GitLab 19.5.1 patch covers a CVSS 10.0 integer overflow
The available text is only a Hacker News title, score, and a link to the 19.5.1 patch notes.
Stories per day · 30 days
3 RSS
15 stories, newest first · one card per story
Stories tagged #patch-release
Exim Mail Server 4.100.1 Fixes 4 Security Flaws Including SMTP Smuggling and Heap Corruption
Exim 4.100.1 patches four flaws, including high-severity Proxy Protocol heap corruption, uninitialized data leak, GnuTLS use-after-free, and SMTP smuggling.
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7 patches 67 vulnerabilities in the open-source network IDS/IPS engine, with follow-up discussion on oss-security.
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7 was released fixing 67 vulnerabilities; project lead Victor Julien confirmed the announcement and offered future posts.
Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7, the open-source network IDS/IPS engine, ships a patch release fixing 67 vulnerabilities with no known exploitation reported.
WordPress 7.1.1 Maintenance and Security Release
WordPress 7.1.1 patches an unauthenticated stored XSS (CVE-2026-93485) in wpautop(), exploitable via published comments, with CVSS 3.1 score 7.1.
3
Postfix: SMTP smuggling, remote crash, and hardening fixes in 3.11.7 and related legacy releases
Postfix 3.11.7 and legacy releases 3.10.14 and 3.9.15 fix SMTP smuggling, remote crash, and hardening issues.
Cisco Advance Notification for Publication of September 16, 2026, Security Advisories
Cisco will publish security advisories with fixed software on September 16, 2026, covering BroadWorks, ISE, Nexus Dashboard, ASA, FMC, FTD and ThousandEyes.
Google Chrome 153 Released With 230 Security Fixes and Zero-Day Exploited in the Wild
Google released Chrome 153 with 230 security fixes, patching CVE-2026-87491, a V8 out-of-bounds write zero-day actively exploited in the wild.
3
libpcap 1.10.7 fixes 7 vulnerabilities
libpcap 1.10.7 fixes seven vulnerabilities, including CVE-2026-31912 affecting the deprecated bpf_filter(), and all users are advised to update.
Security fixes in libfuse-3.18.3
libfuse 3.18.3 disables fuse_session_custom_io() by default to stop non-kernel peers from forging FUSE requests libfuse parses unvalidated.
Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins
Jellyfin 12.0 ships security fixes for path traversal, first-run setup bypass, unsafe plugin names, and web client XSS, plus removal of legacy login paths.
4
Fwd: Security vulnerabilities fixed in WeeChat 4.10.1
WeeChat 4.10.1 fixes six security vulnerabilities, including WSA-2026-15 allowing DCC-received files to be written outside the configured directory.
Re: Vulnerability fixes in util-linux-2.42.3
util-linux 2.42.3 includes vulnerability fixes, with a commit link shared for downstream tracking but no CVEs cited.
Re: Fwd: [Freeipmi-announce] FreeIPMI 1.6.19 Released
FreeIPMI 1.6.19 fixes multiple issues, six of which received CVEs CVE-2026-85504 through CVE-2026-85509.