The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: kernel-rt security and bug fix update
Several security issues were fixed in Git.
The Qualys Research Labs reported an authorization bypass (CVE-2022-41974) and a symlink attack (CVE-2022-41973) in multipath-tools, a set of tools to drive th…
USN-5880-1 caused some minor regressions in Firefox.
The container ses/7.1/rook/ceph was updated. The following patches have been included in this update:
The container ses/7.1/ceph/prometheus-snmp_notifier was updated. The following patches have been included in this update:
The container ses/7.1/ceph/prometheus-server was updated. The following patches have been included in this update:
Release of gnutls 3.8.0 (fixes CVE-2023-0361) Release of gnutls guile bingings as standalone package.
Release of gnutls 3.8.0 (fixes CVE-2023-0361) Release of gnutls guile bingings as standalone package.
It was discovered that syslog-ng, a system logging daemon, had integer overflow and buffer out-of-bounds issues, which could allow a remote attacker to cause D…
An update that contains security fixes can now be installed.
Several security issues were fixed in lighttpd.
USN-5821-1 caused a regression in pip.
git: gitattributes parsing integer overflow (CVE-2022-23521) * git: Heap overflow in `git archive`, `git log --format` leading to RCE (CVE-2022-41903) For more…
Several security issues were fixed in PHP.
GnuTLS could be made to expose sensitive information over the network.
AWStats could allow cross-site scripting (XSS) attacks.
IPFire 2.27 Core Update 173 is out to introduce support for 4G and 5G modems that use the QMI interface.
Several security issues were fixed in Python.
Several security issues were fixed in OpenJDK.
Several security issues were fixed in OpenJDK.
- fix HTTP multi-header compression denial of service (CVE-2023-23916)
Important: webkit2gtk3 security update
Important: webkit2gtk3 security update