August 9, 2022-KB5015730 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2

None None...

August 9, 2022-KB5016373 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

virt:kvm_utils security update

libvirt 5.7.0-34.el8 - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy Peter Krempa Orabug: 33091019 - qemu: capabilities: Introduce QEMUCAPSBLOCKDEVSNAPSHOTALLOWWRITEONLY Peter Krempa Orabug: 33091019 - qemuDomainBlockCopyCommon: Record updated flags to block job Peter...

OPENSUSE-SU-2022:10081-1 Security update for trivy

This update for trivy fixes the following issues: trivy was updated to version 0.30.4: fix: remove the first arg when running as a plugin 2595 fix: k8s controlplaner scanning 2593 fixvuln: GitLab report template 2578 Update to version 0.30.3: fixserver: use a new db worker for hot updates 2581...

OPENSUSE-SU-2022:10080-1 Security update for caddy

This update for caddy fixes the following issues: Update to version 2.5.2: admin: expect quoted ETags 4879 headers: Only replace known placeholders 4880 reverseproxy: Err 503 if all upstreams unavailable reverseproxy: Adjust new TLS Caddyfile directive names 4872 fileserver: Use safe redirects in...

OPENSUSE-SU-2022:10075-1 Security update for python-jupyterlab

This update for python-jupyterlab fixes the following issues: Update to 2.2.10: Remove form tags' action attribute during sanitizing, to prevent an XSS CVE-2021-32797 boo1196663 Header ‘Content-Type’ should not be overwritten Do not use token parameters in websocket urls Properly handle errors in...

SUSE-SU-2022:2614-1 Security update for dwarves and elfutils

This update for dwarves and elfutils fixes the following issues: elfutils was updated to version 0.177 jscSLE-24501: - elfclassify: New tool to analyze ELF objects. - readelf: Print DWATdatamemberlocation as decimal offset. Decode DWATdiscrlist block attributes. - libdw: Add DWATGNUnumerator,...

Atlassian Jira和Atlassian JIRA Data Center 代码注入漏洞

Atlassian Jira and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian Jira is a defect tracking management system. The system is used to track and manage all types of issues and defects on the job.Atlassian JIRA Data Center is the data center version of Atlassian JIRA. ...

[SECURITY] Fedora 36 Update: golang-github-gdamore-tcell-1.4.0-6.fc36

Tcell is a Go package that provides a cell based view for text terminals, like xterm. It was inspired by termbox, but includes many additional improvements...

SUSE-SU-2022:2595-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4: - Makes the PBKDF known answer test compliant with NIST SP800-132. bsc1192079. - FIPS: Add on-demand integrity tests through sftkFIPSRepeatIntegrityCheck...

OPENSUSE-SU-2022:10067-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Save and restore FPU status during interrupt. boo1199803 - Update support of building with Python - Replace SDL-devel BuildRequires with pkgconfigsdl: allow to use sdl12compat as an alternative. Version bump to 6.1.36 released by Oracle Jul...

SUSE-SU-2022:2533-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4: - Makes the PBKDF known answer test compliant with NIST SP800-132. bsc1192079. - FIPS: Add on-demand integrity tests through sftkFIPSRepeatIntegrityCheck...

SUSE-SU-2022:2531-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u332 - April 2022 CPU icedtea-3.23.0 - CVE-2022-21426: Better XPath expression handling bsc1198672 - CVE-2022-21443: Improved Object Identification bsc1198675 - CVE-2022-21434: Better invocation handler handling...

July 21, 2022 Servicing stack update (KB5015899)

None None...

Spring Security 5.8.0-M1 and 6.0.0-M6 are released

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 5.8.0-M1 and 6.0.0-M6 are available now. This release includes dependency upgrades, bug fixes, and enhancements. Here are a few noteworthy changes: Deferred SecurityContext lookup...

Google Removes "App Permissions" List from Play Store for New "Data Safety" Section

Following the launch of a new "Data safety" section for the Android app on the Play Store, Google appears to be readying to remove the app permissions list from both the mobile app and the web. The change was highlighted by Esper's Mishaal Rahman earlier this week. The Data safety section, which...

OPENSUSE-SU-2022:10057-1 Security update for opera

This update for opera fixes the following issues: opera was updated to 88.0.4412.74: - DNA-100645 Cherry-pick CVE-2022-2294 onto stabilization branches Update to 88.0.4412.53 - DNA-99108 Lin Options on video pop out not possible to change - DNA-99832 On automatic video popout, close button should...

July 12, 2022—KB5015874 (Monthly Rollup)

None None...

July 12, 2022 Servicing stack update (KB5015894)

None None...

Chrome for Android Update

Hi, everyone! We've just released Chrome 103 103.0.5060.71 for Android: it'll become available on Google Play over the next few days. This release includes security,stability and performance improvements. You can see a full list of the changes in the Git log. Security Fixes and Rewards Note: Acce...