-1532 CVE-2023-1533 CVE-2023-1534
Security fix for CVE-2022-45188
## [3.1.48] - 2023-03-28 ### Security - Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447. ### Fixed - Output buff…
Security fix for CVE-2023-28879
GlusterFS 10.4 GA Security fix for CVE-2023-26253, CVE-2022-48340
Security fix for CVE-2022-45188
Several security issues were fixed in Sudo.
An update that contains security fixes can now be installed.
An update that fixes 12 vulnerabilities is now available.
The container sles-15-sp4-chost-byos-v20230410-arm64 was updated. The following patches have been included in this update:
A flaw was found in keepalived, a failover and monitoring daemon for LVS clusters, where an improper authentication vulnerability allows an unprivileged' user …
It was discovered that there were two potential denial of service (DoS) attacks in lldpd, a implementation of the IEEE 802.1ab (LLDP) protocol used to administ…