#criticalupdate — Public Fediverse posts

🔒 New Kitten & JSDB Releases

Security fix, JSDB 6.0.1.

This is a critical update.

• JSDB¹ versions 6.0.0 and below suffer from potential data corruption/arbitrary code execution as string keys were not being sanitised in the same way string values were² (so this is relevant to you if you’re storing untrusted data as keys in your data structures in JSDB and/or Kitten databases without carrying out any of your own sanitisation at the application level).

• The latest Kitten release uses JSDB version 6.0.1. Your deployment servers will automatically update in the next few hours. On your development machines, please run `kitten update` in your terminal or use the Update feature in Kitten Settings from your browser.

• If you are using Kitten’s Database App Modules³ feature in your apps, you will have installed JSDB manually and you should update your installation to version 6.0.1.

¹ https://codeberg.org/small-tech/jsdb/
² https://codeberg.org/small-tech/jsdb/issues/22
³ https://kitten.small-web.org/reference/#database-app-modules

#Kitten #SmallWeb #JSDB #JavaScriptDatabase #KittenRelease #JSDBRelease #securityUpdate #criticalUpdate

🔒 New Kitten & JSDB Releases

Security fix, JSDB 6.0.1.

This is a critical update.

• JSDB¹ versions 6.0.0 and below suffer from potential data corruption/arbitrary code execution as string keys were not being sanitised in the same way string values were² (so this is relevant to you if you’re storing untrusted data as keys in your data structures in JSDB and/or Kitten databases without carrying out any of your own sanitisation at the application level).

• The latest Kitten release uses JSDB version 6.0.1. Your deployment servers will automatically update in the next few hours. On your development machines, please run `kitten update` in your terminal or use the Update feature in Kitten Settings from your browser.

• If you are using Kitten’s Database App Modules³ feature in your apps, you will have installed JSDB manually and you should update your installation to version 6.0.1.

¹ https://codeberg.org/small-tech/jsdb/
² https://codeberg.org/small-tech/jsdb/issues/22
³ https://kitten.small-web.org/reference/#database-app-modules

#Kitten #SmallWeb #JSDB #JavaScriptDatabase #KittenRelease #JSDBRelease #securityUpdate #criticalUpdate

🔒 New Kitten & JSDB Releases

Security fix, JSDB 6.0.1.

This is a critical update.

• JSDB¹ versions 6.0.0 and below suffer from potential data corruption/arbitrary code execution as string keys were not being sanitised in the same way string values were² (so this is relevant to you if you’re storing untrusted data as keys in your data structures in JSDB and/or Kitten databases without carrying out any of your own sanitisation at the application level).

• The latest Kitten release uses JSDB version 6.0.1. Your deployment servers will automatically update in the next few hours. On your development machines, please run `kitten update` in your terminal or use the Update feature in Kitten Settings from your browser.

• If you are using Kitten’s Database App Modules³ feature in your apps, you will have installed JSDB manually and you should update your installation to version 6.0.1.

¹ https://codeberg.org/small-tech/jsdb/
² https://codeberg.org/small-tech/jsdb/issues/22
³ https://kitten.small-web.org/reference/#database-app-modules

#Kitten #SmallWeb #JSDB #JavaScriptDatabase #KittenRelease #JSDBRelease #securityUpdate #criticalUpdate

🔒 New Kitten & JSDB Releases

Security fix, JSDB 6.0.1.

This is a critical update.

• JSDB¹ versions 6.0.0 and below suffer from potential data corruption/arbitrary code execution as string keys were not being sanitised in the same way string values were² (so this is relevant to you if you’re storing untrusted data as keys in your data structures in JSDB and/or Kitten databases without carrying out any of your own sanitisation at the application level).

• The latest Kitten release uses JSDB version 6.0.1. Your deployment servers will automatically update in the next few hours. On your development machines, please run `kitten update` in your terminal or use the Update feature in Kitten Settings from your browser.

• If you are using Kitten’s Database App Modules³ feature in your apps, you will have installed JSDB manually and you should update your installation to version 6.0.1.

¹ https://codeberg.org/small-tech/jsdb/
² https://codeberg.org/small-tech/jsdb/issues/22
³ https://kitten.small-web.org/reference/#database-app-modules

#Kitten #SmallWeb #JSDB #JavaScriptDatabase #KittenRelease #JSDBRelease #securityUpdate #criticalUpdate

🔒 New Kitten & JSDB Releases

Security fix, JSDB 6.0.1.

This is a critical update.

