The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
Ruby could allow for internet traffic to be modified if a vulnerable application processed malicious user input.
PHP could be made do crash or execute arbitrary code if it received a specially crafted input.
Setuptools could be made to crash if it received specially crafted input.
Multiple vulnerabilities were found in trafficserver, a caching proxy server. CVE-2021-37150
Several security issues were fixed in Firefox.
The 6.1.7 stable kernel update contains a number of important fixes across the tree.
- Update to 109.0
This updates .NET 6 to the January 2023 security release. The updated versions are SDK 6.0.113 and Runtime 6.0.13 This include a fix for CVE-2023-21538
Patches for CVE-2023-23456 and CVE-2023-23457
Rebase to sudo-1.9.12p2 - security fix for CVE-2023-22809
libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883
This updates .NET 6 to the January 2023 security release. The updated versions are SDK 6.0.113 and Runtime 6.0.13 This include a fix for CVE-2023-21538
An update that contains security fixes can now be installed.
An update that fixes one vulnerability is now available.
The container bci/ruby was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Security fix for CVE-2022-46176: Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. For more details, see the upstr…
Add patches for CVE-2021-43138, CVE-2022-3517, CVE-2020-7677
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Add patches for CVE-2021-43138, CVE-2022-3517, CVE-2020-7677
Multiple vulnerabilities were found in tiff, a library and tools providing support for the Tag Image File Format (TIFF), leading to denial of service (DoS) and…