April 23, 2024
https://security-tracker.debian.org/tracker/DSA-5673-1
April 23, 2024
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure. For Debian 10 buster, these problems have been fixed in version
April 22, 2024
Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file.
April 22, 2024
percona-xtrabackup could be made to run programs as your login if it opened a specially crafted file.
April 22, 2024
US House passes fresh TikTok ban proposal to Senate
April 22, 2024
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
April 22, 2024
* bsc#1198101 * bsc#1205588 * bsc#1205855 * bsc#1210382 * bsc#1213945
April 22, 2024
* bsc#1219435 Cross-References: * CVE-2024-1086
April 22, 2024
Has the ever-present cyber danger just got worse?
April 22, 2024
Google all at sea over rising tide of robo-spam
April 22, 2024
https://security-tracker.debian.org/tracker/DSA-5672-1
April 22, 2024
https://security-tracker.debian.org/tracker/DSA-5671-1
April 22, 2024
https://security-tracker.debian.org/tracker/DSA-5670-1
April 22, 2024
https://security-tracker.debian.org/tracker/DSA-5669-1
April 22, 2024
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
April 21, 2024
Protecting yourself after a medical data breach – Week in security with Tony Anscombe
What are the risks and consequences of having your health data exposed and what are the steps to take if it happens to you?
April 21, 2024
The many faces of impersonation fraud: Spot an imposter before it’s too late
What are some of the most common giveaway signs that the person behind the screen or on the other end of the line isn’t who they claim to be?
April 21, 2024
The ABCs of how online ads can impact children’s well-being
From promoting questionable content to posing security risks, inappropriate ads present multiple dangers for children. Here’s how to help them stay safe.
April 21, 2024
eXotic Visit includes XploitSPY malware – Week in security with Tony Anscombe
Almost 400 people in India and Pakistan have fallen victim to an ongoing Android espionage campaign called eXotic Visit
April 21, 2024
Bitcoin scams, hacks and heists – and how to avoid them
Here’s how cybercriminals target cryptocurrencies and how you can keep your bitcoin or other crypto safe
April 21, 2024
Beyond fun and games: Exploring privacy risks in children’s apps
Should children’s apps come with ‘warning labels’? Here’s how to make sure your children’s digital playgrounds are safe places to play and learn.
April 21, 2024
The devil is in the fine print – Week in security with Tony Anscombe
Temu’s cash giveaway where people were asked to hand over vast amounts of their personal data to the platform puts the spotlight on the data-slurping practices of online services today
April 21, 2024
update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914: Use after free in V8 High CVE-2024-3834: Use after free in Downloads
April 21, 2024
New upstream release (125.0)
April 21, 2024
Security fix for CVE-2023-5752
April 21, 2024
Update to 1.15.8 Fixes CVE-2024-32462
April 21, 2024
Security fix for CVE-2024-27316
April 21, 2024
https://security-tracker.debian.org/tracker/DSA-5667-1
April 20, 2024
4 use cases for AI in cyber security
April 20, 2024
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
April 20, 2024
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
April 20, 2024
Security fixes for CVE-2024-27351 Potential regular expression DOS in django.utils.text.Truncator.words() CVE-2024-24680 denial-of-service in intcomma template filter CVE-2023-43665 Denial-of-service possibility in django.utils.text.Truncator
April 20, 2024
fix CONTINUATION frames DoS (CVE-2024-28182)
April 20, 2024
This update includes several bug fixes from the upstream glibc release branch, including a fix for CVE-2024-2961.
April 20, 2024
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
April 20, 2024
https://security-tracker.debian.org/tracker/DSA-5668-1
April 20, 2024
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
April 19, 2024
* bsc#1220181 Cross-References: * CVE-2024-24476
April 19, 2024
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
April 19, 2024
* bsc#1219491 Cross-References: * CVE-2023-46045
April 19, 2024
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking.
April 19, 2024
WordPress 6.4.4 Security Release Security updates included in this release A cross-site scripting (XSS) vulnerability affecting the Avatar block type; reported by John Blackbourn of the WordPress security team. Many thanks to Mat Rollings for assisting with the research.
April 19, 2024
https://security-tracker.debian.org/tracker/DSA-5666-1
April 19, 2024
https://security-tracker.debian.org/tracker/DSA-5665-1
April 18, 2024
https://security-tracker.debian.org/tracker/DSA-5664-1
April 18, 2024
https://security-tracker.debian.org/tracker/DSA-5663-1
April 18, 2024
GNU C Library could be made to crash or run programs if it processed specially crafted data.
April 18, 2024
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
April 18, 2024
EU tells Meta it can’t paywall privacy
April 18, 2024
This update includes the changes in tzdata 2024a for the Perl bindings. For the list of changes, see DLA-3789-1. For Debian 10 buster, this problem has been fixed in version
April 18, 2024
This update includes the changes in tzdata 2024a. Notable changes are: – – Kazakhstan unifies on UTC+5 beginning 2024-03-01.
April 18, 2024
sosreport: Fix command injection with crafted report names [CVE-2024-2947]
April 18, 2024
Fix for CVE-2024-31497
April 18, 2024
https://security-tracker.debian.org/tracker/DSA-5655-2
April 17, 2024
Exploit code for Palo Alto Networks zero-day now public
April 17, 2024
* bsc#1200599 * bsc#1209635 * bsc#1212514 * bsc#1213456 * bsc#1217987
April 17, 2024
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
April 17, 2024
Japanese government rejects Yahoo! infosec improvement plan
April 17, 2024
New upstream release (125.0)
April 17, 2024
The 6.8.6 stable kernel update contains a number of important fixes across the tree.
April 17, 2024
Update to 0.9.0; fix rhbz#2274045 and rhbz#2266791; Security fix for CVE-2024-25713
April 17, 2024
New version 4.2.4. Includes a fix for CVE-2024-2955
April 17, 2024
Most developers have adopted devops, survey says
April 17, 2024