January 5, 2025
Vulnerabilities were found in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are prior to 7.0.22 and prior to 7.1.2. A difficult to exploit vulnerability allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise an Oracle
January 4, 2025
The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many ` `. (CVE-2024-39908)
January 4, 2025
Atos denies Space Bears’ ransomware claims – with a ‘but’
January 4, 2025
Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505
January 4, 2025
January 3, 2025
* bsc#1217826 * bsc#1222815 * bsc#1230551 * bsc#1230552 * bsc#1231345
January 3, 2025
* bsc#1205224 * bsc#1211507 Cross-References: * CVE-2022-39377
January 3, 2025
January 3, 2025
CAPTCHAs now run Doom – on nightmare mode
January 3, 2025
Boffins carve up C so code can be converted to Rust
January 3, 2025
The cloud architecture renaissance of 2025
January 3, 2025
Write Python like it’s 2025
January 3, 2025
Ruby completes switch to Prism parser
January 3, 2025
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available.
January 3, 2025
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available.
January 3, 2025
Linux 6.1 has been packaged for Debian 11 as linux-6.1. This provides a supported upgrade path for systems that currently use kernel packages from the “bullseye-backports” suite.
January 3, 2025
Go teams struggle with coding standards – survey
January 2, 2025
Download the Hot IT Certifications Enterprise Spotlight
January 2, 2025
January 2, 2025
* bsc#1226162 * bsc#1226468 * bsc#1234292 Cross-References:
January 2, 2025
January 2, 2025
* bsc#1234808 * bsc#1234809 Cross-References: * CVE-2024-56201
January 2, 2025
Fine-tuning Azure OpenAI models in Azure AI Foundry
January 2, 2025
It was discovered that there was a potential Denial of Service (DoS) vulnerability, in Django, a popular Python-based web development framework.
January 1, 2025
The AI Fix #31: Replay: AI doesn’t exist
January 1, 2025
Eight things that should not have happened last year, but did
January 1, 2025
4 keys for writing cross-platform apps
January 1, 2025
Intro to VSCode.dev: The IDE in your browser
January 1, 2025
Update to 2.12.9 Fixes CVE-2024-40896
January 1, 2025
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2023-28370
January 1, 2025
December 31, 2024
December 31, 2024
* bsc#1234795 Cross-References: * CVE-2024-56378
December 31, 2024
December 31, 2024
December 31, 2024
US Treasury Department outs the blast radius of BeyondTrust’s key leak
December 31, 2024
China’s cyber intrusions took a sinister turn in 2024
December 31, 2024
The vital role of red teaming in safeguarding AI systems and data
December 31, 2024
debootstrap has been updated to avoid pulling in usr-is-merged in testing and unstable. This fixes creating testing/unstable chroots after src:usrmerge is removed from the archive.
December 31, 2024
More telcos confirm Salt Typhoon breaches as White House weighs in
December 30, 2024
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.
December 30, 2024
* bsc#1234795 Cross-References: * CVE-2024-56378
December 30, 2024
December 30, 2024
* jsc#PED-11136 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6
December 30, 2024
The future of open source will be messy
December 30, 2024
Multitenant data management with TiDB
December 30, 2024
10 hot programming trends — and 10 going cold
December 30, 2024
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available.
December 30, 2024
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available.
December 30, 2024
It’s only a matter of time before LLMs jump start supply-chain attacks
December 29, 2024
An update that contains security fixes can now be installed.
December 29, 2024
Multiple vulnerabilities were found in opensc, a set of libraries and utilities to access smart cards, which could lead to application crash, information leak, or PIN bypass.
December 29, 2024
https://security-tracker.debian.org/tracker/DSA-5838-1
December 29, 2024
How cops taking down LockBit, ALPHV led to RansomHub’s meteoric rise
December 28, 2024
Critical warning from Microsoft: .NET install domains changing
December 27, 2024
Microsoft adds another problem to the Windows 11 24H2 naughty list
December 27, 2024
December 27, 2024
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
December 27, 2024
December 27, 2024
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
December 27, 2024
Multiple CVE fixes
December 27, 2024
Update to 0^20241216git660795b dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC. dr_mp3 0.6.40: Improve detection of ARM64EC dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded files.
December 27, 2024
Explore the Top Secure Linux Distros for Privacy & Security in 2025
December 26, 2024
https://security-tracker.debian.org/tracker/DSA-5835-1
December 26, 2024
Linux vs. Viruses: The Power of User Savvy & System Architecture
December 26, 2024
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
December 26, 2024
The Role of Open Source AI in Cyber Defense
December 26, 2024
How to split strings efficiently in C#
December 26, 2024
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74
December 26, 2024
https://security-tracker.debian.org/tracker/DSA-5836-1
December 26, 2024
https://security-tracker.debian.org/tracker/DSA-5837-1
December 26, 2024
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-54479
December 25, 2024
* bsc#1234795 Cross-References: * CVE-2024-56378
December 25, 2024
December 25, 2024
* bsc#1234795 Cross-References: * CVE-2024-56378
December 25, 2024
Former NSA cyberspy’s not-so-secret hobby: Hacking Christmas lights
December 25, 2024
What is serverless? Serverless computing explained
December 25, 2024
Python in 2024: Faster, more powerful, and more popular than ever
December 25, 2024
Automatic update for tomcat-9.0.98-1.fc41. Changelog for tomcat * Mon Dec 09 2024 Packit – 1:9.0.98-1 – Update to version 9.0.98 – Resolves: rhbz#2331168
December 25, 2024
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74
December 25, 2024
Automatic update for tomcat-9.0.98-1.fc40. Changelog for tomcat * Mon Dec 09 2024 Packit – 1:9.0.98-1 – Update to version 9.0.98 – Resolves: rhbz#2331168
December 25, 2024
December 24, 2024
* bsc#1129772 * bsc#1152803 * bsc#1154838 * bsc#1181400 * bsc#1230961
December 24, 2024
One third of adults can’t delete device data
December 24, 2024
The AI backlash couldn’t have come at a better time
December 24, 2024
In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte
December 24, 2024
Update to 3.12.8
December 24, 2024
Update to 3.12.8
December 24, 2024