Articles about security
Here’s how the results of vulnerability scans factor into decisions on cyber-insurance and how human intelligence comes into play in the assessment of such digital signals
Artificial intelligence is on everybody’s lips these days, but there are also many misconceptions about what AI actually is and isn’t. We unpack the basics and examine AI’s broader implications.
Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575
Update to 2.11.5
Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575
Update to 1.7.2 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575
Rebase to version 2.6.0
Update to 2.28.7 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.7 Security Advisories: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-
Several security issues were fixed in the Linux kernel.
* bsc#1218429 Cross-References: * CVE-2023-6879
* bsc#1218690 * bsc#1218810 * bsc#1219243 Cross-References:
* bsc#1219113 * bsc#1219604 Cross-References: * CVE-2014-1745
* bsc#1219679 Cross-References: * CVE-2024-0985
https://security-tracker.debian.org/tracker/DSA-5624-1
https://security-tracker.debian.org/tracker/DSA-5623-1
https://security-tracker.debian.org/tracker/DSA-5622-1
Did you know that more than nine million Americans have their identity stolen each year? Your data is stored across countless databases for various purposes, making it a prime target for criminals. With access to your personal information, bad actors can drain your bank account and damage your credit—or worse. But that doesn’t mean you […]
The updated packages fix security vulnerabilities: Parsing large DNS messages may cause excessive CPU load. (CVE-2023-4408) Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled. (CVE-2023-5517) Enabling both DNS64 and serve-stale may cause an assertion failure
* bsc#1108281 * bsc#1193285 * bsc#1215275 * bsc#1216702 * bsc#1217987
Several security issues were fixed in UltraJSON.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in EDK II.
update to 1.26.2
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. For the oldstable distribution (bullseye), these problems have been fixed
Two vulnerabilities were discovered in unbound, a validating, recursive, caching DNS resolver. Specially crafted DNSSEC answers could lead unbound down a very CPU intensive and time costly DNSSEC (CVE-2023-50387) or NSEC3 hash (CVE-2023-50868) validation path,
UltraJSON could be made to crash if it received specially crafted input.
https://security-tracker.debian.org/tracker/DSA-5620-1
https://security-tracker.debian.org/tracker/DSA-5621-1
In the digital age, the quest for love has moved online, but so have the fraudsters, with romance scams reaching record highs. These scams don’t just harm individuals financially and emotionally; they can also pose significant risks to businesses. Let’s explore how these scams work, their impact, and how both businesses and consumers can protect […]
Several security issues were fixed in WebKitGTK.
Glance_store could be made to expose sensitive information.
Several security issues were fixed in OpenSSL.
* bsc#1217654 * bsc#1219131 Cross-References: * CVE-2023-50269
Update to 1.0.5
* bsc#1218174 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5
Update to the latest stable version: Features Implement a new plugin manager from scratch to replace Yapsy, which does not work on Python 3.12 due to Python 3.12 carelessly removing parts of the standard library (Issue #3719)
Update to 121.0.6167.160 High CVE-2024-1284: Use after free in Mojo High CVE-2024-1283: Heap buffer overflow in Skia
Apply fix for CVE-2023-28531
Update to the latest stable version: Features Implement a new plugin manager from scratch to replace Yapsy, which does not work on Python 3.12 due to Python 3.12 carelessly removing parts of the standard library (Issue #3719)
Called a “watershed year for ransomware”, 2023 marked a reversal from the decline in ransomware payments observed in the previous year
Fix webkit_web_context_allow_tls_certificate_for_host to handle IPv6 URIs produced by SoupURI. Ignore stops with offset zero before last one when rendering gradients with cairo. Write bwrapinfo.json to disk for xdg-desktop-portal.
New version 4.0.12. Includes fixes for CVE-2023-5371, CVE-2023-6174, CVE-2023-6175, CVE-2024-0208.
Security fix for CVE-2024-21626
The updated packages fix security vulnerabilities: Logic bug in text extractor led to invalid memory access. (CVE-2022-30524) Integer overflow in rasterizer. (CVE-2022-30775) PDF object loop in Catalog::countPageTree. (CVE-2022-33108)
Update rust-vmm components and their consumers to address CVE-2023-50711
Update rust-vmm components and their consumers to address CVE-2023-50711
Update rust-vmm components and their consumers to address CVE-2023-50711
Update rust-vmm components and their consumers to address CVE-2023-50711
Update rust-vmm components and their consumers to address CVE-2023-50711
Update rust-vmm components and their consumers to address CVE-2023-50711
https://security-tracker.debian.org/tracker/DSA-5618-1
OpenText is committed to providing you with the latest intelligence and tips to safeguard your digital life, especially during high-risk periods like tax season. Our threat analysts are constantly monitor the ebb and flow of various threats. One trend that has recently caught our attention is the notable spike in malware-infected cracked software, particularly as […]