* bsc#1219465 Cross-References: * CVE-2023-3966
March 22, 2024
* bsc#1050549 * bsc#1186484 * bsc#1200599 * bsc#1212514 * bsc#1213456
March 22, 2024
Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD
March 21, 2024
A security flaw was found on rubygem-yard that documents generated by yard may be vulnerable to XSS attack. This issue is now assigned as CVE-2024-27285 . This new rpm is supposed to fix this issue.
March 21, 2024
Security fix for CVE-2024-1048
March 21, 2024
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
March 21, 2024
Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD
March 21, 2024
https://security-tracker.debian.org/tracker/DSA-5643-1
March 21, 2024
Several security issues were fixed in the Linux kernel.
March 20, 2024
https://security-tracker.debian.org/tracker/DSA-5641-1
March 20, 2024
US task force aims to plug security leaks in water sector
March 20, 2024
GitHub previews AI-powered code scanning autofix
March 20, 2024
A prescription for privacy protection: Exercise caution when using a mobile health app
Given the unhealthy data-collection habits of some mHealth apps, you’re well advised to tread carefully when choosing with whom you share some of your most sensitive data
March 20, 2024
Fraudsters are posing as the FTC to scam consumers
March 20, 2024
Gotta Hack ‘Em All: Pokémon passwords reset after attack
March 20, 2024
Stalkerware usage surging, despite data privacy concerns
March 20, 2024
Introducing OpenShift Service Mesh 2.5
March 20, 2024
Red Hat Advanced Cluster Security 4.4: What’s included
March 20, 2024
A memory leak was found in imagemagick a popular software suite for displaying, creating, converting, modifying, and editing raster images. For Debian 10 buster, this problem has been fixed in version
March 20, 2024
How to deploy software to Linux-based IoT devices at scale
March 20, 2024
Several security issues were fixed in Firefox.
March 20, 2024
The updated packages fix security vulnerabilities: Heap buffer overflow in sqlite. (CVE-2023-2137) A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler.
March 20, 2024
Updated to 124.0
March 20, 2024
Updated to 124.0
March 20, 2024
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
March 20, 2024
https://security-tracker.debian.org/tracker/DSA-5626-2
March 20, 2024
https://security-tracker.debian.org/tracker/DSA-5642-1
March 20, 2024
Crypto scams more costly to the US than ransomware, Feds say
March 19, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 19, 2024
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
March 19, 2024
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
March 19, 2024
Update to 2.6.1, backport fix for CVE-2024-28757.
March 19, 2024
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
March 19, 2024
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
March 19, 2024
C++ creator rebuts White House warning
March 18, 2024
* bsc#1219465 Cross-References: * CVE-2023-3966
March 18, 2024
* bsc#1213590 * bsc#1214686 * bsc#1214687 * bsc#1221187 * bsc#960589
March 18, 2024
Infosec teams must be allowed to fail, argues Gartner
March 18, 2024
Several security issues were fixed in OpenJDK 8.
March 18, 2024
ChatGPT side-channel attack has easy fix: Token obfuscation
March 18, 2024
Update to shim-15.8
March 18, 2024
Update to shim-15.8
March 18, 2024
Update to shim-15.8
March 18, 2024
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. (CVE-2020-36518) In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the
March 17, 2024
The updated packages fix security vulnerabilities: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. (CVE-2022-38398) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML
March 17, 2024
Zero Trust MLOps with OpenShift Platform Plus
March 17, 2024
curl was affected by a path traversal vulnerability. SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate
March 17, 2024
Healthcare still a prime target for cybercrime gangs – Week in security with Tony Anscombe
Healthcare organizations remain firmly in attackers’ crosshairs, representing 20 percent of all victims of ransomware attacks among critical infrastructure entities in the US in 2023
March 16, 2024
Threat intelligence explained | Unlocked 403: A cybersecurity podcast
We break down the fundamentals of threat intelligence and its role in anticipating and countering emerging threats
March 16, 2024
upstream security release 122.0.6261.128 High CVE-2024-2400: Use after free in Performance Manager
March 16, 2024
Security fix for CVE-2007-4559.
March 16, 2024
New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454
March 16, 2024
Path traversal in moment.locale. (CVE-2022-24785) Inefficient parsing algorithim resulting in DoS. (CVE-2022-31129) References: – https://bugs.mageia.org/show_bug.cgi?id=30664
March 16, 2024
Security fix for CVE-2007-4559.
March 16, 2024
Update to 3.2.2 It indirectly fix CVE-2023-3966 and CVE-2023-5366
March 16, 2024
How to share sensitive files securely online
Here are a few tips for secure file transfers and what else to consider when sharing sensitive documents so that your data remains safe
March 15, 2024
Scareware scam: Restoro and Reimage fined $26 million by FTC
March 15, 2024
* bsc#1219836 Cross-References: * CVE-2024-1062
March 15, 2024
Cop shop rapped for ‘completely avoidable’ web form blunder
March 15, 2024
It was discovered that composer, a dependency manager for the PHP language, processed files in the local working directory. This could lead to local privilege escalation or malicious code execution. Due to a technical issue this email was not sent on 2024-02-26 like it should
March 15, 2024
* jsc#PED-2362 * jsc#SLE-5514 Cross-References: * CVE-2023-20593
March 15, 2024
* jsc#PED-2362 * jsc#SLE-5514 Cross-References: * CVE-2023-20593
March 15, 2024
* bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465
March 15, 2024
* bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465
March 15, 2024
LockBit ransomware kingpin gets 4 years behind bars
March 14, 2024