• JSDB¹ versions 6.0.0 and below suffer from potential data corruption/arbitrary code execution as string keys were not being sanitised in the same way string values were² (so this is relevant to you if you’re storing untrusted data as keys in your data structures in JSDB and/or Kitten databases without carrying out any of your own sanitisation at the application level).

• The latest Kitten release uses JSDB version 6.0.1. Your deployment servers will automatically update in the next few hours. On your development machines, please run `kitten update` in your terminal or use the Update feature in Kitten Settings from your browser.

• If you are using Kitten’s Database App Modules³ feature in your apps, you will have installed JSDB manually and you should update your installation to version 6.0.1.

¹ https://codeberg.org/small-tech/jsdb/
² https://codeberg.org/small-tech/jsdb/issues/22
³ https://kitten.small-web.org/reference/#database-app-modules

#Kitten #SmallWeb #JSDB #JavaScriptDatabase #KittenRelease #JSDBRelease #securityUpdate #criticalUpdate

Cisco discloses a 10.0 CVSS rating vulnerability in SSM On-Prem

https://stackdiary.com/cisco-discloses-cve-2024-20419-for-ssm-on-prem/

#Cisco #Security #Vulnerability #Cybersecurity #CVSS #Hackers #Exploitation #ITsecurity #DataBreach #Software #TechNews #SecurityFlaw #NetworkSecurity #CriticalUpdate #Admins #DataProtection #PatchNow #Infosec #CyberThreats #SecureNetworks #TechUpdate #DigitalSafety #SoftwareBug #CyberDefense #CriticalVulnerability #ITupdate #SystemAdmin #SecureSoftware #NetworkAdmin #CyberAlert #CVE

Cisco discloses a 10.0 CVSS rating vulnerability in SSM On-Prem

https://stackdiary.com/cisco-discloses-cve-2024-20419-for-ssm-on-prem/

#Cisco #Security #Vulnerability #Cybersecurity #CVSS #Hackers #Exploitation #ITsecurity #DataBreach #Software #TechNews #SecurityFlaw #NetworkSecurity #CriticalUpdate #Admins #DataProtection #PatchNow #Infosec #CyberThreats #SecureNetworks #TechUpdate #DigitalSafety #SoftwareBug #CyberDefense #CriticalVulnerability #ITupdate #SystemAdmin #SecureSoftware #NetworkAdmin #CyberAlert #CVE

Cisco discloses a 10.0 CVSS rating vulnerability in SSM On-Prem

https://stackdiary.com/cisco-discloses-cve-2024-20419-for-ssm-on-prem/

#Cisco #Security #Vulnerability #Cybersecurity #CVSS #Hackers #Exploitation #ITsecurity #DataBreach #Software #TechNews #SecurityFlaw #NetworkSecurity #CriticalUpdate #Admins #DataProtection #PatchNow #Infosec #CyberThreats #SecureNetworks #TechUpdate #DigitalSafety #SoftwareBug #CyberDefense #CriticalVulnerability #ITupdate #SystemAdmin #SecureSoftware #NetworkAdmin #CyberAlert #CVE

Cisco discloses a 10.0 CVSS rating vulnerability in SSM On-Prem

https://stackdiary.com/cisco-discloses-cve-2024-20419-for-ssm-on-prem/

#Cisco #Security #Vulnerability #Cybersecurity #CVSS #Hackers #Exploitation #ITsecurity #DataBreach #Software #TechNews #SecurityFlaw #NetworkSecurity #CriticalUpdate #Admins #DataProtection #PatchNow #Infosec #CyberThreats #SecureNetworks #TechUpdate #DigitalSafety #SoftwareBug #CyberDefense #CriticalVulnerability #ITupdate #SystemAdmin #SecureSoftware #NetworkAdmin #CyberAlert #CVE

Cisco discloses a 10.0 CVSS rating vulnerability in SSM On-Prem

https://stackdiary.com/cisco-discloses-cve-2024-20419-for-ssm-on-prem/

#Cisco #Security #Vulnerability #Cybersecurity #CVSS #Hackers #Exploitation #ITsecurity #DataBreach #Software #TechNews #SecurityFlaw #NetworkSecurity #CriticalUpdate #Admins #DataProtection #PatchNow #Infosec #CyberThreats #SecureNetworks #TechUpdate #DigitalSafety #SoftwareBug #CyberDefense #CriticalVulnerability #ITupdate #SystemAdmin #SecureSoftware #NetworkAdmin #CyberAlert #CVE

Oracle releases 386 new security updates for the July patch round

https://stackdiary.com/oracle-releases-386-new-security-updates-for-the-july-patch-round/

