Update to the latest upstream version, which includes a fix for CVE-2023-45142. https://github.com/caddyserver/caddy/releases/tag/v2.7.6
Archive for February, 2024
Debian: DSA-5626-1: pdns-recursor security update
It was discovered that malformed DNSSEC records within a DNS zone could result in denial of service against PDNS Recursor, a resolving name server.
Rabase to 1.9.15p5
Fedora 39: qt5-qtbase 2024-d9be3edddb
Fix CVE-2024-25580: potential buffer overflow when reading KTX images.
Update to 2.11.5
Update to 1.7.2 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575
Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575
Fedora 39: libgit2_1.6 2024-605004a28e
Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575
Rebase to version 2.6.0
Debian: DSA-5625-1: engrampa security update
It was discovered that Engrampa, an archive manager for the MATE desktop environment was susceptible to path traversal when handling CPIO archives.
Ubuntu 6626-3: Linux kernel (Azure) vulnerabilities
Several security issues were fixed in the Linux kernel.
shadow could be made to expose sensitive information.
Ubuntu 6629-3: UltraJSON vulnerabilities
Several security issues were fixed in UltraJSON.
Ubuntu 6639-1: Linux kernel (OEM) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6628-2: Linux kernel (Intel IoTG) vulnerabilities
Several security issues were fixed in the Linux kernel.
update to 1.26.2
Security fix for CVE-2024-22667 enable building without GPM support – build with GPM in Fedora 2262371 – gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer The newest upstream commit
Ubuntu 6638-1: EDK II vulnerabilities
Several security issues were fixed in EDK II.
Debian: DSA-5622-1: postgresql-13 security update
It was discovered that a late privilege drop in the “REFRESH MATERIALIZED VIEW CONCURRENTLY” command could allow an attacker to trick a user with higher privileges to run SQL commands with these permissions.
Debian: DSA-5623-1: postgresql-15 security update
It was discovered that a late privilege drop in the “REFRESH MATERIALIZED VIEW CONCURRENTLY” command could allow an attacker to trick a user with higher privileges to run SQL commands with these permissions.
Debian: DSA-5624-1: edk2 security update
Mate Kukri discovered the Debian build of EDK2, a UEFI firmware implementation, used an insecure default configuration which could result in Secure Boot bypass via the UEFI shell.
2023 Annual Survey Results and Next Steps
Each year, WordPress seeks to collect high-level data about trends and themes across the vast ecosystem of users, site builders, extenders, and contributors to help inform decision-making and provide valuable feedback on the project’s status. For 2023, the survey process was updated to enhance accessibility, usability, analysis, and multilingual support. Additionally, a few questions were replaced or updated to ensure the survey captures relevant data on current and future WordPress topics. The data collected is used as one of many signals that inform the project’s road map and areas of focus, both near and long-term.
For 2023, the survey process was updated to enhance accessibility, usability, analysis, and multilingual support. Additionally, a few questions were replaced or updated to ensure the survey captures relevant data on current and future WordPress topics. I use the data collected from this survey as one of many signals to inform the project’s road map and areas of focus, both near and long-term.
How to Secure Your Linux Server: A Detailed Guide
Does your business use Linux? If so, you’re not alone: countless other companies around the world rely on it daily too. One of the biggest benefits of using Linux is that Linux servers are open source, which makes them some of the most flexible and cost-effective servers available. Linux allows you to share resources and take part in its user community, which is particularly helpful for smaller businesses. It’s no surprise that Linux is a common choice for entrepreneurs launching new enterprises. However, as Linux is open source, it has its fair share of security flaws that you need to…
The post How to Secure Your Linux Server: A Detailed Guide appeared first on Plesk.
Ubuntu 6636-1: ClamAV vulnerabilities
Several security issues were fixed in ClamAV.
Ubuntu 6635-1: Linux kernel (GCP) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6608-2: Linux kernel (NVIDIA) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6626-2: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Debian: DSA-5621-1: bind9 security update
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. For the oldstable distribution (bullseye), these problems have been fixed
Debian: DSA-5620-1: unbound security update
Two vulnerabilities were discovered in unbound, a validating, recursive, caching DNS resolver. Specially crafted DNSSEC answers could lead unbound down a very CPU intensive and time costly DNSSEC (CVE-2023-50387) or NSEC3 hash (CVE-2023-50868) validation path,
Update to 1.0.5