Update to 118.0.5993.70. Include following security fixes: – CVE-2023-5218: Use after free in Site Isolation. – CVE-2023-5487: Inappropriate implementation in Fullscreen. – CVE-2023-5484: Inappropriate implementation in Navigation. – CVE-2023-5475: Inappropriate implementation in DevTools. – CVE-2023-5483: Inappropriate implementation in Intents. – CVE-2023-5481:
Archive for October, 2023
Fedora 38: ansible-core 2023-e5d4a632a5
Update to 2.14.11. Mitigates CVE-2023-5115.
Ubuntu 6440-2: Linux kernel (Azure) vulnerabilities
Several security issues were fixed in the Linux kernel.
Debian: DSA-5527-2: webkit2gtk regression update
The webkit2gtk update released as 5527-1 introduced a regression that is causing programs such as yelp, liferea or gnucash to stop working in certain cases.
Fedora 37: trafficserver 2023-54fadada12
Update to upstream 9.2.3 Resolves CVE-2023-44487, CVE-2023-41752, CVE-2023-39456
Fedora 38: matrix-synapse 2023-c3c8cc5f8b
Update to v1.94.0 (CVE-2023-45129)
Fedora 38: trafficserver 2023-5ff7bf1dd8
Update to upstream 9.2.3 Resolves CVE-2023-44487, CVE-2023-41752, CVE-2023-39456
Ubuntu 6446-1: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6445-1: Linux kernel (Intel IoTG) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6444-1: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6443-1: Linux kernel (OEM) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6442-1: Linux kernel (BlueField) vulnerabilities
Several security issues were fixed in the Linux kernel.
State of the Word 2023 – Save the Date
It’s time to save the date, December 11, 2023, for this year’s State of the Word 2023! State of the Word is the annual keynote address delivered by the WordPress project’s co-founder, Matt Mullenweg. Every year, the event shares reflections on the project’s progress and aspirations for the future of open source.
Ubuntu 6416-3: Linux kernel (Raspberry Pi) vulnerabilities
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in GLib.
Latest updates
Latest updates
The journey to update WordPress.org continues with the launch of a new Showcase design. The Showcase is a natural starting point for visitors arriving on WordPress.org, and it both inspires creativity and demonstrates what’s possible with WordPress. From unique personal blogs and portfolios to enterprises and celebrity fan sites, the Showcase celebrates WordPress’s flexibility, popularity, […]
Several security issues were fixed in VIPS.
PMIx could be made to overwrite files.
– Release 115.3.1
Fedora 38: python-configobj 2023-27b41bb133
Fixes an issue in configobj: CVE-2023-26112
Debian: DSA-5529-1: slurm-wlm security update
Francois Diakhate discovered that several race conditions in file processing of the Simple Linux Utility for Resource Management (SLURM), a cluster resource management and job scheduling system, could result in denial of service by overwriting arbitrary files.
Oracle Critical Patch Update Advisory – October 2023
WordPress 6.4 RC1 is ready for download and testing. Reaching this phase of the release cycle is an important milestone. Check out what’s new and how to get involved.
Ubuntu 6433-1: Ghostscript vulnerability
Ghostscript could be made to run programs if it opened a specially crafted file.
Several security issues were fixed in Samba.
Debian: DSA-5522-3: tomcat9 regression update
A regression was discovered in the Http2UpgradeHandler class of Tomcat 9 introduced by the patch to fix CVE-2023-44487 (Rapid Reset Attack). A wrong value for the overheadcount variable forced HTTP2 connections to close early.
Debian: DSA-5528-1: node-babel7 security update
William Khem-Marquez discovered that using malicious plugins for the the Babel JavaScript compiler could result in arbitrary code execution during compilation
– fix cookie injection with none file (CVE-2023-38546) – fix SOCKS5 heap buffer overflow (CVE-2023-38545)