New upstream release (125.0)
April 21, 2024
Security fix for CVE-2023-5752
April 21, 2024
Update to 1.15.8 Fixes CVE-2024-32462
April 21, 2024
Security fix for CVE-2024-27316
April 21, 2024
https://security-tracker.debian.org/tracker/DSA-5667-1
April 20, 2024
4 use cases for AI in cyber security
April 20, 2024
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
April 20, 2024
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
April 20, 2024
Security fixes for CVE-2024-27351 Potential regular expression DOS in django.utils.text.Truncator.words() CVE-2024-24680 denial-of-service in intcomma template filter CVE-2023-43665 Denial-of-service possibility in django.utils.text.Truncator
April 20, 2024
fix CONTINUATION frames DoS (CVE-2024-28182)
April 20, 2024
This update includes several bug fixes from the upstream glibc release branch, including a fix for CVE-2024-2961.
April 20, 2024
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
April 20, 2024
https://security-tracker.debian.org/tracker/DSA-5668-1
April 20, 2024
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
April 19, 2024
* bsc#1220181 Cross-References: * CVE-2024-24476
April 19, 2024
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
April 19, 2024
* bsc#1219491 Cross-References: * CVE-2023-46045
April 19, 2024
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking.
April 19, 2024
WordPress 6.4.4 Security Release Security updates included in this release A cross-site scripting (XSS) vulnerability affecting the Avatar block type; reported by John Blackbourn of the WordPress security team. Many thanks to Mat Rollings for assisting with the research.
April 19, 2024
https://security-tracker.debian.org/tracker/DSA-5666-1
April 19, 2024
https://security-tracker.debian.org/tracker/DSA-5665-1
April 18, 2024
https://security-tracker.debian.org/tracker/DSA-5664-1
April 18, 2024
https://security-tracker.debian.org/tracker/DSA-5663-1
April 18, 2024
GNU C Library could be made to crash or run programs if it processed specially crafted data.
April 18, 2024
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
April 18, 2024
EU tells Meta it can’t paywall privacy
April 18, 2024
This update includes the changes in tzdata 2024a for the Perl bindings. For the list of changes, see DLA-3789-1. For Debian 10 buster, this problem has been fixed in version
April 18, 2024
This update includes the changes in tzdata 2024a. Notable changes are: – – Kazakhstan unifies on UTC+5 beginning 2024-03-01.
April 18, 2024
sosreport: Fix command injection with crafted report names [CVE-2024-2947]
April 18, 2024
Fix for CVE-2024-31497
April 18, 2024
https://security-tracker.debian.org/tracker/DSA-5655-2
April 17, 2024
Exploit code for Palo Alto Networks zero-day now public
April 17, 2024
* bsc#1200599 * bsc#1209635 * bsc#1212514 * bsc#1213456 * bsc#1217987
April 17, 2024
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
April 17, 2024
Japanese government rejects Yahoo! infosec improvement plan
April 17, 2024
New upstream release (125.0)
April 17, 2024
The 6.8.6 stable kernel update contains a number of important fixes across the tree.
April 17, 2024
Update to 0.9.0; fix rhbz#2274045 and rhbz#2266791; Security fix for CVE-2024-25713
April 17, 2024
New version 4.2.4. Includes a fix for CVE-2024-2955
April 17, 2024
Most developers have adopted devops, survey says
April 17, 2024
https://security-tracker.debian.org/tracker/DSA-5661-1
April 16, 2024
https://security-tracker.debian.org/tracker/DSA-5660-1
April 16, 2024
* bsc#1216992 Cross-References: * CVE-2023-4218
April 16, 2024
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
April 16, 2024
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
April 16, 2024
* bsc#1220053 * bsc#1222244 * bsc#1222384 * bsc#1222530 * bsc#1222603
April 16, 2024
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
April 16, 2024
* bsc#1220053 * bsc#1222244 * bsc#1222384 * bsc#1222530 * bsc#1222603
April 16, 2024
Google location tracking deal could be derailed by politics
April 16, 2024
Better application networking and security with CAKES
April 16, 2024
https://security-tracker.debian.org/tracker/DSA-5662-1
April 16, 2024
Protect Your Linux Web Apps and Meet Compliance Standards
April 15, 2024
Bartek Nowotarski discovered that Apache Traffic Server, a reverse and forward proxy server, was susceptible to denial of service via HTTP2 continuation frames.
April 15, 2024
Delinea Secret Server customers should apply latest patches
April 15, 2024
Multiple vulnerabilities have been fixed in the Xorg X server. CVE-2024-31080
April 15, 2024
US senator wants to put the brakes on Chinese EVs
April 15, 2024
Zambia arrests 77 people in swoop on “scam” call centre
April 15, 2024
* bsc#1219296 Cross-References: * CVE-2023-52340
April 15, 2024
Identifying third-party risk
April 15, 2024
update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use after free in Dawn
April 15, 2024
New less packages are available for Slackware 15.0 and -current to fix a security issue.
April 14, 2024
Core: – Corrupted memory in destructor with weak references – GC does not scale well with a lot of objects created in destructor DOM: – Add some missing ZPP checks.
April 14, 2024
update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use after free in Dawn
April 14, 2024
The 6.8.5 stable kernel update contains a number of important fixes across the tree.
April 14, 2024
Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and also as to resolve potential security issues: https://lib.openmpt.org/libopenmpt/news/
April 14, 2024
Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and also as to resolve potential security issues: https://lib.openmpt.org/libopenmpt/news/
April 14, 2024
https://security-tracker.debian.org/tracker/DSA-5659-1
April 14, 2024