LinuxSecurity - Security Advisories

Fedora 38: wordpress 2024-0a2f144348 Security Advisory Updates

WordPress 6.4.4 Security Release Security updates included in this release A cross-site scripting (XSS) vulnerability affecting the Avatar block type; reported by John Blackbourn of the WordPress security team. Many thanks to Mat Rollings for assisti...

LinuxSecurity - Security Advisories

Fedora 38: php 2024-39d50cc975 Security Advisory Updates

PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATTRIBUTE failure). (Remi)...

LinuxSecurity - Security Advisories

Fedora 38: rust 2024-bbb141c1ed Security Advisory Updates

Security fix for CVE-2024-24576 (Windows command injection)...

LinuxSecurity - Security Advisories

Fedora 38: editorconfig 2024-0f08e59f25 Security Advisory Updates

Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows....

LinuxSecurity - Security Advisories

Fedora 39: perl-Clipboard 2024-43a0920f12 Security Advisory Updates

Update to 0.29 - Fixes 'clipbrowse command execution with multi-line clipboard text including "| sh"'...

LinuxSecurity - Security Advisories

Fedora 39: php 2024-b46619f761 Security Advisory Updates

PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATTRIBUTE failure). (Remi)...

LinuxSecurity - Security Advisories

SUSE: 2024:1345-1 important: tomcat Security Advisory Updates

* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672 ...

LinuxSecurity - Security Articles

Linus Torvalds Addresses Malicious Developers, Hardware Errors and More at Open Source Summit

At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux development and the challenges the open-source community faces. Torvalds addressed hardware errors, malicious...

LinuxSecurity - Security Advisories

Slackware: 2024-109-01: glibc Security Advisory Update

New glibc packages are available for Slackware 15.0 and -current to fix a security issue. ...

LinuxSecurity - Security Advisories

Mageia 2024-0136: puppet Security Advisory Updates

The updated packages fix missing requires for puppet and fix commands in systemd units. References: - https://bugs.mageia.org/show_bug.cgi?id=29710 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1340-1 important: pgadmin4 Security Advisory Updates

* bsc#1221172 Cross-References: * CVE-2024-2044 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1332-2 important: the Linux Kernel Security Advisory Updates

* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1322-2 important: the Linux Kernel Security Advisory Updates

* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635 ...

The Hacker News

OfflRouter Malware Evades Detection in Ukraine for Almost a Decade

Select Ukrainian government networks have remained infected with a malware called OfflRouter since 2015.Cisco Talos said its findings are based on an analysis of over 100 confidential documents that were infected with the VBA macro virus and uploaded...

LinuxSecurity - Security Advisories

Ubuntu 6737-1: GNU C Library Security Advisory Updates

GNU C Library could be made to crash or run programs if it processed specially crafted data....

LinuxSecurity - Security Advisories

SUSE: 2024:1332-1 important: the Linux Kernel Security Advisory Updates

* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635 ...

The Hacker News

Recover from Ransomware in 5 Minutes—We will Teach You How!

Super Low RPO with Continuous Data Protection:Dial Back to Just Seconds Before an AttackZerto, a Hewlett Packard Enterprise company, can help you detect and recover from ransomware in near real-time. This solution leverages continuous data protection...

The Hacker News

How to Conduct Advanced Static Analysis in a Malware Sandbox

Sandboxes are synonymous with dynamic malware analysis. They help to execute malicious files in a safe virtual environment and observe their behavior. However, they also offer plenty of value in terms of static analysis. See these five scenarios wher...

The Hacker News

TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer

A threat actor tracked as TA547 has targeted dozens of German organizations with an information stealer called Rhadamanthys as part of an invoice-themed phishing campaign."This is the first time researchers observed TA547 use Rhad...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3789-1: libdatetime-timezone-perl new timezone database

This update includes the changes in tzdata 2024a for the Perl bindings. For the list of changes, see DLA-3789-1. For Debian 10 buster, this problem has been fixed in version ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3788-1: tzdata new timezone database

This update includes the changes in tzdata 2024a. Notable changes are: - - Kazakhstan unifies on UTC+5 beginning 2024-03-01. ...

