May 23, 2023
Go applications could be made to hang or crash if they received specially crafted input.
May 23, 2023
USN-6073-4 introduced a regression in os-brick.
May 23, 2023
USN-6073-3 introduced a regression in Nova.
May 23, 2023
USN-6073-2 introduced a regression in Glance_store.
May 23, 2023
USN-6073-1 introduced a regression in Cinder.
May 23, 2023
Several security issues were fixed in ncurses.
May 23, 2023
Suzuki motorcycle plant shut down by cyber attack
May 23, 2023
Android app breaking bad: From legitimate screen recording to file exfiltration within a year
ESET researchers discover AhRat – a new Android RAT based on AhMyth – that exfiltrates files and records audio The post Android app breaking bad: From legitimate screen recording to file exfiltration within a year appeared first on WeLiveSecurity
May 23, 2023
AppMap: A map to reduce developer toil
May 23, 2023
security update
May 22, 2023
security update
May 22, 2023
tar could be made to crash or expose sensitive information if it received a specially crafted file.
May 22, 2023
Two vulnerabilities have been fixed in sqlite (V2) which which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact.
May 22, 2023
Fighting the five
May 22, 2023
An update for git is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 22, 2023
An update for git is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 22, 2023
An update for git is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 22, 2023
An update for git is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 22, 2023
It was discovered that missing input sanitising in cups-filters, when using the Backend Error Handler (beh) backend to create an accessible network printer, may result in the execution of arbitrary commands.
May 21, 2023
Potential NULL dereference during rekeying with algorithm guessing. (CVE-2023-1667) Authorization bypass in pki_verify_data_signature. (CVE-2023-2283 References:
May 21, 2023
ReDoS (Regular Expression Denial of Service) (CVE-2023-30608) References: – https://bugs.mageia.org/show_bug.cgi?id=31913 – https://ubuntu.com/security/notices/USN-6064-1
May 21, 2023
An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in src/truetype/ttgxvar.c. (CVE-2023-2004) References: – https://bugs.mageia.org/show_bug.cgi?id=31887
May 21, 2023
cmark incorrectly handled certain inputs. Fixes quadratic complexity in handle_close_bracket “![[]()” which may lead to a denial of service (CVE-2023-22486). Noting that this also fixes a quadratic parsing issue with repeated
May 21, 2023
Dmidecode allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. (CVE-2023-30630) References:
May 21, 2023
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
May 20, 2023
The real cost of a free lunch – Week in security with Tony Anscombe
Don’t download software from non-reputable websites and sketchy links – you might be in for more than you bargained for The post The real cost of a free lunch – Week in security with Tony Anscombe appeared first on WeLiveSecurity
May 20, 2023
Max Chernoff discovered that improperly secured shell-escape in LuaTeX may result in arbitrary shell command execution, even with shell escape disabled, if specially crafted tex files are processed.
May 20, 2023
The newest upstream commit Security fix for CVE-2023-2426
May 20, 2023
security update
May 20, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
May 19, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
May 19, 2023
5 useful search engines for internet‑connected devices and services
A roundup of some of the handiest tools that security professionals can use to search for and monitor devices that are accessible from the internet The post 5 useful search engines for internet‑connected devices and services appeared first on WeLiveSecurity
May 19, 2023
Confidential computing use cases
May 19, 2023
This kernel-linus update is based on upstream 5.15.110 and fixes atleast the following security issues: A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.
May 19, 2023
fix clone-in-kitty + security fix rhbz#2196803
May 19, 2023
Upgrade to 1.2.11
May 19, 2023
Backport fix for CVE-2023-1729.
May 19, 2023
– Update yubibomb to version 0.2.12. – Update ybaas to version 0.0.16.
May 19, 2023
– Update yubibomb to version 0.2.12. – Update ybaas to version 0.0.16.
May 19, 2023
Cisco squashes critical bugs in small biz switches
May 18, 2023
security update
May 18, 2023
Meet “AI”, your new colleague: could it expose your company’s secrets?
Before rushing to embrace the LLM-powered “hire”, make sure your organization has safeguards in place to avoid putting its business and customer data at risk The post Meet “AI”, your new colleague: could it expose your company’s secrets? appeared first on WeLiveSecurity
May 18, 2023
S3 Ep135: Sysadmin by day, extortionist by night
May 18, 2023
It was discovered that missing input sanitising in the implementation of the OIDCStripCookie option in mod_auth_openidc could result in denial of service.
May 18, 2023
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 18, 2023
Red Hat AMQ Streams 2.4.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 18, 2023
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 18, 2023
Several security issues were fixed in Ruby.
May 18, 2023
minimatch could be made to crash if it opened a specially crafted input file.
May 18, 2023
security update
May 18, 2023
You may not care where you download software from, but malware does
Why do people still download files from sketchy places and get compromised as a result? The post You may not care where you download software from, but malware does appeared first on WeLiveSecurity
May 17, 2023
Is this the answer to Google Drive spam?
May 17, 2023
EventSource could leak sensitive information if it opened a specially crafted input file.
May 17, 2023
How to reduce your devops tool sprawl
May 17, 2023
The container bci/openjdk was updated. The following patches have been included in this update:
May 17, 2023
An update for openstack-nova is now available for Red Hat OpenStack Platform 13 (Queens). Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 17, 2023
An update for openstack-nova is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 17, 2023
An update for openstack-nova is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 17, 2023
An update for openstack-nova is now available for Red Hat OpenStack Platform 17.0 (Wallaby). Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 17, 2023
Compliance automation to confound cyber criminals
May 16, 2023
An update for libreswan is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 16, 2023
An update for libreswan is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 16, 2023
An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 16, 2023
An update for python-mako is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 16, 2023
An update for the freeradius:3.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 16, 2023
An update for ctags is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 16, 2023
Don’t overlook attack surface management
May 16, 2023