Menu

Monthly Archives: December 2024

* bsc#1234795 Cross-References: * CVE-2024-56378

US Treasury Department outs the blast radius of BeyondTrust’s key leak
China’s cyber intrusions took a sinister turn in 2024
The vital role of red teaming in safeguarding AI systems and data

debootstrap has been updated to avoid pulling in usr-is-merged in testing and unstable. This fixes creating testing/unstable chroots after src:usrmerge is removed from the archive.

More telcos confirm Salt Typhoon breaches as White House weighs in

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.

* bsc#1234795 Cross-References: * CVE-2024-56378

* jsc#PED-11136 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6

10 hot programming trends — and 10 going cold
Multitenant data management with TiDB
The future of open source will be messy

iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available.

iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available.

It’s only a matter of time before LLMs jump start supply-chain attacks

An update that contains security fixes can now be installed.

Multiple vulnerabilities were found in opensc, a set of libraries and utilities to access smart cards, which could lead to application crash, information leak, or PIN bypass.

https://security-tracker.debian.org/tracker/DSA-5838-1

How cops taking down LockBit, ALPHV led to RansomHub’s meteoric rise
Critical warning from Microsoft: .NET install domains changing
Microsoft adds another problem to the Windows 11 24H2 naughty list

* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407

* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407

Multiple CVE fixes

Update to 0^20241216git660795b dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC. dr_mp3 0.6.40: Improve detection of ARM64EC dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded files.

Explore the Top Secure Linux Distros for Privacy & Security in 2025

https://security-tracker.debian.org/tracker/DSA-5835-1

Linux vs. Viruses: The Power of User Savvy & System Architecture
New Interlock Ransomware Targets Critical Linux Infrastructure, FreeBSD Servers

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The Role of Open Source AI in Cyber Defense
How to split strings efficiently in C#

Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74

https://security-tracker.debian.org/tracker/DSA-5837-1

https://security-tracker.debian.org/tracker/DSA-5836-1

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-54479

* bsc#1234795 Cross-References: * CVE-2024-56378

* bsc#1234795 Cross-References: * CVE-2024-56378

Former NSA cyberspy’s not-so-secret hobby: Hacking Christmas lights
What is serverless? Serverless computing explained
Python in 2024: Faster, more powerful, and more popular than ever

Automatic update for tomcat-9.0.98-1.fc41. Changelog for tomcat * Mon Dec 09 2024 Packit – 1:9.0.98-1 – Update to version 9.0.98 – Resolves: rhbz#2331168

Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74

Automatic update for tomcat-9.0.98-1.fc40. Changelog for tomcat * Mon Dec 09 2024 Packit – 1:9.0.98-1 – Update to version 9.0.98 – Resolves: rhbz#2331168

The AI Fix #30: ChatGPT reveals the devastating truth about Santa (Merry Christmas!)
How Androxgh0st rose from Mozi’s ashes to become ‘most prevalent malware’

* bsc#1129772 * bsc#1152803 * bsc#1154838 * bsc#1181400 * bsc#1230961

What do ransomware and Jesus have in common? A birth month and an unwillingness to die
One third of adults can’t delete device data
The AI backlash couldn’t have come at a better time

In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte

Update to 3.12.8

Update to 3.12.8

‘That’s not a bug, it’s a feature’ takes on a darker tone when malware’s involved

* bsc#1220490 * jsc#PED-10258 * jsc#PED-10751 Cross-References:

Suspected LockBit dev, facing US extradition, ‘did it for the money’

* bsc#1047218 * bsc#1233297 Cross-References: * CVE-2024-47535

* bsc#1220618 * bsc#1229238 * bsc#1231373 Cross-References:

UK ICO not happy with Google’s plans to allow device fingerprinting
Overcoming modern observability challenges
How generative AI could aid Kubernetes operations
The exciting new world of Redis

release v1.14.0

release v1.14.0

Update to 131.0.6778.204 High CVE-2024-12692: Type Confusion in V8 High CVE-2024-12693: Out of bounds memory access in V8 High CVE-2024-12694: Use after free in Compositing High CVE-2024-12695: Out of bounds write in V8

Update to 1.24.10, fixes multiple CVEs.

Update to 1.24.10, fixes multiple CVEs.

Update to 1.24.10, fixes multiple CVEs.

Update to 1.24.10, fixes multiple CVEs.

Update to 1.24.10, fixes multiple CVEs.

* bsc#1223098 Cross-References: * CVE-2024-27306

Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505

Update to v2.14

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Update to 4.3.3 (rhbz#2331357)

* bsc#1234371 Cross-References: * CVE-2021-3156

* bsc#1233973 Cross-References: * CVE-2024-53008

* bsc#1233894 Cross-References: * CVE-2024-53920

Cost-conscious repatriation strategies
Infosec experts divided on AI’s potential to assist red teams

https://security-tracker.debian.org/tracker/DSA-5834-1

Smashing Security podcast #398: Fake CAPTCHAs, Harmageddon, and Krispy Kreme

* bsc#1234068 Cross-References: * CVE-2024-11053

* bsc#1233282 Cross-References: * CVE-2024-52533

* bsc#1232528 Cross-References: * CVE-2024-9681