The Hacker News

Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor

A new Google malvertising campaign is leveraging a cluster of domains mimicking a legitimate IP scanner software to deliver a previously unknown backdoor dubbed MadMxShell."The threat actor registered multiple look-alike domains using a typosqua...

LinuxSecurity - Security Advisories

Fedora 38: cockpit 2024-31e83b461d Security Advisory Updates

sosreport: Fix command injection with crafted report names [CVE-2024-2947]...

LinuxSecurity - Security Advisories

Fedora 39: filezilla 2024-8401d42de6 Security Advisory Updates

Fix for CVE-2024-31497...

LinuxSecurity - Security Advisories

Fedora 39: libfilezilla 2024-8401d42de6 Security Advisory Updates

Fix for CVE-2024-31497...

LinuxSecurity - Security Advisories

Debian: DSA-5665-1: tomcat10 Security Advisory Updates

Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2023-46589 ...

LinuxSecurity - Security Advisories

Debian: DSA-5664-1: jetty9 Security Advisory Updates

Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not closed), TCP congested and idle. Eventually the server will stop accepting new connections from...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Xiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)

Zero Knowledge Networking vendor shrugs off firewall flaw In the wake of the recent disclosure…Xiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400) on Latest Hacking News | Cyber Security News, Hacking Tools...

LinuxSecurity - Security Advisories

Slackware: 2024-108-01: mozilla-thunderbird Security Advisory Update

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. ...

LinuxSecurity - Security Advisories

Ubuntu 6729-2: Apache HTTP Server Security Advisory Updates

Several security issues were fixed in Apache HTTP Server....

LinuxSecurity - Security Advisories

Debian: DSA-5663-1: firefox-esr Security Advisory Updates

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking. ...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Safeguarding ERP Systems in the Digital Age: The Crucial Role of NetSuite Support in Cyber Defense

An enterprise resource planning tool is a software program that unifies business operations. The most…Safeguarding ERP Systems in the Digital Age: The Crucial Role of NetSuite Support in Cyber Defense on Latest Hacking News | Cyber Security New...

LinuxSecurity - Security Advisories

Ubuntu 6726-3: Linux kernel (Xilinx ZynqMP) Security Advisory Updates

Several security issues were fixed in the Linux kernel....

The Hacker News

GenAI: A New Headache for SaaS Security Teams

The introduction of Open AI’s ChatGPT was a defining moment for the software industry, touching off a GenAI race with its November 2022 release. SaaS vendors are now rushing to upgrade tools with enhanced productivity capabilities that are driven b...

LinuxSecurity - Security Articles

SPDX 3.0 Revolutionizes Software Management & Security

The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security enthusiasts, and sysadmins. The SPDX community, in collaboration with the Linux Foundation , has evolve...

The Hacker News

Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

Threat actors are exploiting unpatched Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware.The attacks leverage CVE-2023-22518 (CVSS score: 9.1), a critical security vulnerability impacting the Atlassian Confluence...

LinuxSecurity - Security Advisories

SUSE: 2024:1321-1 important: the Linux Kernel Security Advisory Updates

* bsc#1200599 * bsc#1209635 * bsc#1212514 * bsc#1213456 * bsc#1217987 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1322-1 important: the Linux Kernel Security Advisory Updates

* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635 ...

LinuxSecurity - Security Advisories

Fedora 39: firefox 2024-121f5cec9f Security Advisory Updates

New upstream release (125.0)...

LinuxSecurity - Security Advisories

Fedora 39: kernel 2024-f93cdd8831 Security Advisory Updates

The 6.8.6 stable kernel update contains a number of important fixes across the tree....

