The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
**Version 2.15.3** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
Updated to version 0.10.2 with CVE fix.
**Version 1.44.7** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
Remove Alias directive from booth@.service unit file ---- Security fix for CVE-2022-2553
**Version 3.4.3** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
**Version 2.15.3** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
**Version 1.44.7** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
Remove Alias directive from booth@.service unit file ---- Security fix for CVE-2022-2553
**PHP version 8.0.24** (29 Sep 2022) **Core:** * Fixed bug [GH-9323](https://github.com/php/php-src/issues/9323) (Crash in ZEND_RETURN/GC/zend_call_function) (…
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
An update that fixes one vulnerability is now available.
Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. CVE-2022-2928
Evgeny Vereshchagin discovered multiple vulnerabilities in D-Bus, a simple interprocess messaging system, which may result in denial of service by an authentic…
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Lahav Schlesinger discovered a vulnerability in the revocation plugin of strongSwan, an IKE/IPsec suite. The revocation plugin uses OCSP URIs and CRL distribut…
expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS sco…
squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318) For more details about the security issue(s), including the impact, a CVSS score, ackno…
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.