May 7, 2024
TikTok sues America to undo divest-or-die law
Does cloud security have a bad reputation?
May 7, 2024
* bsc#1223252 Cross-References: * CVE-2024-30171
May 7, 2024
* bsc#1221984 * bsc#1222302 * bsc#1222453 Cross-References:
May 7, 2024
* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453
May 7, 2024
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
May 7, 2024
Multiple vulnerabilities have been discovered in libjpeg-turbo, the worst of which could lead to arbitrary code execution.
May 7, 2024
Multiple vulnerabilities have been discovered in Xpdf, the worst of which could possibly lead to arbitrary code execution.
May 7, 2024
As we navigate through 2024, the cyber threat landscape continues to evolve, bringing new challenges for both businesses and individual consumers. The latest OpenText Threat Report provides insight into these changes, offering vital insights that help us prepare and protect ourselves against emerging threats. Here’s what you need to know: The Resilience of Ransomware Ransomware […]
May 6, 2024
* bsc#1215947 * bsc#1216853 Cross-References: * CVE-2023-38470
May 6, 2024
* bsc#1170848 * bsc#1208572 * bsc#1214340 * bsc#1214387 * bsc#1216085
May 6, 2024
* bsc#1219912 * bsc#1221465 * bsc#1222155 * jsc#MSQA-760 * jsc#PED-7893
May 6, 2024
* bsc#1008037 * bsc#1008038 * bsc#1010940 * bsc#1019021 * bsc#1038785
May 6, 2024
* bsc#1211649 * bsc#1211888 * bsc#1216850 * bsc#1218482 * bsc#1219001
May 6, 2024
* bsc#1211649 * bsc#1211888 * bsc#1216850 * bsc#1218482 * bsc#1219001
May 6, 2024
https://security-tracker.debian.org/tracker/DSA-5681-1
May 6, 2024
https://security-tracker.debian.org/tracker/DSA-5680-1
May 6, 2024
Pay up, or else? – Week in security with Tony Anscombe
Organizations that fall victim to a ransomware attack are often caught between a rock and a hard place, grappling with the dilemma of whether to pay up or not
May 5, 2024
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to remote code execution.
May 5, 2024
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
May 5, 2024
A vulnerability has been discovered in borgmatic, which can lead to shell injection.
May 5, 2024
Multiple vulnerabilities have been discovered in Pillow, the worst of which can lead to arbitrary code execution.
May 5, 2024
Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution.
May 5, 2024
A vulnerability has been discovered in Setuptools, which can lead to denial of service.
May 5, 2024
https://security-tracker.debian.org/tracker/DSA-5679-1
May 4, 2024
https://security-tracker.debian.org/tracker/DSA-5678-1
May 4, 2024
https://security-tracker.debian.org/tracker/DSA-5677-1
May 4, 2024
Adding insult to injury: crypto recovery scams
Once your crypto has been stolen, it is extremely difficult to get back – be wary of fake promises to retrieve your funds and learn how to avoid becoming a victim twice over
May 4, 2024
Multiple vulnerabilities have been found in MediaInfo and MediaInfoLib, the worst of which could allow user-assisted remote code execution.
May 4, 2024
Multiple vulnerabilities have been discovered in strongSwan, the worst of which could possibly lead to remote code execution.
May 4, 2024
Multiple vulnerabilities have been discovered in HTMLDOC, the worst of which can lead to arbitrary code execution.
May 4, 2024
Multiple vulnerabilities have been discovered in mujs, the worst of which could lead to remote code execution.
May 4, 2024
Multiple vulnerabilities have been discovered in MPlayer, the worst of which can lead to arbitrary code execution.
May 4, 2024
Multiple vulnerabilities have been discovered in systemd, the worst of which can lead to a denial of service.
May 4, 2024
* bsc#1177529 * bsc#1192145 * bsc#1194869 * bsc#1200465 * bsc#1205316
May 3, 2024
update to 124.0.6367.118 * High CVE-2024-4331: Use after free in Picture In Picture * High CVE-2024-4368: Use after free in Dawn update to 124.0.6367.91 update to 124.0.6367.78
May 3, 2024
The 6.8.8 stable kernel update contains a number of important fixes across the tree.
May 3, 2024
Patch to fix CVE-2024-31031
May 3, 2024
Update matrix-synapse to v1.105.1 (CVE-2024-31208) Update to v1.105.0
May 3, 2024
Update matrix-synapse to v1.105.1 (CVE-2024-31208) Update to v1.105.0
May 3, 2024
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
May 2, 2024
USN-6747-1 caused some minor regressions in Firefox.
May 2, 2024
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
May 2, 2024
Update to 6.2.8, fixing CVE-2022-48257 and CVE-2022-48258 Unbundle cpp-httlib, fixing CVE-2023-26130
May 2, 2024
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
May 2, 2024
Security update for CVE-2024-27306 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4
May 2, 2024
https://security-tracker.debian.org/tracker/DSA-5676-1
May 2, 2024
US charges 16 over ‘depraved’ grandparent scams
May 1, 2024
Gerbv could be made to crash if it opened a specially crafted input file.
April 30, 2024
Several issues have been found in qtbase-opensource-src, a collection of several Qt modules/libraries. The issues are related to buffer overflows, infinite loops or application
April 30, 2024
A bug that could allow an attacker with access to the machine to potentially access data in a temporary directory created by the Guava. (CVE-2020-8908) Predictable temporary files and directories used in FileBackedOutputStream. (CVE-2023-2976)
April 30, 2024
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. (CVE-2024-26458) Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. (CVE-2024-26461)
April 30, 2024
This release is a security release and addresses multiple issues: [Low] OutOfBound Read in zgfx_decompress_segment. [Moderate] Integer overflow & OutOfBound Write in clear_decompress_residual_data. [Low] integer underflow in nsc_rle_decode.
April 30, 2024
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c. (CVE-2023-50471) cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c. (CVE-2023-50472)
April 30, 2024
UnitedHealth CEO: ‘Decision to pay ransom was mine’
April 30, 2024
* bsc#1222518 Cross-References: * CVE-2024-31948
April 30, 2024
JSON5 could allow unintended access to network services or have other unspecified impact.
April 30, 2024
Multiple problems were discovered in Org-mode, a GNU Emacs major mode for keeping notes, authoring documents, and maintaining to-do lists. CVE-2024-30203 & CVE-2024-30204
April 30, 2024
Anope could be made to bypass authentication checks for suspended accounts.
April 30, 2024
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
April 30, 2024