Remote denial of service and several memory management issues were fixed in the epson2 driver. Continue Reading — Debian LTS: DLA-2231-1: sane-backends security update>

Remote denial of service and several memory management issues were fixed in the epson2 driver. Continue Reading — Debian LTS: DLA-2231-1: sane-backends security update>

The image view functionality in Horde Groupware Webmail Edition was affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker could have Continue Reading — Debian LTS: DLA-2230-1: php-horde security update>

The image view functionality in Horde Groupware Webmail Edition was affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker could have Continue Reading — Debian LTS: DLA-2230-1: php-horde security update>

Welcome to ChefConf Online week! On the surface, this year’s event looks a lot different than years past. While we’ve moved to a new online format, what hasn’t changed is creating the opportunity for the Chef community to gather in one place, learn about what’s new...

The json-c shared library had an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. Continue Reading — Debian LTS: DLA-2228-2: json-c regression update>

Gollem, as used in Horde Groupware Webmail Edition and other products, had been affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET dir parameter in the browser functionality, affecting Continue Reading — Debian LTS: DLA-2229-1: php-horde-gollem security update>

The json-c shared library had an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. Continue Reading — Debian LTS: DLA-2228-1: json-c security update>

An update that solves one vulnerability and has one errata is now available. Continue Reading — openSUSE: 2020:0746-1: libmspack>

New upstream release with bug and security fixes. Also, consolidates duplicate pakages marked and nodejs-marked. I tested upgrades from both, but may have missed some wonky situation. Continue Reading — Fedora 31: marked FEDORA-2020-5eca570e16>