March 15, 2023
Several security issues were fixed in OpenJPEG.
March 15, 2023
Tailscale: Fast and easy VPNs for developers
March 15, 2023
No matter how old you are, it is important to learn how to stay safe online! According to a study conducted by Learning Innovation, more than 93% of students have access to smartphones and laptops. Cyber threats show no sign of slowing down, which is why it is important to stay up to date on […]
March 15, 2023
Microsoft fixes two 0-days on Patch Tuesday – update now!
March 15, 2023
security update
March 14, 2023
Firefox 111 patches 11 holes, but not 1 zero-day among them…
March 14, 2023
5 signs you’ve fallen for a scam – and what to do next
Here’s how to know you have fallen victim to a scam – and what to do in order to undo or mitigate the damage. The post 5 signs you’ve fallen for a scam – and what to do next appeared first on WeLiveSecurity
March 14, 2023
How OpenSSF Aims to Make Log4j-Like Incidents Rare
March 14, 2023
The container sles-15-sp4-chost-byos-v20230310-arm64 was updated. The following patches have been included in this update:
March 14, 2023
The container suse-sles-15-sp4-chost-byos-v20230310-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
March 14, 2023
The container suse-sles-15-sp4-chost-byos-v20230310-x86_64-gen2 was updated. The following patches have been included in this update:
March 14, 2023
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used string matching commands (like
March 14, 2023
Security fix for CVE-2023-25193 Update of HarfBuzz to 7.0.1 version (#2169172) Update of freetype to 2.13.0 version (#2168496) —- Security fix for CVE-2023-25193, Update to 7.0.1 version (#2169172)
March 14, 2023
Security fix for CVE-2023-25193 Update of HarfBuzz to 7.0.1 version (#2169172) Update of freetype to 2.13.0 version (#2168496) —- Security fix for CVE-2023-25193, Update to 7.0.1 version (#2169172)
March 14, 2023
GitHub begins 2FA rollout
March 13, 2023
Linux gets double-quick double-update to fix kernel Oops!
March 13, 2023
Several security issues were fixed in XStream.
March 13, 2023
The container ses/7.1/rook/ceph was updated. The following patches have been included in this update:
March 13, 2023
The container ses/7.1/ceph/ceph was updated. The following patches have been included in this update:
March 13, 2023
The container ses/7.1/cephcsi/cephcsi was updated. The following patches have been included in this update:
March 13, 2023
Several security issues were fixed in Twig.
March 13, 2023
The UK’s bad encryption law can’t withstand global contempt
March 13, 2023
Several security issues were fixed in Protocol Buffers.
March 13, 2023
Cutting complexity
March 13, 2023
update to 111.0.5563.64. Fixes the following security issues: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932 CVE-2023-0933 CVE-2023-0941 CVE-2023-1213 CVE-2023-1214 CVE-2023-1215 CVE-2023-1216 CVE-2023-1217 CVE-2023-1218 CVE-2023-1219 CVE-2023-1220 CVE-2023-1221 CVE-2023-1222 CVE-2023-1223 CVE-2023-1224 CVE-2023-1225
March 12, 2023
An issue has been found in mpv, a video player based on MPlayer/mplayer2. Due to a use after free an attacker coudl execute arbitrary code or crash the program via the ao_c parameter.
March 11, 2023
Several vulnerabilities have been discovered in imagemagick that may lead to a privilege escalation, denial of service or information leaks. CVE-2020-19667
March 11, 2023
High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun Jeong(@n3sk) of Theori on 2023-01-30 High CVE-2023-1214: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2023-02-03
March 11, 2023
A change in the libreswan 4.2 Traffic Selector parsing code introduced a missing check that would reject palformed Traffic Selector payloads. As such, in such case the code stumbles on to hit a double free, leading to a crash and restart of the pluto daemon. No remote code execution. (CVE-2023-23009)
March 11, 2023
This kernel-linus update is based on upstream 5.15.98 and fixes atleast the following security issues: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1
March 11, 2023
APT hackers set a honeytrap to ensnare victims – Week in security with Tony Anscombe
A request to move an online conversation to a supposedly more secure platform may not be as well-meaning as it sounds The post APT hackers set a honeytrap to ensnare victims – Week in security with Tony Anscombe appeared first on WeLiveSecurity
March 11, 2023
Common WhatsApp scams and how to avoid them
Here’s a roundup of some of the most common tricks that fraudsters use to dupe their victims on WhatsApp – and what you can do to protect yourself against them. The post Common WhatsApp scams and how to avoid them appeared first on WeLiveSecurity
March 11, 2023
Update to 5.9.10 for CVE-2023-26463
March 11, 2023
Security fix for CVE-2022-43272
March 11, 2023
Apply upstream libtiff fix for CVE-2022-4645
March 11, 2023
Release of stargz snapshotter v0.14.2 https://github.com/containerd/stargz- snapshotter/releases/tag/v0.14.2 This release uses containerd v1.7.0-rc.1 so this release fixes GHSA-hmfx-3pcx-653p (CVE-2023-25173) and GHSA-259w-8hf6-59c2 (CVE-2023-25153). This release uses Go 1.20.1 so this release fixes CVE-2022-41717 .
March 11, 2023
Update to python-werkzeug-2.2.3.
March 11, 2023
Backport patch for CVE-2023-25587.
March 11, 2023
security update
March 10, 2023
Several security issues were fixed in SnakeYAML.
March 10, 2023
The container bci/openjdk-devel was updated. The following patches have been included in this update:
March 10, 2023
The container bci/openjdk-devel was updated. The following patches have been included in this update:
March 10, 2023
Catholic clergy surveillance org ‘outs gay priests’
March 10, 2023
**Redis 6.2.11** – Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-25155**) Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. * (**CVE-2022-36021**) String matching
March 10, 2023
Backport of upstream fix for CVE-2022-29718.
March 10, 2023
Security fix for CVE-2023-23931 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and
March 10, 2023
FBI and international cops catch a NetWire RAT
March 10, 2023
GitHub 2FA campaign begins
March 9, 2023
AT&T blames marketing bods for exposing 9M accounts
March 9, 2023
US House reps, staff health data swiped in cyber-heist
March 9, 2023
Refreshed from its holiday, Emotet has gone phishing
March 9, 2023
‘A woman from Mars’: Life in the pursuit of space exploration
An astrobiologist, analog astronaut, author and speaker, Dr. Michaela Musilova shares her experience as a woman at the forefront of space exploration and from her quest for scientific and personal excellence The post ‘A woman from Mars’: Life in the pursuit of space exploration appeared first on WeLiveSecurity
March 9, 2023
The container bci/bci-init was updated. The following patches have been included in this update:
March 9, 2023
The container bci/openjdk was updated. The following patches have been included in this update:
March 9, 2023
The container bci/openjdk was updated. The following patches have been included in this update:
March 9, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
March 9, 2023
OpenShift API for Data Protection (OADP) 1.1.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 9, 2023
Dems, Repubs eye up ban on chat apps they don’t like
March 9, 2023
Logging Subsystem 5.4.12 – Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 9, 2023
security update
March 8, 2023
Securing ways to share workplace passwords
March 8, 2023
Several security issues were fixed in Sofia-SIP.
March 8, 2023
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
March 8, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 8, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 8, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 8, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 8, 2023
Alert: Crims hijack these DrayTek routers to attack biz
March 8, 2023
Red Hat OpenShift Container Platform release 4.11.30 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 7, 2023