June 8, 2025
Several vulnerabilities were discovered in modsecurity-apache, an Apache module to tighten the Web application security, which may result in denial of service (high memory consumption).
June 8, 2025
New libvpx packages are available for Slackware 15.0 and -current to fix security issues.
June 8, 2025
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data.
June 8, 2025
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump. (CVE-2025-4598) References:
June 8, 2025
Security constraint bypass for CGI scripts. (CVE-2025-46701) References: – https://bugs.mageia.org/show_bug.cgi?id=34332 – https://openwall.com/lists/oss-security/2025/05/29/4
June 8, 2025
Update to version 4.21.6
June 8, 2025
Add patch for double free
June 8, 2025
Fix CVE-2025-23016
June 8, 2025
Update to Samba 4.22.2 – Security fix for CVE-2025-0620
June 7, 2025
Update to 137.0.7151.68 CVE-2025-5419: Out of bounds read and write in V8 CVE-2025-5068: Use after free in Blink
June 7, 2025
This update includes mod_security version 2.9.9 which addresses CVE-2025-47947 and includes various bug fixes. See https://github.com/owasp- modsecurity/ModSecurity/releases/tag/v2.9.9 for more information on the changes in this release.
June 7, 2025
Update to 137.0.7151.68 CVE-2025-5419: Out of bounds read and write in V8 CVE-2025-5068: Use after free in Blink
June 7, 2025
This update includes mod_security version 2.9.9 which addresses CVE-2025-47947 and includes various bug fixes. See https://github.com/owasp- modsecurity/ModSecurity/releases/tag/v2.9.9 for more information on the changes in this release.
June 7, 2025
June 6, 2025
BladedFeline: Whispering in the dark
ESET researchers analyzed a cyberespionage campaign conducted by BladedFeline, an Iran-aligned APT group with likely ties to OilRig
June 6, 2025
* bsc#1243268 Cross-References: * CVE-2025-47287
June 6, 2025
* bsc#1236826 * bsc#1239671 * bsc#1241012 Cross-References:
June 6, 2025
* bsc#1240392 Cross-References: * CVE-2025-2704
June 6, 2025
* bsc#1236974 Cross-References: * CVE-2024-12243
June 6, 2025
Your ransomware nightmare just came true – now what?
June 6, 2025
Several security issues were fixed in the Linux kernel.
June 6, 2025
Decentralized mesh cloud: A promising concept
June 6, 2025
JavaScript innovation and the culture of programming
June 6, 2025
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24223
June 6, 2025
https://security-tracker.debian.org/tracker/DSA-5937-1
June 6, 2025
https://security-tracker.debian.org/tracker/DSA-5938-1
June 6, 2025
https://security-tracker.debian.org/tracker/DSA-5939-1
June 6, 2025
AT&T not sure if new customer data dump is déjà vu
June 5, 2025
Snowflake: Latest news and insights
June 5, 2025
Several security issues were fixed in Bootstrap.
June 5, 2025
Automating devops with Azure SRE Agent
June 5, 2025
How to test your Java applications with JUnit 5
June 5, 2025
Several security issues were fixed in the Linux kernel.
June 5, 2025
June 5, 2025
* bsc#1243332 * bsc#1243422 * bsc#1243423 Cross-References:
June 5, 2025
* bsc#1243313 Cross-References: * CVE-2025-47273
June 5, 2025
* bsc#1241274 * bsc#1241275 * bsc#1241276 Cross-References:
June 5, 2025
https://security-tracker.debian.org/tracker/DSA-5936-1
June 5, 2025
AI is powering enterprise development, GitHub says
June 4, 2025
Naming is easy! A guide for developers
June 4, 2025
New to Rust? Don’t make these common mistakes
June 4, 2025
JavaScript promises: 4 gotchas and how to avoid them
June 4, 2025
https://security-tracker.debian.org/tracker/DSA-5935-1
June 4, 2025
Kotlin cozies up to Spring Framework
June 3, 2025
https://security-tracker.debian.org/tracker/DSA-5934-1
June 3, 2025
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to “*.example.com”, a request to “[::1%25.example.com]:80` will incorrectly match and not be proxied – CVE-2025-22870.
June 3, 2025
Don’t let dormant accounts become a doorway for cybercriminals
Do you have online accounts you haven’t used in years? If so, a bit of digital spring cleaning might be in order.
June 3, 2025
C# 14 introduces file-based apps
June 3, 2025
Several security issues were fixed in the Linux kernel.
June 3, 2025
The Hidden Security Risks of Open-Source AI
June 3, 2025
Open VM Tools could be made to overwrite files as the administrator.
June 3, 2025
3 cloud migration secrets
June 3, 2025
Several security issues were fixed in MariaDB.
June 3, 2025
The month of June is a time for fun in the sun and a break from the school year, but did you know it’s also the perfect time to step up your family’s online security? June is Internet Safety Month, a yearly reminder to strengthen your defenses against online threats. In today’s hyper-connected world, we […]
June 3, 2025
Fix for local information disclosure in systemd-coredump (CVE-2025-4598) Various other fixes
June 3, 2025
Two security vulnerabilities have been discovered in Asterisk, an Open Source Private Branch Exchange. CVE-2025-47779
June 2, 2025