April 30, 2023
The future of Red Hat security data
An issue has been found in sniproxy, a transparent TLS and HTTP layer 4 proxy with SNI support. Due to bad handling of wildcard backend hosts, a crafted HTTP or TLS
April 30, 2023
Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files.
April 30, 2023
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
April 30, 2023
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
April 30, 2023
The container bci/python was updated. The following patches have been included in this update:
April 30, 2023
The container bci/rust was updated. The following patches have been included in this update:
April 30, 2023
What was hot at RSA Conference 2023? – Week in security with Tony Anscombe
The importance of understanding – and prioritizing – the privacy and security implications of large language models like ChatGPT cannot be overstated The post What was hot at RSA Conference 2023? – Week in security with Tony Anscombe appeared first on WeLiveSecurity
April 29, 2023
The container bci/bci-init was updated. The following patches have been included in this update:
April 29, 2023
The container suse/sle15 was updated. The following patches have been included in this update:
April 29, 2023
The container bci/python was updated. The following patches have been included in this update:
April 29, 2023
The container bci/python was updated. The following patches have been included in this update:
April 29, 2023
The container suse/postgres was updated. The following patches have been included in this update:
April 29, 2023
The container bci/php-fpm was updated. The following patches have been included in this update:
April 29, 2023
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
April 28, 2023
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
April 28, 2023
The container caasp/v4/helm-tiller was updated. The following patches have been included in this update:
April 28, 2023
The container suse/sle15 was updated. The following patches have been included in this update:
April 28, 2023
The container bci/rust was updated. The following patches have been included in this update:
April 28, 2023
The container bci/rust was updated. The following patches have been included in this update:
April 28, 2023
RSA Conference 2023 – How AI will infiltrate the world
As all things (wrongly called) AI take the world’s biggest security event by storm, we round up of some of their most-touted use cases and applications The post RSA Conference 2023 – How AI will infiltrate the world appeared first on WeLiveSecurity
April 27, 2023
S3 Ep132: Proof-of-concept lets anyone hack at will
April 27, 2023
The container bci/python was updated. The following patches have been included in this update:
April 27, 2023
The container bci/ruby was updated. The following patches have been included in this update:
April 27, 2023
The container bci/python was updated. The following patches have been included in this update:
April 27, 2023
The container bci/python was updated. The following patches have been included in this update:
April 27, 2023
The container bci/openjdk-devel was updated. The following patches have been included in this update:
April 27, 2023
The container bci/openjdk-devel was updated. The following patches have been included in this update:
April 27, 2023
Microsoft probes complaints of Edge leaking URLs to Bing
April 26, 2023
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.11.7 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat Product Security has rated this update as having a security impact
April 26, 2023
Logging Subsystem 5.6.5 – Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
April 26, 2023
Evasive Panda APT group delivers malware via updates for popular Chinese software
ESET Research uncovers a campaign by the APT group known as Evasive Panda targeting an international NGO in China with malware delivered through updates of popular Chinese software The post Evasive Panda APT group delivers malware via updates for popular Chinese software appeared first on WeLiveSecurity
April 26, 2023
The good, the bad and the generative AI
April 26, 2023
The container suse/pcp was updated. The following patches have been included in this update:
April 26, 2023
Red Hat OpenShift Container Platform release 4.10.58 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10.
April 26, 2023
USN-6010-2 caused some minor regressions in Firefox.
April 26, 2023
update to 112.0.5615.165. Fixes the following security issues: CVE-2023-2004 CVE-2023-2133 CVE-2023-2134 CVE-2023-2135 CVE-2023-2136 CVE-2023-2137 CVE-2023-2033 CVE-2023-2136
April 26, 2023
Several security issues were fixed in the Linux kernel.
April 25, 2023
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 25, 2023
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 25, 2023
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 25, 2023
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 25, 2023
An update for pcs is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
April 25, 2023
An update that fixes 5 vulnerabilities is now available.
April 24, 2023
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For Debian 10 buster, these problems have been fixed in version
April 24, 2023
An update for emacs is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 24, 2023
An update for emacs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 24, 2023
Multiple security issues were discovered in 389-ds-base: an open source LDAP server for Linux. CVE-2019-3883
April 24, 2023
Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access. (CVE-2023-28856) References: – https://bugs.mageia.org/show_bug.cgi?id=31809
April 24, 2023
security update
April 23, 2023
security update
April 23, 2023
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
April 23, 2023
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
April 23, 2023
Backport fix for CVE-2023-1972.
April 23, 2023
ceph 16.2.12 GA Security fix for CVE-2022-3650
April 23, 2023
Disable stringop-overflow warnings. Patch “bfd-CVE-2023-1972” fixes a security issue in bfd library.
April 23, 2023
Update to 4.10 for CVE-2023-23009
April 22, 2023
Did you mistakenly sell your network access? – Week in security with Tony Anscombe
Many routers that are offered for resale contain sensitive corporate information and allow third-party connections to corporate networks The post Did you mistakenly sell your network access? – Week in security with Tony Anscombe appeared first on WeLiveSecurity
April 22, 2023
Linux malware strengthens links between Lazarus and the 3CX supply‑chain attack
Similarities with newly discovered Linux malware used in Operation DreamJob corroborate the theory that the infamous North Korea-aligned group is behind the 3CX supply-chain attack The post Linux malware strengthens links between Lazarus and the 3CX supply‑chain attack appeared first on WeLiveSecurity
April 22, 2023
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.12.2 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat Product Security has rated this update as having a security impact
April 22, 2023
The container bci/dotnet-aspnet was updated. The following patches have been included in this update:
April 22, 2023
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
April 22, 2023
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
April 22, 2023
The container rancher/elemental-operator/5.3 was updated. The following patches have been included in this update:
April 22, 2023
The container rancher/elemental-teal/5.3 was updated. The following patches have been included in this update:
April 22, 2023
Microsoft pushes for more women in cybersecurity
April 21, 2023
security update
April 21, 2023
Healthcare organisations urged to improve system security
April 21, 2023
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 21, 2023
The container suse/postgres was updated. The following patches have been included in this update:
April 21, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
April 21, 2023
The container suse/registry was updated. The following patches have been included in this update:
April 21, 2023