LinuxSecurity - Security Advisories

Fedora 39: yyjson 2024-ef2e551fab Security Advisory Updates

Update to 0.9.0; fix rhbz#2274045 and rhbz#2266791; Security fix for CVE-2024-25713...

LinuxSecurity - Security Advisories

Fedora 39: wireshark 2024-f644a5709c Security Advisory Updates

New version 4.2.4. Includes a fix for CVE-2024-2955...

LinuxSecurity - Security Advisories

Fedora 39: python-cbor2 2024-4bbd13d425 Security Advisory Updates

Update to latest upstream release (closes rhbz#2261550, closes rhbz#2245361)...

LinuxSecurity - Security Advisories

Fedora 39: mbedtls 2024-666210bd74 Security Advisory Updates

Update to 2.28.8 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8...

LinuxSecurity - Security Advisories

Ubuntu 6726-2: Linux kernel (IoT) Security Advisory Updates

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Ubuntu 6725-2: Linux kernel (AWS) Security Advisory Updates

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Ubuntu 6724-2: Linux kernel Security Advisory Updates

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

SUSE: 2024:1319-1 important: MozillaFirefox Security Advisory Updates

* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1320-1 important: the Linux Kernel Security Advisory Updates

* bsc#1212514 * bsc#1220237 * bsc#1220320 * bsc#1220340 * bsc#1220366 ...

LinuxSecurity - Security Advisories

Debian: DSA-5655-2: cockpit regression update

The update of cockpit released in DSA 5655-1 did not correctly built binary packages due to unit test failures when building against libssh 0.10.6. This update corrects that problem. ...

LinuxSecurity - Security Articles

xz-style Attacks Continue to Target Open-Source Maintainers

Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently targeting the Linux xz data compression library, XZ Utils . Many believe the attempt to backdoor Linux'...

LinuxSecurity - Security Advisories

SUSE: 2024:1317-1 low: emacsSecurity Advisory Updates

* bsc#1222050 * bsc#1222052 * bsc#1222053 Cross-References: ...

LinuxSecurity - Security Advisories

SUSE: 2024:1312-1 important: the Linux Kernel (Live Patch 18 for SLE 15 SP4)Security Advisory Updates

* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1318-1 important: the Linux Kernel (Live Patch 20 for SLE 15 SP4)Security Advisory Updates

* bsc#1219078 * bsc#1219296 * bsc#1219432 Cross-References: ...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group

In a digital age where information is the new currency, the recent global hack has…Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group on Latest Hacking News | Cyber Security New...

The Hacker News

TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks

The threat actor tracked as TA558 has been observed leveraging steganography as an obfuscation technique to deliver a wide range of malware such as Agent Tesla, FormBook, Remcos RAT, LokiBot, GuLoader, Snake Keylogger, and XWorm, among othe...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Guardz Welcomes SentinelOne as Strategic Partner and Investor to Boost Cybersecurity Defenses for SMBs

[Miami, FL – April 16, 2023] – Guardz, the cybersecurity company securing and insuring small…Guardz Welcomes SentinelOne as Strategic Partner and Investor to Boost Cybersecurity Defenses for SMBs on Latest Hacking News | Cyber Security News...

LinuxSecurity - Security Advisories

SUSE: 2024:1304-1 moderate: eclipse, maven-surefire, tychoSecurity Advisory Updates

* bsc#1216992 Cross-References: * CVE-2023-4218 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1305-1 important: nodejs16Security Advisory Updates

* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1306-1 important: nodejs16Security Advisory Updates

* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1307-1 important: nodejs18Security Advisory Updates

* bsc#1220053 * bsc#1222244 * bsc#1222384 * bsc#1222530 * bsc#1222603 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1308-1 important: nodejs16Security Advisory Updates

* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1309-1 important: nodejs18Security Advisory Updates

* bsc#1220053 * bsc#1222244 * bsc#1222384 * bsc#1222530 * bsc#1222603 ...

