Secburg

curl has released version 8.23.0, which fixes 24 security vulnerabilities and removes support for the SMB protocol. The update affects the widely used command-line tool and libcurl library found in countless applications and devices. Security practitioners are sharing the release note, flagging the large batch of patches and the removal of SMB support as reasons to update promptly.

rclone, the popular open-source command-line tool for managing and syncing files across cloud storage providers, has released version 1.75.2. The update was announced in infosec and open-source circles, where the tool is widely used for secure data transfers and backup workflows. Users of cloud storage tools are taking note of the new point release.

The OWASP Foundation's Dependency-Track project has shipped version 5.2.0 of its software supply chain component analysis platform, which uses SBOMs to identify risk in third-party dependencies. The release was announced by security firm Secburg, whose writeup covers the new version's changes for teams tracking component vulnerabilities and license compliance.

Opengrep, the open-source static analysis tool positioned as an alternative to Semgrep, has released versions v1.30.1 and v1.30.2. The back-to-back point releases suggest quick bug fixes or refinements to the code scanning tool, which is used by security teams for static application security testing. The news is being shared in cybersecurity and AppSec communities.