#Oracle #Security #Updates #Patch #Vulnerabilities #Critical #Cybersecurity #Technology #IT #Software #WebLogic #MySQL #Siebel #Cloud #Database #Enterprise #Risk #Patching #Cyberattack #Network #Authentication #SecurityUpdate #SoftwareUpdate #TechNews #InformationSecurity #CVE #Exploit #CriticalUpdate #OraclePatch #CyberThreat #SecurityAlert

Oracle releases 386 new security updates for the July patch round

https://stackdiary.com/oracle-releases-386-new-security-updates-for-the-july-patch-round/

#Oracle #Security #Updates #Patch #Vulnerabilities #Critical #Cybersecurity #Technology #IT #Software #WebLogic #MySQL #Siebel #Cloud #Database #Enterprise #Risk #Patching #Cyberattack #Network #Authentication #SecurityUpdate #SoftwareUpdate #TechNews #InformationSecurity #CVE #Exploit #CriticalUpdate #OraclePatch #CyberThreat #SecurityAlert

Oracle releases 386 new security updates for the July patch round

https://stackdiary.com/oracle-releases-386-new-security-updates-for-the-july-patch-round/

#Oracle #Security #Updates #Patch #Vulnerabilities #Critical #Cybersecurity #Technology #IT #Software #WebLogic #MySQL #Siebel #Cloud #Database #Enterprise #Risk #Patching #Cyberattack #Network #Authentication #SecurityUpdate #SoftwareUpdate #TechNews #InformationSecurity #CVE #Exploit #CriticalUpdate #OraclePatch #CyberThreat #SecurityAlert

Oracle releases 386 new security updates for the July patch round

https://stackdiary.com/oracle-releases-386-new-security-updates-for-the-july-patch-round/

#Oracle #Security #Updates #Patch #Vulnerabilities #Critical #Cybersecurity #Technology #IT #Software #WebLogic #MySQL #Siebel #Cloud #Database #Enterprise #Risk #Patching #Cyberattack #Network #Authentication #SecurityUpdate #SoftwareUpdate #TechNews #InformationSecurity #CVE #Exploit #CriticalUpdate #OraclePatch #CyberThreat #SecurityAlert

Oracle releases 386 new security updates for the July patch round

https://stackdiary.com/oracle-releases-386-new-security-updates-for-the-july-patch-round/

#Oracle #Security #Updates #Patch #Vulnerabilities #Critical #Cybersecurity #Technology #IT #Software #WebLogic #MySQL #Siebel #Cloud #Database #Enterprise #Risk #Patching #Cyberattack #Network #Authentication #SecurityUpdate #SoftwareUpdate #TechNews #InformationSecurity #CVE #Exploit #CriticalUpdate #OraclePatch #CyberThreat #SecurityAlert

Mastodon: Security flaw allows unauthorized access to posts

https://stackdiary.com/mastodon-security-flaw-allows-unauthorized-access-to-posts/

#Mastodon #Security #Vulnerability #Update #Cybersecurity #Privacy #Software #Patch #Server #HighRisk #Hackers #DataProtection #Infosec #TechNews #BugFix #CriticalUpdate #DigitalSafety #MastodonUpdate #CyberAttack #UserSafety #DataBreach #SecurityAlert #NetworkSecurity #OnlineSafety #SecurityFlaw #SecureUpdate #ITSecurity #TechAlert #MastodonPatch #SystemUpdate #CVE

You Should Update Apple iOS and Google Chrome ASAP https://www.wired.com/story/apple-ios-google-chrome-critical-update-march/ #Security/CyberattacksandHacks #Security/SecurityAdvice #CriticalUpdate #Security

You Should Update Apple iOS and Google Chrome ASAP https://www.wired.com/story/apple-ios-google-chrome-critical-update-march/ #Security/CyberattacksandHacks #Security/SecurityAdvice #CriticalUpdate #Security

You Should Update Apple iOS and Google Chrome ASAP - Plus: Microsoft patches over 60 vulnerabilities, Mozilla fixes two Firefox zero-day bugs,... - https://www.wired.com/story/apple-ios-google-chrome-critical-update-march/ #security/cyberattacksandhacks #security/securityadvice #criticalupdate #security

Here Are the Google and Microsoft Security Updates You Need Right Now - Plus: Mozilla patches 12 flaws in Firefox, Zoom fixes seven vulnerabilities, and more cri... - https://www.wired.com/story/here-are-the-microsoft-and-google-security-updates-you-need-right-now/ #security/cyberattacksandhacks #security/securityadvice #criticalupdate #security

