The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
February 12, 2023
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
February 12, 2023
xwayland 22.1.8 – Security fix for CVE-2023-0494
February 12, 2023
security update
February 11, 2023
The container suse/manager/4.3/proxy-tftpd was updated. The following patches have been included in this update:
February 11, 2023
The container suse/manager/4.3/proxy-ssh was updated. The following patches have been included in this update:
February 11, 2023
The container suse/manager/4.3/proxy-squid was updated. The following patches have been included in this update:
February 11, 2023
The container suse/manager/4.3/proxy-salt-broker was updated. The following patches have been included in this update:
February 11, 2023
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
February 11, 2023
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
February 11, 2023
Securing open source development: A supply chain perspective
February 10, 2023
This update fixes multiple file format validation vulnerabilities that could result in memory access violations such as buffer overflows and floating point exceptions. It also fixes a regression in hcom parsing introduced when fixing CVE-2017-11358.
February 10, 2023
Add upstream fix for CVE-2022-47021
February 10, 2023
Add upstream fix for CVE-2022-47021
February 10, 2023
Several security issues were fixed in the Linux kernel.
February 9, 2023
Several security issues were fixed in the Linux kernel.
February 9, 2023
Several security issues were fixed in the Linux kernel.
February 9, 2023
security update
February 9, 2023
security update
February 9, 2023
security update
February 9, 2023
The container suse/sle15 was updated. The following patches have been included in this update:
February 9, 2023
The container bci/rust was updated. The following patches have been included in this update:
February 9, 2023
The container bci/rust was updated. The following patches have been included in this update:
February 9, 2023
The container bci/ruby was updated. The following patches have been included in this update:
February 9, 2023
The container suse/rmt-server was updated. The following patches have been included in this update:
February 9, 2023
The container suse/rmt-nginx was updated. The following patches have been included in this update:
February 9, 2023
security update
February 8, 2023
security update
February 8, 2023
security update
February 8, 2023
Helmut Grohne discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check
February 8, 2023
This release fixes various issues in shim bootloader and updates it to a supported version. Older versions of the shim may eventually be blocked by Secure Boot, so it is strongly advised for Secure Boot enabled systems to upgrade to this newer version to keep the system bootable.
February 8, 2023
I discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check handlers for gssapi,
February 8, 2023
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
February 8, 2023
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
February 8, 2023
An update that fixes two vulnerabilities is now available.
February 8, 2023
History of Malware on Linux and What’s Being Done to Stop It
February 7, 2023
Red Hat OpenShift Container Platform release 4.11.26 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 7, 2023
The container bci/python was updated. The following patches have been included in this update:
February 7, 2023
The container suse/sle15 was updated. The following patches have been included in this update:
February 7, 2023
Jan-Niklas Sohn, working with Trend Micro Zero Day Initiative, discovered a vulnerability in the X.Org X server. A potential use after free mighty result in local privilege escalation if
February 7, 2023
It was discovered that there were a number of issues in graphite-web, a tool provide realtime graphing of system statistics etc. A series of cross-site scripting (XSS) vulnerabilties existed that
February 7, 2023
NULL pointer dereferences in op_get_data() and op_open1() in opusfile.c (CVE-2022-47021) References: – https://bugs.mageia.org/show_bug.cgi?id=31505
February 7, 2023
security update
February 6, 2023
Ikeda Soji reported that libhtml-stripscripts-perl, a Perl module for removing scripts from HTML, is prone to a regular expression denial of service, due to catastrophic backtracking for HTML content with specially crafted style attributes.
February 6, 2023
EditorConfig Core C could be made to crash or run programs if it received specially crafted input.
February 6, 2023
Several security issues were fixed in Thunderbird.
February 6, 2023
USN-5825-1 caused some minor regressions in PAM.
February 6, 2023
USN-5816-1 caused some minor regressions in Firefox.
