17.09.2023 00:45 A buffer overflow in parsing WebP images may result in the execution of arbitrary code. For Debian 10 buster, this problem has been fixed in version
16.09.2023 14:46 The container bci/dotnet-aspnet was updated. The following patches have been included in this update:
16.09.2023 14:46 Backport fix for CVE-2023-4863.
16.09.2023 14:46 **Redis 7.0.13** Released Wed 06 Sep 2023 15:00:00 IDT Upgrade urgency SECURITY: See security fixes below. Security Fixes * Redis does not correctly identify keys accessed by SORT_RO and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. Bug Fixes * Cluster: fix a race condition
16.09.2023 14:46 Security fix for CVE-2020-22219
16.09.2023 14:46 - fix HTTP headers eat all memory
16.09.2023 14:46 **Redis 7.0.13** Released Wed 06 Sep 2023 15:00:00 IDT Upgrade urgency SECURITY: See security fixes below. Security Fixes * Redis does not correctly identify keys accessed by SORT_RO and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. Bug Fixes * Cluster: fix a race condition
16.09.2023 04:47 New python3 packages are available for Slackware 15.0 and -current to fix a security issue.
16.09.2023 04:47 Backport fix for CVE-2023-4863.
16.09.2023 04:47 Package new upstream version of open-vm-tools-12.3.0-22234872. Security fix for CVE-2023-20900, CVE-2023-20867
16.09.2023 04:47 update to 116.0.5845.179. Fixes following security issues: CVE-2023-4427 CVE-2023-4428 CVE-2023-4429 CVE-2023-4430 CVE-2023-4431 CVE-2023-4572 CVE-2023-4761 CVE-2023-4762 CVE-2023-4763 CVE-2023-4764
16.09.2023 04:47 **Redis 7.2.1** Released Wed 06 Sep 2023 15:00:00 IDT Upgrade urgency SECURITY: See security fixes below. Security Fixes * Redis does not correctly identify keys accessed by SORT_RO and, as a result, may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. Bug Fixes * Fix crashes when joining a
16.09.2023 04:47 fix for CVE-2023-36811: spoofed archive leads to data loss Please note that starting with borgbackup 1.2.5 all borg repos must use TAM authentication: https://github.com/borgbackup/borg/blob/1.2.6/docs/changes.rst#pre-125-archives- spoofing-vulnerability-cve-2023-36811
15.09.2023 18:48 atftp could be made to crash if it received specially crafted network traffic.
15.09.2023 18:48 An update that fixes one vulnerability is now available.