Apple and Google Just Patched Their First Zero-Day Flaws of the Year - Plus: Google fixes dozens of Android bugs, Microsoft rolls out nearly 50 patches, Mozilla... - https://www.wired.com/story/apple-google-zero-day-flaws-critical-update-january-2024/ #security/cyberattacksandhacks #security/securityadvice #criticalupdate #security

Google Fixes Nearly 100 Android Security Issues - Plus: Apple shuts down a Flipper Zero Attack, Microsoft patches more than 30 vulnerabilit... - https://www.wired.com/story/google-100-android-security-issues-critical-update/ #security/cyberattacksandhacks #security/securityadvice #criticalupdate #security

Google Fixes a Seventh Zero-Day Flaw in Chrome—Update Now - Plus: Major security patches from Microsoft, Mozilla, Atlassian, Cisco, and more. - https://www.wired.com/story/google-chrome-seven-zero-day-flaws-critical-update-november-2023/ #security/cyberattacksandhacks #security/securityadvice #criticalupdate #security

Apple, Google, and Microsoft Just Patched Some Spooky Security Flaws - Plus: Major vulnerability fixes are now available for a number of enterprise giants, incl... - https://www.wired.com/story/apple-google-microsoft-critical-update-october-2023/ #security/securityadvice #criticalupdate #security

Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws - Plus: Mozilla patches 10 Firefox bugs, Cisco fixes a vulnerability with a rare maximum se... - https://www.wired.com/story/apple-google-microsoft-zero-days-september-2023/ #security/cyberattacksandhacks #criticalupdate #security

Google Fixes Serious Security Flaws in Chrome and Android - Plus: Mozilla patches more than a dozen vulnerabilities in Firefox, and enterprise compan... - https://www.wired.com/story/google-android-chrome-critical-update-august-2023/ #security/cyberattacksandhacks #criticalupdate #security

Apple iOS, Google Android Patch Zero-Days in July Security Updates - Plus: Mozilla fixes two high-severity bugs in Firefox, Citrix fixes a flaw that was used ... - https://www.wired.com/story/apple-google-microsoft-zero-day-fix-july-2023/ #security/securityadvice #criticalupdate #security

Apple, Google, and MOVEit Just Patched Serious Security Flaws - Plus: Microsoft fixes 78 vulnerabilities, VMWare plugs a flaw already used in attacks, an... - https://www.wired.com/story/apple-google-moveit-security-patches-june-2023-critical-update/ #security/cyberattacksandhacks #criticalupdate #security

Apple's iOS 16.5 Fixes 3 Security Bugs Already Used in Attacks - Plus: Microsoft patches two zero-day flaws, Google’s Android and Chrome get some much-nee... - https://www.wired.com/story/apple-ios-16-5-security-flaws-critical-update-may-2023/ #security/cyberattacksandhacks #criticalupdate #security

Apple, Google, and Microsoft Just Fixed Zero-Day Security Flaws - Firefox gets a needed tune-up, SolarWinds squashes two high-severity bugs, Oracle patches... - https://www.wired.com/story/apple-google-microsoft-zero-day-critical-update-april/ #security/cyberattacksandhacks #criticalupdate #security

Apple's iOS 16.4: Security Updates Are Better Than a Goose Emoji - Plus: Microsoft Outlook and Android patch serious flaws, Chrome and Firefox get fixes, an... - https://www.wired.com/story/ios-16-4-outlook-android-critical-update-march-2023/ #security/cyberattacksandhacks #criticalupdate #security

Apple Users Need to Update iOS Now to Patch Serious Flaws - Plus: Microsoft fixes several zero-day bugs, Google patches Chrome and Android, Mozilla r... - https://www.wired.com/story/apple-ios-16-3-1-critical-update-february/ #security/securityadvice #criticalupdate #security

You Really Need to Update Firefox and Android Right Now - January saw a slew of security patches for iOS, Chrome, Windows, and more. - https://www.wired.com/story/firefox-android-security-patch-critical-update-january-2023/ #security/cyberattacksandhacks #security/securityadvice #criticalupdate #security

Update Android Right Now to Fix a Scary Remote-Execution Flaw - Plus: Patches for Apple iOS 16, Google Chrome, Windows 10, and more. - https://www.wired.com/story/android-ios-16-windows-10-critical-update-december-2022/ #security/cyberattacksandhacks #security/securitynews #criticalupdate #security

Drop What You're Doing and Update iOS, Android, and Windows - Plus: Major patches dropped this month for Chrome, Firefox, VMware, Cisco, Citrix, and SA... - https://www.wired.com/story/ios-android-windows-vulnerability-patches-november-2022/ #security/securityadvice #criticalupdate #security