Ike.ninja

Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536

Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp.

Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp.

– New version 6.6 – Important security fixes – Removed gopher support

– New version 6.6 – Important security fixes – Removed gopher support

Several vulnerabilities were discovered in libssh, a tiny C SSH library. CVE-2023-6004

Multiple vulnerabilities were discovered in Node.js, which could result in HTTP request smuggling, bypass of policy feature checks, denial of service or loading of incorrect ICU data.

Fix for Terrapin vulnerability

In this episode, WordPress Executive Director Josepha Haden Chomphosy reflects on the recent 2023 State of the Word, which took place in Madrid, Spain, and some of the highlights of the work across the WordPress open source project.

# UnrealIRCd 6.1.4 This release fixes a crash issue with websockets in UnrealIRCd 6.1.0 – 6.1.3. The full advisory with all details is available at: https://forums.unrealircd.org/viewtopic.php?t=9340 ## Fixes * Crash that can be triggered by users when [Websockets](https://www.unrealircd.org/docs/WebSocket_support) are in use (a

Update to 1.22.7, fixes CVE-2023-37327, CVE-2023-37328, CVE-2023-37329.

Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol is prone to a prefix truncation attack, known as the “Terrapin attack”. This attack allows a MITM attacker to effect a limited break of the integrity of the early encrypted SSH transport

Two security issues were discovered in Curl: Cookies were incorrectly validated against the public suffix list of domains and in same cases HSTS data could fail to save to disk.

Fix for terrapin vulnerability

Several vulnerabilities have been discovered in OpenSSH, an implementation of the SSH protocol suite. CVE-2021-41617