Perl could be made to install modules from untrusted sources.
security update
Two vulnerabilities were fixed in GNU cpio, a program to manage archives of files. CVE-2019-14866
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
Latest MariaDB minor maintenance release 10.3.39 included a fix for the following security vulnerability: CVE-2022-47015
Rebase to upstream version 3.0.9
Given the reliance of today’s digital world on APIs and the fact that attacks targeting them continue to rise sharply, API security cannot be an afterthought. The post API security in the spotlight – Week in security with Tony Anscombe appeared first on WeLiveSecurity
Alvaro Mu’±oz from the GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert, a tool and library used to convert notebooks to various other formats via Jinja templates.
Red Hat OpenShift Container Platform release 4.13.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13.
Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
Red Hat OpenShift Container Platform release 4.13.1 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13.
Red Hat OpenShift Container Platform release 4.11.42 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11.
Red Hat OpenShift Container Platform release 4.13.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13.
As APIs are a favorite target for threat actors, the challenge of securing the glue that holds various software elements together is taking on increasing urgency The post All eyes on APIs: Top 3 API security risks and how to mitigate them appeared first on WeLiveSecurity
The container suse/sle15 was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/bci-init was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
security update
A roundup of some of the handiest tools for the collection and analysis of publicly available data from Twitter, Facebook and other social media platforms The post 5 free OSINT tools for social media appeared first on WeLiveSecurity
A peek under the hood of a cybercrime operation and what you can do to avoid being an easy target for similar ploys The post Tricks of the trade: How a cybercrime ring operated a multi‑level fraud scheme appeared first on WeLiveSecurity
CUPS could be made to crash or run programs if it received specially crafted network traffic.
The container suse/sles12sp4 was updated. The following patches have been included in this update:
Update to version 24.1.
Security fix for CVE-2023-0341: update to 0.12.6 (close RHBZ#2162811)
include latest dbx update (may 9th, black lotus edition). —- drop ASSERT from NestedInterruptTplLib (rhbz#2183336).
Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes security and bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
Several security issues were fixed in libvirt.
The container bci/python was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container suse/registry was updated. The following patches have been included in this update:
security update
LuaTeX (TeX Live) could be made to run programs as your login if it compiled a specially crafted TeX file.
hawk could be made to crash if it opened a specially crafted file.
nth-check could be made to crash if it opened a specially crafted file.
Jhead could be made to crash if it opened a specially crafted file.
The container bci/openjdk-devel was updated. The following patches have been included in this update:
Multiple vulnerabilities have been found in Apache Tomcat, the worst of which could result in denial of service.
security update
Multiple vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escalation.
Several security issues were fixed in Sudo.
Jhead could be made to crash if it opened a specially crafted file.
Linux PTP could be made to crash, run arbitrary code, or expose sensitive information if it received specially crafted input.
Update bottles to 51.6 and release final dependency vkbasalt-cli
Update bottles to 51.6 and release final dependency vkbasalt-cli
security update
security update
An update that fixes 43 vulnerabilities is now available.
Update to 1.19.1. Fixes CVE-2023-32067, CVE-2023-31130, CVE-2023-31147, CVE-2023-31124
Update to 0.10.5 (CVE-2023-1667 CVE-2023-2283)
Cross-site scripting (XSS) vulnerabilities were found in rainloop, a web-based email client, which could lead to information disclosure including passphrase leak.
