March 14, 2024
Expat could be made to crash if it received specially crafted input.
March 14, 2024
Several security issues were fixed in TeX Live.
March 14, 2024
Two vulnerabilities were discovered in Open vSwitch, a software-based Ethernet virtual switch, which could result in a bypass of OpenFlow rules or denial of service.
March 14, 2024
python-cryptography could be made to expose sensitive information over the network.
March 14, 2024
Open source is not insecure
March 14, 2024
US Congress goes bang, bang, on TikTok sale-or-ban plan
March 14, 2024
Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects https://www.thunderbird.net/en-US/thunderbird/115.8.1/releasenotes/
March 14, 2024
python-multipart 0.0.7 (2024-02-03) Refactor header option parser to use the standard library instead of a custom RegEx #75. Fixes a denial of service vulnerability, GHSA-qf9m-vfgh-m389, initially reported in FastAPI but applicable to other libraries and applications.
March 14, 2024
https://security-tracker.debian.org/tracker/DSA-5640-1
March 14, 2024
Feds seek attestation on secure software
March 13, 2024
JetBrains releases security fixes for TeamCity CI/CD system
March 13, 2024
Poking holes in Google tech bagged bug hunters $10M
March 13, 2024
Microsoft Copilot for Security prepares for April liftoff
March 13, 2024
* bsc#1219775 Cross-References: * CVE-2024-22119
March 13, 2024
* bsc#1220404 * bsc#1220405 Cross-References: * CVE-2024-25081
March 13, 2024
* bsc#1220404 * bsc#1220405 Cross-References: * CVE-2024-25081
March 13, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 13, 2024
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 13, 2024
Reducing the cloud security overhead
March 13, 2024
Add implicit rejection in PKCS#1 v1.5 in OpenSSL.
March 13, 2024
Whizkids jimmy OpenAI, Google’s closed models
March 13, 2024
https://security-tracker.debian.org/tracker/DSA-5639-1
March 13, 2024
Biden’s budget proposal boosts CISA funding to $3B
March 12, 2024
Rack could be made do denial of service if it received a specially crafted header.
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 12, 2024
Several security issues were fixed in Open vSwitch.
March 12, 2024
French government sites disrupted by très grande DDoS
March 12, 2024
An update that fixes one vulnerability is now available.
March 11, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 11, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 11, 2024
Two vulnerabilities were discovered in tiff, Tag Image File Format library. CVE-2023-3576
March 11, 2024
* bsc#1027519 * bsc#1218851 * bsc#1219080 * bsc#1219885
March 11, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 11, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 11, 2024
APT attacks taking aim at Tibetans – Week in security with Tony Anscombe
Evasive Panda has been spotted targeting Tibetans in several countries and territories with payloads that included a previously undocumented backdoor ESET has named Nightdoor
March 10, 2024
It was discovered that the uv_getaddrinfo() function in libuv, an asynchronous event notification library, incorrectly truncated certain hostnames, which may result in bypass of security measures on internal APIs or SSRF attacks.
March 10, 2024
2267205 – CVE-2024-24246 qpdf – Heap Buffer Overflow vulnerability in qpdf [fedora-all]
March 10, 2024
backport fix for PEAP client (CVE-2023-52160)
March 10, 2024
2267205 – CVE-2024-24246 qpdf – Heap Buffer Overflow vulnerability in qpdf [fedora-all]
March 10, 2024
Update to latest version Security fix for CVE-2023-39325
March 10, 2024
https://security-tracker.debian.org/tracker/DSA-5638-1
March 10, 2024
Incorrect handling of extension attributes in PAX archives has been fixed in the GNU tar archiving utility. For Debian 10 buster, this problem has been fixed in version
March 9, 2024
Several security vulnerabilities have been discovered in Squid, a full featured web proxy cache. Due to programming errors in Squid’s HTTP request parsing, remote attackers may be able to execute a denial of service attack by sending large X-Forwarded-For header or trigger a stack buffer overflow while
March 9, 2024
upstream security release 122.0.6261.111 – High CVE-2024-2173: Out of bounds memory access in V8 – High CVE-2024-2174: Inappropriate implementation in V8 – High CVE-2024-2176: Use after free in FedCM
March 9, 2024
* bsc#1218571 * bsc#1219238 Cross-References: * CVE-2023-7207
March 8, 2024
* bsc#1218571 * bsc#1219238 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5
March 8, 2024
Top 10 scams targeting seniors – and how to keep your money safe
The internet can be a wonderful place. But it’s also awash with fraudsters targeting people who are susceptible to fraud.
March 8, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 8, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 8, 2024
* bsc#1219243 Cross-References: * CVE-2024-0727
March 8, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 8, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 8, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 8, 2024
Securing open source software: Whose job is it, anyway?
March 8, 2024
https://security-tracker.debian.org/tracker/DSA-5637-1
March 8, 2024
* bsc#1217213 Cross-References: * CVE-2023-44446
March 7, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 7, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 7, 2024
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
March 7, 2024
* bsc#1200528 Cross-References: * CVE-2022-1996
March 7, 2024
* bsc#1212475 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001
March 7, 2024
VMware urges emergency action to blunt hypervisor flaws
March 7, 2024
Irresistible: Hooks, habits and why you can’t put down your phone
Struggle to part ways with your tech? You’re not alone. Here’s why your devices are your vices.
March 6, 2024