June 28, 2024
Multiple vulnerabilities havebenn fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images.
June 28, 2024
Cyber insurance as part of the cyber threat mitigation strategy
Why organizations of every size and industry should explore their cyber insurance options as a crucial component of their risk mitigation strategies
June 28, 2024
Unlock the future of security
June 28, 2024
* bsc#1216896 * bsc#1216897 * bsc#1216899 * bsc#1216900
June 28, 2024
It was discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2019-11471) Reza Mirzazade Farkhani discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash
June 28, 2024
Possible out-of-bounds read or write when reading malformed MED files. (r19389). [Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20336, r20338).
June 28, 2024
Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image. References:
June 28, 2024
Update to Emacs 29.4, fixing CVE-2024-39331.
June 28, 2024
The 6.9.6 stable kernel update contains a number of important fixes across the tree.
June 28, 2024
GitHub Artifact Attestations now generally available
June 28, 2024
If you’re using cyber security software from Kaspersky Lab, Inc, you will need to find an alternative solution soon. On June 20, 2024, the U.S. Department of Commerce banned software from the Russian-owned company, saying it posed an unacceptable risk to national security. Citing the Russian government’s offensive cyber capabilities and its capacity to influence […]
June 27, 2024
Several security issues were fixed in FontForge.
June 27, 2024
US lawmakers wave red flags over Chinese drone dominance
June 27, 2024
Wget could be made to connect to a different host than expected.
June 27, 2024
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
June 27, 2024
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
June 27, 2024
OpenSSL could be made to consume resources and cause long delays if it processed certain input.
June 27, 2024
update to 126.0.6478.126 High CVE-2024-6290: Use after free in Dawn High CVE-2024-6291: Use after free in Swiftshader High CVE-2024-6292: Use after free in Dawn High CVE-2024-6293: Use after free in Dawn
June 27, 2024
https://security-tracker.debian.org/tracker/DSA-5723-1
June 27, 2024
Feds put $5M bounty on ‘CryptoQueen’ Ruja Ignatova
June 26, 2024
https://security-tracker.debian.org/tracker/DSA-5720-1
June 26, 2024
https://security-tracker.debian.org/tracker/DSA-5719-1
June 26, 2024
https://security-tracker.debian.org/tracker/DSA-5718-1
June 26, 2024
Introducing… The AI Fix podcast
June 26, 2024
Several security issues were fixed in the Linux kernel.
June 26, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
June 26, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
June 26, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
June 26, 2024
Multiple vulnerabilities were found in git, a fast, scalable and distributed revision control system. CVE-2019-1387
June 26, 2024
libheif could be made to crash if it opened a specially crafted file.
June 26, 2024
https://security-tracker.debian.org/tracker/DSA-5722-1
June 26, 2024
https://security-tracker.debian.org/tracker/DSA-5721-1
June 26, 2024
GitLab devsecops survey finds progress, new priorities
June 25, 2024
Fiend touts stolen Neiman Marcus customer info for $150K
June 25, 2024
* bsc#1065729 * bsc#1141539 * bsc#1174585 * bsc#1181674 * bsc#1187716
June 25, 2024
* bsc#1224158 Cross-References: * CVE-2017-17507 * CVE-2018-11205
June 25, 2024
* bsc#1224458 * bsc#1225552 Cross-References: * CVE-2024-4741
June 25, 2024
* bsc#1225491 Cross-References: * CVE-2024-33871
June 25, 2024
* bsc#1225491 Cross-References: * CVE-2024-33871
June 25, 2024
* bsc#1216594 * bsc#1216598 * bsc#1226586 Cross-References:
June 25, 2024
The Marvin Attack
June 25, 2024
Ransomware thieves beware
June 25, 2024
Julian Assange to go free in guilty plea deal with US
June 25, 2024
Hibernate could be made to expose sensitive information.
June 24, 2024
* bsc#1226134 Cross-References: * CVE-2024-37535
June 24, 2024
* bsc#1226423 Cross-References: * CVE-2024-38394
June 24, 2024
* bsc#1226423 Cross-References: * CVE-2024-38394
June 24, 2024
* bsc#1225971 Cross-References: * CVE-2024-20696
June 24, 2024
* bsc#1089090 Cross-References: * CVE-2018-9918
June 24, 2024
https://security-tracker.debian.org/tracker/DSA-5715-2
June 24, 2024
Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attack. (CVE-2024-5690) Sandboxed iframes were able to bypass sandbox restrictions to open a new window. (CVE-2024-5691)
June 23, 2024
This update includes a rebase from 9.0.83 to 9.0.89. #2269611 CVE-2024-24549 tomcat: CVE-2024-24549: Apache Tomcat: HTTP/2 header handling DoS #2269612 CVE-2024-23672 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake
June 23, 2024
New emacs packages are available for Slackware 15.0 and -current to fix a security issue.
June 22, 2024
The long-tail costs of a data breach – Week in security with Tony Anscombe
Understanding and preparing for the potential long-tail costs of data breaches is crucial for businesses that aim to mitigate the impact of security incidents
June 22, 2024
Multiple vulnerabilities have been discovered in JHead, the worst of which may lead to arbitrary code execution.
June 22, 2024
A vulnerability has been discovered in LZ4, which can lead to memory corruption.
June 22, 2024
A vulnerability has been discovered in RDoc, which can lead to execution of arbitrary code.
June 22, 2024
A vulnerability has been discovered in Flatpak, which can lead to a sandbox escape.
June 22, 2024
A vulnerability has been discovered in GLib, which can lead to privilege escalation.
June 22, 2024
Update to 2.44.2: Make gamepads visible on axis movements, and not only on button presses. Disable the gst-libav AAC decoder. Make user scripts and style sheets visible in the Web Inspector. Use the geolocation portal where available, with the existing geoclue as
June 22, 2024
My health information has been stolen. Now what?
As health data continues to be a prized target for hackers, here’s how to minimize the fallout from a breach impacting your own health records
June 21, 2024
Why attack surfaces are expanding
June 21, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
June 21, 2024
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
June 21, 2024