The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container ses/7.1/ceph/ceph was updated. The following patches have been included in this update:
The container ses/7.1/cephcsi/cephcsi was updated. The following patches have been included in this update:
Several security issues were fixed in Twig.
Several security issues were fixed in Protocol Buffers.
Several security issues were fixed in Thunderbird.
Multiple vunerabilities were discovered in rails, the Ruby based server-side MVC web application framework, which could result in XSS, data disclosure and open…
Update to OWSLib-0.28.1, fixes CVE-2023-27476.
Security fix for CVE-2022-41717 ---- Resolves: 2161300 - set _fortify_level 3
Resolves: #2161274, #2163068 - Rebuild for CVE-2022-41717
ruby-sidekiq, a simple, efficient background processing for Ruby, had a couple of vulnerabilities as follows: CVE-2021-30151
libapache2-mod-auth-mellon, a SAML 2.0 authentication module for Apache, were reported to have the following vulnerabilities. CVE-2019-13038
update to 111.0.5563.64. Fixes the following security issues: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932 CVE-2023-0933…
An issue has been found in mpv, a video player based on MPlayer/mplayer2. Due to a use after free an attacker coudl execute arbitrary code or crash the program…
Several vulnerabilities have been discovered in imagemagick that may lead to a privilege escalation, denial of service or information leaks. CVE-2020-19667
Update to 5.9.10 for CVE-2023-26463
Security fix for CVE-2022-43272
Apply upstream libtiff fix for CVE-2022-4645
Release of stargz snapshotter v0.14.2 https://github.com/containerd/stargz- snapshotter/releases/tag/v0.14.2 This release uses containerd v1.7.0-rc.1 so this r…
Update to python-werkzeug-2.2.3.
Backport patch for CVE-2023-25587.
Update to 5.9.10 for CVE-2023-26463
Security fix for CVE-2022-43272
- Update to 2.2.3
**Redis 7.0.9** - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-25155**) Sp…