March 18, 2024
* bsc#1219465 Cross-References: * CVE-2023-3966
March 18, 2024
* bsc#1213590 * bsc#1214686 * bsc#1214687 * bsc#1221187 * bsc#960589
March 18, 2024
Infosec teams must be allowed to fail, argues Gartner
March 18, 2024
Several security issues were fixed in OpenJDK 8.
March 18, 2024
ChatGPT side-channel attack has easy fix: Token obfuscation
March 18, 2024
Update to shim-15.8
March 18, 2024
Update to shim-15.8
March 18, 2024
Update to shim-15.8
March 18, 2024
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. (CVE-2020-36518) In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the
March 17, 2024
The updated packages fix security vulnerabilities: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. (CVE-2022-38398) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML
March 17, 2024
Zero Trust MLOps with OpenShift Platform Plus
March 17, 2024
curl was affected by a path traversal vulnerability. SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate
March 17, 2024
Healthcare still a prime target for cybercrime gangs – Week in security with Tony Anscombe
Healthcare organizations remain firmly in attackers’ crosshairs, representing 20 percent of all victims of ransomware attacks among critical infrastructure entities in the US in 2023
March 16, 2024
Threat intelligence explained | Unlocked 403: A cybersecurity podcast
We break down the fundamentals of threat intelligence and its role in anticipating and countering emerging threats
March 16, 2024
upstream security release 122.0.6261.128 High CVE-2024-2400: Use after free in Performance Manager
March 16, 2024
Security fix for CVE-2007-4559.
March 16, 2024
New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454
March 16, 2024
Path traversal in moment.locale. (CVE-2022-24785) Inefficient parsing algorithim resulting in DoS. (CVE-2022-31129) References: – https://bugs.mageia.org/show_bug.cgi?id=30664
March 16, 2024
Security fix for CVE-2007-4559.
March 16, 2024
Update to 3.2.2 It indirectly fix CVE-2023-3966 and CVE-2023-5366
March 16, 2024
How to share sensitive files securely online
Here are a few tips for secure file transfers and what else to consider when sharing sensitive documents so that your data remains safe
March 15, 2024
Scareware scam: Restoro and Reimage fined $26 million by FTC
March 15, 2024
* bsc#1219836 Cross-References: * CVE-2024-1062
March 15, 2024
Cop shop rapped for ‘completely avoidable’ web form blunder
March 15, 2024
It was discovered that composer, a dependency manager for the PHP language, processed files in the local working directory. This could lead to local privilege escalation or malicious code execution. Due to a technical issue this email was not sent on 2024-02-26 like it should
March 15, 2024
* jsc#PED-2362 * jsc#SLE-5514 Cross-References: * CVE-2023-20593
March 15, 2024
* jsc#PED-2362 * jsc#SLE-5514 Cross-References: * CVE-2023-20593
March 15, 2024
* bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465
March 15, 2024
* bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465
March 15, 2024
LockBit ransomware kingpin gets 4 years behind bars
March 14, 2024
Expat could be made to crash if it received specially crafted input.
March 14, 2024
Several security issues were fixed in TeX Live.
March 14, 2024
Two vulnerabilities were discovered in Open vSwitch, a software-based Ethernet virtual switch, which could result in a bypass of OpenFlow rules or denial of service.
March 14, 2024
python-cryptography could be made to expose sensitive information over the network.
March 14, 2024
Open source is not insecure
March 14, 2024
US Congress goes bang, bang, on TikTok sale-or-ban plan
March 14, 2024
Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects https://www.thunderbird.net/en-US/thunderbird/115.8.1/releasenotes/
March 14, 2024
python-multipart 0.0.7 (2024-02-03) Refactor header option parser to use the standard library instead of a custom RegEx #75. Fixes a denial of service vulnerability, GHSA-qf9m-vfgh-m389, initially reported in FastAPI but applicable to other libraries and applications.
March 14, 2024
https://security-tracker.debian.org/tracker/DSA-5640-1
March 14, 2024
Feds seek attestation on secure software
March 13, 2024
JetBrains releases security fixes for TeamCity CI/CD system
March 13, 2024
Poking holes in Google tech bagged bug hunters $10M
March 13, 2024
Microsoft Copilot for Security prepares for April liftoff
March 13, 2024
* bsc#1219775 Cross-References: * CVE-2024-22119
March 13, 2024
* bsc#1220404 * bsc#1220405 Cross-References: * CVE-2024-25081
March 13, 2024
* bsc#1220404 * bsc#1220405 Cross-References: * CVE-2024-25081
March 13, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 13, 2024
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 13, 2024
Reducing the cloud security overhead
March 13, 2024
Add implicit rejection in PKCS#1 v1.5 in OpenSSL.
March 13, 2024
Whizkids jimmy OpenAI, Google’s closed models
March 13, 2024
https://security-tracker.debian.org/tracker/DSA-5639-1
March 13, 2024
Biden’s budget proposal boosts CISA funding to $3B
March 12, 2024
Rack could be made do denial of service if it received a specially crafted header.
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
Several security issues were fixed in Open vSwitch.
March 12, 2024
French government sites disrupted by très grande DDoS
March 12, 2024
An update that fixes one vulnerability is now available.
March 11, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 11, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 11, 2024
Two vulnerabilities were discovered in tiff, Tag Image File Format library. CVE-2023-3576
March 11, 2024
* bsc#1027519 * bsc#1218851 * bsc#1219080 * bsc#1219885
March 11, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 11, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 11, 2024
APT attacks taking aim at Tibetans – Week in security with Tony Anscombe
Evasive Panda has been spotted targeting Tibetans in several countries and territories with payloads that included a previously undocumented backdoor ESET has named Nightdoor
March 10, 2024
It was discovered that the uv_getaddrinfo() function in libuv, an asynchronous event notification library, incorrectly truncated certain hostnames, which may result in bypass of security measures on internal APIs or SSRF attacks.
March 10, 2024
2267205 – CVE-2024-24246 qpdf – Heap Buffer Overflow vulnerability in qpdf [fedora-all]
March 10, 2024
backport fix for PEAP client (CVE-2023-52160)
March 10, 2024
2267205 – CVE-2024-24246 qpdf – Heap Buffer Overflow vulnerability in qpdf [fedora-all]
March 10, 2024
Update to latest version Security fix for CVE-2023-39325
March 10, 2024