The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In just six months, the OpenWallet Foundation (OWF) has grown from three to 350 global organizations, including trillion-dollar companies, which intend to coll…
The container sles-15-sp4-chost-byos-v20230210-arm64 was updated. The following patches have been included in this update:
Update to 110.0.5481.77. Fixes the following security issues: CVE-2023-0696 CVE-2023-0697 CVE-2023-0698 CVE-2023-0699 CVE-2023-0700 CVE-2023-0701 CVE-2023-0702…
The newest upstream commit Security fixes for CVE-2023-0433, CVE-2022-47024
Fix a possible DOS involving the Qt SQL ODBC driver plugin.
Fix a possible DOS involving the Qt SQL ODBC driver plugin.
Tigervnc 1.13.0 update. CVE-2023-0494 tigervnc: xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
CVE-2023-0494: potential use-after-free in DeepCopyPointerClasses
An update that fixes four vulnerabilities is now available.
xwayland 22.1.8 - Security fix for CVE-2023-0494
New version 4.0.3.
**Version 4.4.50** (2023-02-01) * **security cve-2022-24895** [Security/Http] Remove CSRF tokens from storage on successful login (nicolas-grekas) * **security…
Rebase to upstream version 3.0.8 Resolves: CVE-2022-4203 Resolves: CVE-2022-4304 Resolves: CVE-2022-4450 Resolves: CVE-2023-0215 Resolves: CVE-2023-0216 Resolv…
New version 4.0.3.
**Version 4.4.50** (2023-02-01) * **security cve-2022-24895** [Security/Http] Remove CSRF tokens from storage on successful login (nicolas-grekas) * **security…
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Multiple security issues were discovered in libde265, an implementation of the H.265 video codec which may result in denial of service and potentially the exec…
Jacob Champion discovered that libpq can leak memory contents after GSSAPI transport encryption initiation fails. A modified server, or an unauthenticated man-…
This update fixes multiple file format validation vulnerabilities that could result in memory access violations such as buffer overflows and floating point exc…
Add upstream fix for CVE-2022-47021
Add upstream fix for CVE-2022-47021
An update that fixes one vulnerability is now available.
Use of less could result in a denial of service
Several security issues were fixed in ImageMagick.