The Hacker News

Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack

The maintainers of the PuTTY Secure Shell (SSH) and Telnet client are alerting users of a critical vulnerability impacting versions from 0.68 through 0.80 that could be exploited to achieve full recovery of NIST P-521 (ecdsa-sha2-nistp521) ...

The Hacker News

Identity in the Shadows: Shedding Light on Cybersecurity's Unseen Threats

In today's rapidly evolving digital landscape, organizations face an increasingly complex array of cybersecurity threats. The proliferation of cloud services and remote work arrangements has heightened the vulnerability of digital identities to explo...

LinuxSecurity - Security Advisories

Fedora 39: c-ares 2024-835800b552Security Advisory Updates

1.28.1 fixes a significant bug in 1.28.0. Update to 1.28.0. Also fixes CVE-2024-25629....

LinuxSecurity - Security Advisories

Fedora 38: c-ares 2024-d351e7318eSecurity Advisory Updates

1.28.1 fixes a significant bug in 1.28.0. Update to 1.28.0. Also fixes CVE-2024-25629....

LinuxSecurity - Security Articles

Protect Your Linux Web Apps and Meet Compliance Standards

Security is vital for your Linux web apps, but keeping up with the latest exploits and meeting compliance standards can quickly become overwhelming....

LinuxSecurity - Security Advisories

SUSE: 2024:1294-1 moderate: emacsSecurity Advisory Updates

* bsc#1222050 * bsc#1222052 * bsc#1222053 Cross-References: ...

LinuxSecurity - Security Advisories

SUSE: 2024:1295-1 moderate: xenSecurity Advisory Updates

* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1296-1 low: texliveSecurity Advisory Updates

* bsc#1222126 Cross-References: * CVE-2023-46048 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1298-1 important: the Linux Kernel (Live Patch 22 for SLE 15 SP4)Security Advisory Updates

* bsc#1219078 * bsc#1219296 * bsc#1219432 Cross-References: ...

LinuxSecurity - Security Advisories

SUSE: 2024:1299-1 important: the Linux Kernel (Live Patch 11 for SLE 15 SP4)Security Advisory Updates

* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432 ...

LinuxSecurity - Security Advisories

Debian: DSA-5661-1: php8.2 Security Advisory Updates

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes. ...

LinuxSecurity - Security Advisories

Mageia 2024-0133: python-pillow Security Advisory Updates

CVE-2023-44271 Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance opera...

LinuxSecurity - Security Articles

Threat Actors Are Actively Using Pupy RAT Malware to Attack Linux Systems

A resurgence of cyberattacks targeting Linux systems in Asian campaigns through the utilization of the Pupy Remote Access Trojan (RAT) has been observed. The malware's multifunctional nature is a notable characteristic, striking a chord with Linux ad...

LinuxSecurity - Security Advisories

SUSE: 2024:1287-1 important: vimSecurity Advisory Updates

* bsc#1215005 * bsc#1217316 * bsc#1217320 * bsc#1217321 * bsc#1217324 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1293-1 important: webkit2gtk3Security Advisory Updates

* bsc#1222010 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1288-1 important: the Linux Kernel (Live Patch 16 for SLE 15 SP4)Security Advisory Updates

* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1292-1 important: the Linux Kernel (Live Patch 19 for SLE 15 SP4)Security Advisory Updates

* bsc#1219078 * bsc#1219296 * bsc#1219432 Cross-References: ...

LinuxSecurity - Security Advisories

Oracle8: ELSA-2024-1786: httpd:2.4/mod_http2 Important Security Advisory Updates

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle8: ELSA-2024-1782: bind and dhcp Important Security Advisory Updates

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: ...

The Hacker News

Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks

The threat actor known as Muddled Libra has been observed actively targeting software-as-a-service (SaaS) applications and cloud service provider (CSP) environments in a bid to exfiltrate sensitive data."Organizations often store a variety ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3787-1: xorg-server Security Advisory Updates

Multiple vulnerabilities have been fixed in the Xorg X server. CVE-2024-31080 ...

