upstream security release 122.0.6261.128 High CVE-2024-2400: Use after free in Performance Manager
March 16, 2024
Security fix for CVE-2007-4559.
March 16, 2024
New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454
March 16, 2024
Path traversal in moment.locale. (CVE-2022-24785) Inefficient parsing algorithim resulting in DoS. (CVE-2022-31129) References: – https://bugs.mageia.org/show_bug.cgi?id=30664
March 16, 2024
Security fix for CVE-2007-4559.
March 16, 2024
Update to 3.2.2 It indirectly fix CVE-2023-3966 and CVE-2023-5366
March 16, 2024
How to share sensitive files securely online
Here are a few tips for secure file transfers and what else to consider when sharing sensitive documents so that your data remains safe
March 15, 2024
Scareware scam: Restoro and Reimage fined $26 million by FTC
March 15, 2024
* bsc#1219836 Cross-References: * CVE-2024-1062
March 15, 2024
Cop shop rapped for ‘completely avoidable’ web form blunder
March 15, 2024
It was discovered that composer, a dependency manager for the PHP language, processed files in the local working directory. This could lead to local privilege escalation or malicious code execution. Due to a technical issue this email was not sent on 2024-02-26 like it should
March 15, 2024
* jsc#PED-2362 * jsc#SLE-5514 Cross-References: * CVE-2023-20593
March 15, 2024
* jsc#PED-2362 * jsc#SLE-5514 Cross-References: * CVE-2023-20593
March 15, 2024
* bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465
March 15, 2024
* bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465
March 15, 2024
LockBit ransomware kingpin gets 4 years behind bars
March 14, 2024
Expat could be made to crash if it received specially crafted input.
March 14, 2024
Several security issues were fixed in TeX Live.
March 14, 2024
Two vulnerabilities were discovered in Open vSwitch, a software-based Ethernet virtual switch, which could result in a bypass of OpenFlow rules or denial of service.
March 14, 2024
python-cryptography could be made to expose sensitive information over the network.
March 14, 2024
Open source is not insecure
March 14, 2024
US Congress goes bang, bang, on TikTok sale-or-ban plan
March 14, 2024
Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects https://www.thunderbird.net/en-US/thunderbird/115.8.1/releasenotes/
March 14, 2024
python-multipart 0.0.7 (2024-02-03) Refactor header option parser to use the standard library instead of a custom RegEx #75. Fixes a denial of service vulnerability, GHSA-qf9m-vfgh-m389, initially reported in FastAPI but applicable to other libraries and applications.
March 14, 2024
https://security-tracker.debian.org/tracker/DSA-5640-1
March 14, 2024
Feds seek attestation on secure software
March 13, 2024
JetBrains releases security fixes for TeamCity CI/CD system
March 13, 2024
Poking holes in Google tech bagged bug hunters $10M
March 13, 2024
Microsoft Copilot for Security prepares for April liftoff
March 13, 2024
* bsc#1219775 Cross-References: * CVE-2024-22119
March 13, 2024
* bsc#1220404 * bsc#1220405 Cross-References: * CVE-2024-25081
March 13, 2024
* bsc#1220404 * bsc#1220405 Cross-References: * CVE-2024-25081
March 13, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 13, 2024
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 13, 2024
Reducing the cloud security overhead
March 13, 2024
Add implicit rejection in PKCS#1 v1.5 in OpenSSL.
March 13, 2024
Whizkids jimmy OpenAI, Google’s closed models
March 13, 2024
https://security-tracker.debian.org/tracker/DSA-5639-1
March 13, 2024
Biden’s budget proposal boosts CISA funding to $3B
March 12, 2024
Rack could be made do denial of service if it received a specially crafted header.
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
Several security issues were fixed in Open vSwitch.
March 12, 2024
French government sites disrupted by très grande DDoS
March 12, 2024
An update that fixes one vulnerability is now available.
March 11, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 11, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 11, 2024
Two vulnerabilities were discovered in tiff, Tag Image File Format library. CVE-2023-3576
March 11, 2024
* bsc#1027519 * bsc#1218851 * bsc#1219080 * bsc#1219885
March 11, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 11, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 11, 2024
APT attacks taking aim at Tibetans – Week in security with Tony Anscombe
Evasive Panda has been spotted targeting Tibetans in several countries and territories with payloads that included a previously undocumented backdoor ESET has named Nightdoor
March 10, 2024
It was discovered that the uv_getaddrinfo() function in libuv, an asynchronous event notification library, incorrectly truncated certain hostnames, which may result in bypass of security measures on internal APIs or SSRF attacks.
March 10, 2024
2267205 – CVE-2024-24246 qpdf – Heap Buffer Overflow vulnerability in qpdf [fedora-all]
March 10, 2024
backport fix for PEAP client (CVE-2023-52160)
March 10, 2024
2267205 – CVE-2024-24246 qpdf – Heap Buffer Overflow vulnerability in qpdf [fedora-all]
March 10, 2024
Update to latest version Security fix for CVE-2023-39325
March 10, 2024
https://security-tracker.debian.org/tracker/DSA-5638-1
March 10, 2024
Incorrect handling of extension attributes in PAX archives has been fixed in the GNU tar archiving utility. For Debian 10 buster, this problem has been fixed in version
March 9, 2024
Several security vulnerabilities have been discovered in Squid, a full featured web proxy cache. Due to programming errors in Squid’s HTTP request parsing, remote attackers may be able to execute a denial of service attack by sending large X-Forwarded-For header or trigger a stack buffer overflow while
March 9, 2024
upstream security release 122.0.6261.111 – High CVE-2024-2173: Out of bounds memory access in V8 – High CVE-2024-2174: Inappropriate implementation in V8 – High CVE-2024-2176: Use after free in FedCM
March 9, 2024
* bsc#1218571 * bsc#1219238 Cross-References: * CVE-2023-7207
March 8, 2024
* bsc#1218571 * bsc#1219238 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5
March 8, 2024
Top 10 scams targeting seniors – and how to keep your money safe
The internet can be a wonderful place. But it’s also awash with fraudsters targeting people who are susceptible to fraud.
March 8, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 8, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 8, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 8, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 8, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 8, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 8, 2024
Securing open source software: Whose job is it, anyway?
March 8, 2024