The container bci/openjdk was updated. The following patches have been included in this update:
March 9, 2023
The container bci/openjdk was updated. The following patches have been included in this update:
March 9, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
March 9, 2023
OpenShift API for Data Protection (OADP) 1.1.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 9, 2023
Dems, Repubs eye up ban on chat apps they don’t like
March 9, 2023
Logging Subsystem 5.4.12 – Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 9, 2023
security update
March 8, 2023
Securing ways to share workplace passwords
March 8, 2023
Several security issues were fixed in Sofia-SIP.
March 8, 2023
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
March 8, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 8, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 8, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 8, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 8, 2023
Alert: Crims hijack these DrayTek routers to attack biz
March 8, 2023
Red Hat OpenShift Container Platform release 4.11.30 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 7, 2023
An update for rh-mysql80-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 7, 2023
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 7, 2023
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 7, 2023
An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 7, 2023
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 7, 2023
Love scam or espionage? Transparent Tribe lures Indian and Pakistani officials
ESET researchers analyze a cyberespionage campaign that distributes CapraRAT backdoors through trojanized and supposedly secure Android messaging apps – but also exfiltrates sensitive information The post Love scam or espionage? Transparent Tribe lures Indian and Pakistani officials appeared first on WeLiveSecurity
March 7, 2023
security update
March 6, 2023
An update for pesign is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 6, 2023
An update for libjpeg-turbo is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 6, 2023
An update for Jenkins and Jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.12. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
March 6, 2023
An update for pesign is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 6, 2023
An update for pesign is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 6, 2023
Build of libtpms 0.9.6 with fixes for CVE-2023-1017 & CVE-2023-1018
March 6, 2023
Recently two problems have been found in the glibc suite, which could beused to trick setuid applications to run arbitrary code.
March 5, 2023
Multiple issues were found in libde265, an open source implementation of the h.265 video codec, which may result in denial of service, possibly code execution due to a heap-based buffer overflow or have unspecified other impact.
March 5, 2023
Open Source Vulnerability Assessment Tools & Scanners
March 5, 2023
Security fixes for CVE-2022-24580 and CVE-2023-41323
March 5, 2023
Security fixes for CVE-2022-24580 and CVE-2023-41323
March 5, 2023
add sub-package with xen build (resolves: rhbz#2170730) —- update openssl (CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304). —- cherry-pick aarch64 bugfixes, set firmware build release date, add ext4 sub-package
March 5, 2023
security update
March 4, 2023
Several security issues were fixed in the Linux kernel.
March 4, 2023
Several security issues were fixed in the Linux kernel.
March 4, 2023
What does $5,000 buy you on a hacking forum? – Week in security with Tony Anscombe
A bootkit that ESET researchers have discovered in the wild is the BlackLotus UEFI bootkit that is being peddled on hacking forums The post What does $5,000 buy you on a hacking forum? – Week in security with Tony Anscombe appeared first on WeLiveSecurity
March 4, 2023
Security fix for CVE-2023-27320
March 4, 2023
The newest upstream patchlevel 1367 Security fix for CVE-2023-1127
March 4, 2023
It was discovered that the fix for CVE-2023-27372 broke (de)activation of plugins with dependencies. For Debian 10 buster, this problem has been fixed in version
March 3, 2023
It was discovered that the libreswan IPsec implementation could be forced into a crash/restart via malformed IKEv2 packets after peer authentication, resulting in denial of service.
March 3, 2023
MQsTTang: Mustang Panda’s latest backdoor treads new ground with Qt and MQTT
ESET researchers tease apart MQsTTang, a new backdoor used by Mustang Panda, which communicates via the MQTT protocol The post MQsTTang: Mustang Panda’s latest backdoor treads new ground with Qt and MQTT appeared first on WeLiveSecurity
March 3, 2023
BlackLotus UEFI bootkit: Myth confirmed
The first in-the-wild UEFI bootkit bypassing UEFI Secure Boot on fully updated UEFI systems is now a reality The post BlackLotus UEFI bootkit: Myth confirmed appeared first on WeLiveSecurity
March 3, 2023
node-css-what was vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of insecure regular expression in the re_attr variable. The exploitation of this vulnerability could be triggered
March 3, 2023
Smart security
March 3, 2023
The system could be made to crash or run programs as an administrator.
March 3, 2023
Several security issues were fixed in the Linux kernel.
March 3, 2023
Several security issues were fixed in the Linux kernel.
March 3, 2023
Several security issues were fixed in the Linux kernel.
March 3, 2023
Several security issues were fixed in the Linux kernel.
March 3, 2023
Insecure software pushers in Biden’s crosshairs
March 3, 2023
security update
March 2, 2023
Several security issues were fixed in SoX.
March 2, 2023
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to execute arbitrary code. For the stable distribution (bullseye), this problem has been fixed in
March 2, 2023
New upstream version, including fix for CVE-2023-26081
March 2, 2023
Important: kernel-rt security and bug fix update
March 2, 2023
A new image is available for Red Hat Single Sign-On 7.6.2, running on Red Hat OpenShift Container Platform from the release of 3.11 up to the release of 4.12.0. Red Hat Product Security has rated this update as having a security impact
March 2, 2023
A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 2, 2023
security update
March 2, 2023
security update
March 1, 2023
ESET Research Podcast: Ransomware trashed data, Android threats soared in T3 2022
And that’s just the tip of the iceberg when it comes to the trends that defined the cyberthreat landscape in the final four months of 2022. The post ESET Research Podcast: Ransomware trashed data, Android threats soared in T3 2022 appeared first on WeLiveSecurity
March 1, 2023
Top 10 open source software risks for 2023
March 1, 2023
Red Hat OpenShift Container Platform release 4.10.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10.
March 1, 2023
The Qualys Research Labs reported an authorization bypass (CVE-2022-41974) and a symlink attack (CVE-2022-41973) in multipath-tools, a set of tools to drive the Device Mapper multipathing driver, which may result in local privilege escalation.
March 1, 2023
USN-5880-1 caused some minor regressions in Firefox.
March 1, 2023
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
March 1, 2023
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
March 1, 2023
The container ses/7.1/rook/ceph was updated. The following patches have been included in this update:
March 1, 2023