LinuxSecurity - Security Articles

Ubuntu Linux 24.04 LTS Beta Released with Enhanced Security & Performance

Canonical has recently announced the Beta release of Ubuntu Linux 24.04 LTS , codenamed "Noble Numbat." This release aims to continue Ubuntu's legacy of incorporating cutting-edge open-source technologies into a user-friendly, high-quality ...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Invision Community Vulnerabilities Risk E-Commerce Websites

A security researcher spotted numerous vulnerabilities in the Invision Community software that risked the corresponding…Invision Community Vulnerabilities Risk E-Commerce Websites on Latest Hacking News | Cyber Security News, Hacking Tools and ...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Microsoft April Patch Tuesday Fixes Dozens of RCE Flaws

This month’s Patch Tuesday update bundle from Microsoft is a huge one, requiring immediate user…Microsoft April Patch Tuesday Fixes Dozens of RCE Flaws on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Course...

LinuxSecurity - Security Articles

Severe X.Org Memory Safety, Code Execution Vulns Fixed [Updated]

After recent heap overflow, out-of-bounds write, and privilege escalation flaws brought X.Org into the spotlight, more severe memory safety, use-after-free, heap buffer overread, and code execution vulnerabilities have been identified in the popular ...

The Hacker News

Timing is Everything: The Role of Just-in-Time Privileged Access in Security Evolution

To minimize the risk of privilege misuse, a trend in the privileged access management (PAM) solution market involves implementing just-in-time (JIT) privileged access. This approach to privileged identity management aims to mitigate the ris...

LinuxSecurity - Security Advisories

SUSE: 2024:1280-1 important: the Linux Kernel (Live Patch 23 for SLE 15 SP4)Security Advisory Updates

* bsc#1219296 Cross-References: * CVE-2023-52340 ...

The Hacker News

Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability

Palo Alto Networks has released hotfixes to address a maximum-severity security flaw impacting PAN-OS software that has come under active exploitation in the wild.Tracked as CVE-2024-3400 (CVSS score: 10.0), the critical vulnerability is a ...

LinuxSecurity - Security Advisories

Fedora 39: chromium 2024-fe9a675a37Security Advisory Updates

update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use after free in Dawn...

LinuxSecurity - Security Advisories

Slackware: 2024-105-01: less Advisory Security Update

New less packages are available for Slackware 15.0 and -current to fix a security issue. ...

LinuxSecurity - Security Advisories

Debian: DSA-5659-1: trafficserver Security Advisory Updates

Bartek Nowotarski discovered that Apache Traffic Server, a reverse and forward proxy server, was susceptible to denial of service via HTTP2 continuation frames. ...

LinuxSecurity - Security Advisories

Fedora 38: chromium 2024-f94660c56dSecurity Advisory Updates

update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use after free in Dawn...

LinuxSecurity - Security Advisories

Fedora 38: kernel 2024-a56a47ef1bSecurity Advisory Updates

The 6.8.5 stable kernel update contains a number of important fixes across the tree....

LinuxSecurity - Security Advisories

Fedora 38: libopenmpt 2024-85b6c6fa92Security Advisory Updates

Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and also as to resolve potential security issues: https://lib.openmpt.org/libopenmpt/news/...

LinuxSecurity - Security Advisories

Fedora 39: libopenmpt 2024-90b3798199Security Advisory Updates

Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and also as to resolve potential security issues: https://lib.openmpt.org/libopenmpt/news/...

LinuxSecurity - Security Advisories

Mageia 2024-0132: php Security Advisory Updates

Core: - Corrupted memory in destructor with weak references - GC does not scale well with a lot of objects created in destructor DOM: - Add some missing ZPP checks. ...

The Hacker News

Ex-Security Engineer Jailed 3 Years for $12.3 Million Crypto Exchange Thefts

A former security engineer has been sentenced to three years in prison in the U.S. for charges relating to hacking two decentralized cryptocurrency exchanges in July 2022 and stealing over $12.3 million.Shakeeb Ahmed, the defendant in quest...