February 6, 2023
Security fix for CVE-2022-4510
February 5, 2023
# New in release [OpenJDK 8u362](https://bit.ly/openjdk8u362) (2023-01-17) ## CVEs Fixed – CVE-2023-21830 – CVE-2023-21843 ## Security Fixes – JDK-8285021: Improve CORBA communication – JDK-8286496: Improve Thread labels – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges – JDK-8293598: Enhance InetAddress
February 5, 2023
# New in release [OpenJDK 11.0.18](https://bit.ly/openjdk11018) (2023-01-17) ## CVEs Fixed – CVE-2023-21835 – CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges
February 5, 2023
# New in release [OpenJDK 17.0.6](https://bit.ly/openjdk1706) (2023-01-17) ## CVEs Fixed – CVE-2023-21835 – CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges
February 5, 2023
# New in release OpenJDK 19.0.2 (2023-01-17) ## CVEs Fixed * CVE-2023-21835 * CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8293554: Enhanced DH Key Exchanges – JDK-8293598: Enhance InetAddress address handling – JDK-8293717: Objective
February 5, 2023
Rebase to sudo 1.9.12p2 – security fix for CVE-2023-22809
February 5, 2023
Red Hat OpenShift sandboxed containers: Peer-pods solution overview
February 4, 2023
Red Hat OpenShift sandboxed containers: Peer-pods hands-on
February 4, 2023
CSAF VEX documents now generally available
February 4, 2023
An update that fixes one vulnerability is now available.
February 4, 2023
The 6.1.9 stable kernel update contains a number of important fixes across the tree.
February 4, 2023
Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of golang that addresses CVE-2022-41717, and it fixes the installation of icon files.
February 4, 2023
The 6.1.9 stable kernel update contains a number of important fixes across the tree.
February 4, 2023
Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of golang that addresses CVE-2022-41717, and it fixes the installation of icon files.
February 4, 2023
Several security issues were fixed in LibTIFF.
February 3, 2023
Several security issues were fixed in Long Range ZIP.
February 3, 2023
Several security issues were fixed in Apache HTTP Server.
February 3, 2023
The newest upstream commit Security fix for CVE-2023-0288
February 3, 2023
Update to 109.0.5414.119. Fixes the following security issues: CVE-2023-0471 CVE-2023-0472 CVE-2023-0473 CVE-2023-0474
February 3, 2023
New openssh packages are available for Slackware 15.0 and -current to fix security issues.
February 2, 2023
security update
February 2, 2023
security update
February 2, 2023
security update
February 2, 2023
security update
February 2, 2023
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
February 2, 2023
Rebuild for CVE-2022-41717 in golang.
February 2, 2023
Fix CVE-2022-47021
February 2, 2023
new upstream version
February 2, 2023
Rebuild for CVE-2022-41717 in golang.
February 2, 2023
Update to pgadmin4-6.19. —- Backport fix for CVE-2023-22298.
February 2, 2023
Several security issues were fixed in Vim.
February 1, 2023
An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed
February 1, 2023
Beyond the STIG: What hardening really means
February 1, 2023
Several security issues were fixed in Slurm.
February 1, 2023
Update to 2.53.15
February 1, 2023
Several vulnerabilities have been fixed in the libstb library. CVE-2018-16981
January 31, 2023
Brief introduction CVE-2020-21529
January 31, 2023
python-future could be made to crash if it received specially crafted input.
January 31, 2023
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
January 31, 2023
The container bci/ruby was updated. The following patches have been included in this update:
January 31, 2023
The container bci/openjdk was updated. The following patches have been included in this update:
January 31, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
January 31, 2023
The container bci/golang was updated. The following patches have been included in this update:
January 31, 2023
security update
January 30, 2023
security update
January 30, 2023
Data Privacy Day, every day
January 30, 2023
The components for Red Hat OpenShift support for Windows Container 7.0.0 are now available. This product release includes bug fixes and a moderate security update for the following packages: windows-machine-config-operator and
January 30, 2023
The container bci/rust was updated. The following patches have been included in this update:
January 30, 2023
The container bci/rust was updated. The following patches have been included in this update:
January 30, 2023