February 9, 2024
The ever-present state of cyber security alert
February 9, 2024
* bsc#1219048 Cross-References: * CVE-2023-50447
February 9, 2024
Several security issues were fixed in the Linux kernel.
February 9, 2024
Multiple denial of service vulnerabilities have been found in libxml2.
February 9, 2024
* bsc#1210638 Cross-References: * CVE-2023-27043
February 9, 2024
India to make its digital currency programmable
February 9, 2024
Upstream version 6.6.14 with many bugfixes and at least the following security fixes: An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
February 9, 2024
fix gcc14 build error and another epub crash use https://github.com/mate-desktop/atril/commit/479e927 use https://github.com/mate-desktop/atril/commit/d901a9d update to 1.26.2 fix security security advisory
February 9, 2024
FBI: Give us warrantless Section 702 snooping powers – or China wins
February 9, 2024
https://security-tracker.debian.org/tracker/DSA-5619-1
February 9, 2024
Fake LastPass lookalike made it into Apple App Store
February 8, 2024
Raspberry Robin devs are buying exploits for faster attacks
February 8, 2024
Cybercrime duo accused of picking $2.5M from Apple’s orchard
February 8, 2024
* bsc#1218303 Cross-References: * CVE-2023-6704
February 8, 2024
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
February 8, 2024
Rust can help make software secure – but it’s no cure-all
February 8, 2024
Several security issues were fixed in the Linux kernel.
February 8, 2024
https://security-tracker.debian.org/tracker/DSA-5617-1
February 8, 2024
Several security issues were fixed in the Linux kernel.
February 7, 2024
* bsc#1216044 * bsc#1217522 * bsc#1218255 Cross-References:
February 7, 2024
New expat packages are available for Slackware 15.0 and -current to fix security issues.
February 7, 2024
US says China’s Volt Typhoon is readying destructive cyberattacks
February 7, 2024
Raspberry Pi Pico cracks BitLocker in under a minute
February 7, 2024
JetBrains urges swift patching of latest critical TeamCity flaw
February 7, 2024
* bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-6176
February 7, 2024
* bsc#1210619 Cross-References: * CVE-2023-1829
February 7, 2024
Red Hat and RISC-V: To the far edge and beyond
February 7, 2024
eBPF wrapped 2023
February 7, 2024
Martin Hellman: We’re playing Russian roulette
February 7, 2024
The spyware business is booming despite government crackdowns
February 7, 2024
* bsc#1218255 Cross-References: * CVE-2023-6932
February 7, 2024
* bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-6176
February 7, 2024
* bsc#1210619 * bsc#1218255 Cross-References: * CVE-2023-1829
February 7, 2024
* bsc#1210619 Cross-References: * CVE-2023-1829
February 7, 2024
DEF CON is canceled! No, really this time – but the show will go on
February 7, 2024
MuleSoft unveils policy development kit for API gateway
February 6, 2024
https://security-tracker.debian.org/tracker/DSA-5616-1
February 6, 2024
EquiLend back in the saddle as ransom payment rumors swirl
February 6, 2024
* bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-6176
February 6, 2024
The 6.7.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
February 6, 2024
The 6.7.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
February 6, 2024
QtWebEngine 5.15.16 bugfix update.
February 6, 2024
The 6.7.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
February 6, 2024
The 6.7.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
February 6, 2024
Google throws $1M at Rust Foundation to build C++ bridges
February 5, 2024
Ivanti devices hit by wave of exploits for latest security hole
February 5, 2024
Lurie Children’s Hospital back to pen and paper after cyberattack
February 5, 2024
Fixes CVE-2023-52339. No API or ABI changes.
February 5, 2024
update to 121.0.6167.139 * High CVE-2024-1060: Use after free in Canvas * High CVE-2024-1059: Use after free in WebRTC * High CVE-2024-1077: Use after free in Network
February 5, 2024
Update to 2.15.1.
February 5, 2024
Combined update for several fixes as well as security fix for CVE-2023-4001 “` Mon Jan 15 2024 Nicolas Frayer – 2.06-114 grub- core/commands: add flag to only search root dev Resolves: #2223437 Resolves: #2224951 Resolves: #2258096 Resolves: CVE-2023-4001 Sat Jan 13 2024 Hector Martin – 2.06-113 Switch memdisk compression to lzop
February 5, 2024
Fixes CVE-2023-52339. No API or ABI changes.
February 5, 2024
Security update for CVE-2024-23334 and CVE-2024-23829 https://github.com/aio- libs/aiohttp/releases/tag/v3.9.2 https://github.com/aio- libs/aiohttp/releases/tag/v3.9.3
February 5, 2024
Multiple vulnerabilities have been found in NBD Tools, the worst of which could result in arbitary code execution.
February 4, 2024
Multiple out-of-bounds read vulnerabilities have been discovered in Wireshark.
February 4, 2024
Multiple vulnerabilities have been found in OpenSSL, the worst of which could result in denial of service.
February 4, 2024
Multiple vulnerabilities have been found in Xen, the worst of which can lead to arbitrary code execution.
February 4, 2024
The updated packages fix security vulnerabilities: A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program
February 4, 2024
Out of bounds write in ANGLE. (CVE-2024-0741) Failure to update user input timestamp. (CVE-2024-0742) Crash when listing printers on Linux. (CVE-2024-0746)
February 4, 2024
https://security-tracker.debian.org/tracker/DSA-5615-1
February 4, 2024
Grandoreiro banking malware disrupted – Week in security with Tony Anscombe
The banking trojan, which targeted mostly Brazil, Mexico and Spain, blocked the victim’s screen, logged keystrokes, simulated mouse and keyboard activity and displayed fake pop-up windows
February 3, 2024
Sudo, a program designed to allow a sysadmin to give limited root privileges to users and log root activity, was vulnerable. CVE-2023-7090
February 3, 2024
Multiple vulnerabilities have been discovered in FreeType, the worst of which can lead to remote code execution.
February 3, 2024
Multiple vulnerabilities have been discovered in Microsoft Edge, the worst of which could lead to remote code execution.
February 3, 2024
A vulnerability has been discovered in GNAT Ada Suite which can lead to remote code execution.
February 3, 2024
Multiple vulnerabilities have been discovered in QtGui which can lead to remote code execution.
February 3, 2024
A vulnerability has been discovered in SDDM which can lead to privilege escalation.
February 3, 2024
https://security-tracker.debian.org/tracker/DSA-5614-1
February 3, 2024
https://security-tracker.debian.org/tracker/DSA-5613-1
February 2, 2024