The Hacker News

U.S. Treasury Hamas Spokesperson for Cyber Influence Operations

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) on Friday announced sanctions against an official associated with Hamas for his involvement in cyber influence operations.Hudhayfa Samir ‘Abdallah al-Kahlut, 39, also known as A...

The Hacker News

Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack

Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it came to light yesterday. The network security company's Unit 42 division is ...

LinuxSecurity - Security Advisories

Debian: DSA-5658-1: linux Security Advisory Updates

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. ...

LinuxSecurity - Security Advisories

Fedora 40: kernel 2024-6d35739db7Security Advisory Updates

The 6.8.5 stable kernel update contains a number of important fixes across the tree....

LinuxSecurity - Security Advisories

Fedora 39: kernel 2024-33a9ea72d1Security Advisory Updates

The 6.8.5 stable kernel update contains a number of important fixes across the tree....

LinuxSecurity - Security Advisories

Fedora 39: rust-h2 2024-638f25a317Security Advisory Updates

Update to version 0.3.26. Addresses RUSTSEC-2024-0332....

LinuxSecurity - Security Advisories

Fedora 38: rust-h2 2024-c5b42e6462Security Advisory Updates

Update to version 0.3.26. Addresses RUSTSEC-2024-0332....

LinuxSecurity - Security Articles

Growth in Open Source Use Among Businesses Analyzed

The open-source movement has come a long way, from its origins in the 1960s and 1970s to becoming an integral part of organizations worldwide. Recently, its adoption across various industries has increased significantly....

LinuxSecurity - Security Advisories

Mageia 2024-0126: squid Security Advisory Updates

Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vul...

LinuxSecurity - Security Advisories

Mageia 2024-0123: ruby-rack Security Advisory Updates

Carefully crafted content type headers can cause Rack¢''s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). (CVE-2024-25126) Carefully crafted Range headers can ...

LinuxSecurity - Security Advisories

Debian: DSA-5657-1: xorg-server Security Advisory Updates

Several vulnerabilities were discovered in the Xorg X server, which may result in privilege escalation if the X server is running privileged or denial of service. ...

LinuxSecurity - Security Advisories

SUSE: 2024:1275-1 important: the Linux Kernel (Live Patch 54 for SLE 12 SP5)Security Advisory Updates

* bsc#1210619 Cross-References: * CVE-2023-1829 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1276-1 important: the Linux Kernel (Live Patch 42 for SLE 15 SP3)Security Advisory Updates

* bsc#1210619 * bsc#1218487 Cross-References: * CVE-2023-1829 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1278-1 important: the Linux Kernel (Live Patch 10 for SLE 15 SP5)Security Advisory Updates

* bsc#1219296 Cross-References: * CVE-2023-52340 ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2024-1789: bind security Important Security Advisory Updates

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2024-1750: unbound security Important Security Advisory Updates

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

SUSE: 2024:1258-1 important: python-PillowSecurity Advisory Updates

* bsc#1222262 * bsc#1222553 Cross-References: * CVE-2024-28219 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1259-1 moderate: xenSecurity Advisory Updates

* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1260-1 important: xorg-x11-serverSecurity Advisory Updates

* bsc#1222309 * bsc#1222310 * bsc#1222311 * bsc#1222312 * bsc#1222442 ...

LinuxSecurity - Security Advisories

SUSE: 2024:1261-1 important: xorg-x11-serverSecurity Advisory Updates

* bsc#1222309 * bsc#1222310 * bsc#1222311 * bsc#1222312 * bsc#1222442 ...

LinuxSecurity - Security Articles

Rust-Based Edera: Locking Down Container Security Once and For All

The Rust-based Edera project demonstrates a unique approach to container security that addresses cloud-native computing challenges. Let's examine this new, innovative approach to container security, which could be a game-changer in the industry!...