February 7, 2024
Martin Hellman: We’re playing Russian roulette
The spyware business is booming despite government crackdowns
February 7, 2024
* bsc#1218255 Cross-References: * CVE-2023-6932
February 7, 2024
* bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-6176
February 7, 2024
* bsc#1210619 * bsc#1218255 Cross-References: * CVE-2023-1829
February 7, 2024
* bsc#1210619 Cross-References: * CVE-2023-1829
February 7, 2024
DEF CON is canceled! No, really this time – but the show will go on
February 7, 2024
MuleSoft unveils policy development kit for API gateway
February 6, 2024
https://security-tracker.debian.org/tracker/DSA-5616-1
February 6, 2024
EquiLend back in the saddle as ransom payment rumors swirl
February 6, 2024
* bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-6176
February 6, 2024
The 6.7.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
February 6, 2024
The 6.7.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
February 6, 2024
QtWebEngine 5.15.16 bugfix update.
February 6, 2024
The 6.7.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
February 6, 2024
The 6.7.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
February 6, 2024
Google throws $1M at Rust Foundation to build C++ bridges
February 5, 2024
Ivanti devices hit by wave of exploits for latest security hole
February 5, 2024
Lurie Children’s Hospital back to pen and paper after cyberattack
February 5, 2024
Fixes CVE-2023-52339. No API or ABI changes.
February 5, 2024
update to 121.0.6167.139 * High CVE-2024-1060: Use after free in Canvas * High CVE-2024-1059: Use after free in WebRTC * High CVE-2024-1077: Use after free in Network
February 5, 2024
Update to 2.15.1.
February 5, 2024
Combined update for several fixes as well as security fix for CVE-2023-4001 “` Mon Jan 15 2024 Nicolas Frayer – 2.06-114 grub- core/commands: add flag to only search root dev Resolves: #2223437 Resolves: #2224951 Resolves: #2258096 Resolves: CVE-2023-4001 Sat Jan 13 2024 Hector Martin – 2.06-113 Switch memdisk compression to lzop
February 5, 2024
Fixes CVE-2023-52339. No API or ABI changes.
February 5, 2024
Security update for CVE-2024-23334 and CVE-2024-23829 https://github.com/aio- libs/aiohttp/releases/tag/v3.9.2 https://github.com/aio- libs/aiohttp/releases/tag/v3.9.3
February 5, 2024
Multiple vulnerabilities have been found in NBD Tools, the worst of which could result in arbitary code execution.
February 4, 2024
Multiple out-of-bounds read vulnerabilities have been discovered in Wireshark.
February 4, 2024
Multiple vulnerabilities have been found in OpenSSL, the worst of which could result in denial of service.
February 4, 2024
Multiple vulnerabilities have been found in Xen, the worst of which can lead to arbitrary code execution.
February 4, 2024
The updated packages fix security vulnerabilities: A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program
February 4, 2024
Out of bounds write in ANGLE. (CVE-2024-0741) Failure to update user input timestamp. (CVE-2024-0742) Crash when listing printers on Linux. (CVE-2024-0746)
February 4, 2024
https://security-tracker.debian.org/tracker/DSA-5615-1
February 4, 2024
Grandoreiro banking malware disrupted – Week in security with Tony Anscombe
The banking trojan, which targeted mostly Brazil, Mexico and Spain, blocked the victim’s screen, logged keystrokes, simulated mouse and keyboard activity and displayed fake pop-up windows
February 3, 2024
Sudo, a program designed to allow a sysadmin to give limited root privileges to users and log root activity, was vulnerable. CVE-2023-7090
February 3, 2024
Multiple vulnerabilities have been discovered in FreeType, the worst of which can lead to remote code execution.
February 3, 2024
Multiple vulnerabilities have been discovered in Microsoft Edge, the worst of which could lead to remote code execution.
February 3, 2024
A vulnerability has been discovered in GNAT Ada Suite which can lead to remote code execution.
February 3, 2024
Multiple vulnerabilities have been discovered in QtGui which can lead to remote code execution.
February 3, 2024
A vulnerability has been discovered in SDDM which can lead to privilege escalation.
February 3, 2024
https://security-tracker.debian.org/tracker/DSA-5614-1
February 3, 2024
https://security-tracker.debian.org/tracker/DSA-5613-1
February 2, 2024
* bsc#1218046 * bsc#1218050 * bsc#1218051 * bsc#1218053
February 2, 2024
* bsc#1140772 * bsc#1157446 * bsc#1170452 * bsc#1171862 * bsc#1215669
February 2, 2024
* bsc#1068950 * bsc#1081527 * bsc#1211052 * jsc#PED-6584
February 2, 2024
Red Hat Satellite webhooks and errata
February 2, 2024
* bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218050 * bsc#1218051
February 2, 2024
* bsc#1216869 * bsc#1218046 * bsc#1218050 * bsc#1218051 * bsc#1218053
February 2, 2024
* bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218050 * bsc#1218051
February 2, 2024
Managing the hidden risks of shadow APIs
February 2, 2024
Biden will veto attempts to rip up SEC breach reporting rule
February 1, 2024
ESET Research Podcast: ChatGPT, the MOVEit hack, and Pandora
An AI chatbot inadvertently kindles a cybercrime boom, ransomware bandits plunder organizations without deploying ransomware, and a new botnet enslaves Android TV boxes
February 1, 2024
ESET takes part in global operation to disrupt the Grandoreiro banking trojan
ESET provided technical analysis, statistical information, known C&C servers and was able to get a glimpse of the victimology
February 1, 2024
Guide to Secure Data Backup for Linux Users
February 1, 2024
* bsc#1217654 * bsc#1219131 Cross-References: * CVE-2023-50269
February 1, 2024
* bsc#1218894 Cross-References: * CVE-2024-21626
February 1, 2024
* bsc#1218894 Cross-References: * CVE-2024-21626
February 1, 2024
Security fix for CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780. CVE-2023-6246: __vsyslog_internal did not handle a case where printing a SYSLOG_HEADER containing a long program name failed to update the required buffer size, leading to the allocation and overflow of a too-small buffer on the heap. CVE-2023-6779: __vsyslog_internal used the return value of
February 1, 2024
Update to 115.7.0 * https://www.mozilla.org/en- US/security/advisories/mfsa2024-04/ * https://www.thunderbird.net/en- US/thunderbird/115.7.0/releasenotes/
February 1, 2024
Security fix for CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780. CVE-2023-6246: __vsyslog_internal did not handle a case where printing a SYSLOG_HEADER containing a long program name failed to update the required buffer size, leading to the allocation and overflow of a too-small buffer on the heap. CVE-2023-6779: __vsyslog_internal used the return value of
February 1, 2024
https://security-tracker.debian.org/tracker/DSA-5612-1
February 1, 2024