The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Oracle 04/2022 critical path update * https://www.oracle.com/security- alerts/cpuapr2022.html#AppendixJAVA * Cross fingers I had not messed up system JDK. * ja…
Fix for CVE-2021-44269
Security fix for CVE-2022-28041 affecting `usd` via its dependency on the header-only `stb_image` library. ----- Do not package `pxrConfig.cmake` with `usd`, s…
Security fix for CVE-2022-28041 affecting `usd` via its dependency on the header-only `stb_image` library. ----- Do not package `pxrConfig.cmake` with `usd`, s…
Update to 1.6.2 (rhbz#2068277). Mitigates CVE-2022-24769 / GHSA-c9cp-9c75-9v8c.
Update to 1.1.4 (rhbz#2068719). Mitigates CVE-2022-24778 (rhbz#2069368, rhbz#2069369).
Update to 3.26.4, with bug fixes and a security fix for CVE-2021-21897. Package class documentation and examples. The following probably-relevant entries are d…
An update that solves three vulnerabilities and has one errata is now available.
An update that solves two vulnerabilities and has one errata is now available.
The container trento/trento-web was updated. The following patches have been included in this update:
The container trento/trento-runner was updated. The following patches have been included in this update:
The container trento/trento-db was updated. The following patches have been included in this update:
Rsyslog could be made to crash if it received a specially crafted request.
The container bci/bci-init was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container ses/7.1/ceph/keepalived was updated. The following patches have been included in this update:
An update that fixes 25 vulnerabilities is now available.
Multiple security issues were discovered in mruby, a lightweight implementation of the Ruby language CVE-2017-9527
This update upgrades Thunderbird to version 91.9.0. * Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909) * Mozilla: iframe Sandb…
Several security issues were fixed in Cron.
The container bci/python was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container ses/7.1/ceph/haproxy was updated. The following patches have been included in this update:
The container ses/7/ceph/grafana was updated. The following patches have been included in this update: