LinuxSecurity - Security Advisories

Ubuntu 5822-2: Samba regression

USN 5822-1 introduced regressions on Ubuntu 20.04 LTS....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0476:01 Important: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severi...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0481:01 Moderate: Submariner 0.12.3 - security update and

Submariner 0.12.3 packages that fix various bugs and add various enhancements that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.5. Red Hat Product Security has rated this update as having a security impact...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0208:01 Moderate: java-1.8.0-openjdk security and bug fix

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0210:01 Moderate: java-1.8.0-openjdk security and bug fix

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0479:01 Moderate: redhat-ds:12 security update

An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.0 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, whic...

LinuxSecurity - Security Advisories

Oracle8: ELSA-2023-0446: go-toolset:ol8 Moderate Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3283-1: modsecurity-apache security update

Multiple issues were found in modsecurity-apache, open source, cross platform web application firewall (WAF) engine for Apache which allows remote attackers to bypass the applications firewall and other unspecified impact. ...

LinuxSecurity - Security Advisories

Debian: DSA-5329-1: bind9 security update

Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service against named. For the stable distribution (bullseye), these problems have been fixed in ...

LinuxSecurity - Security Advisories

Debian: DSA-5328-1: chromium security update

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0470:01 Important: Migration Toolkit for Runtimes

An update is now available for Migration Toolkit for Runtimes (v1.0.1). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0469:01 Moderate: Red Hat Integration Camel Extensions

Red Hat Integration Camel Extensions for Quarkus 2.13.2 is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0471:01 Important: Migration Toolkit for Runtimes

An update is now available for Migration Toolkit for Runtimes (v1.0.1). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which...

The Hacker News

Hive Ransomware Infrastructure Seized in Joint International Law Enforcement Effort

In what's a case of hacking the hackers, the darknet infrastructure associated with the Hive ransomware-as-a-service (RaaS) operation has been seized as part of a coordinated law enforcement effort involving 13 countries."Law enforcement identified t...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0336: systemd security Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle8: ELSA-2023-0463: thunderbird Important Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle7: ELSA-2023-0456: thunderbird Important (aarch64) Security Update

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle7: ELSA-2023-0456: thunderbird Important Security Update

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3282-1: git security update

Two vulnerabilities were discovered in Git, a distributed revision control system. An attacker may trigger code execution in specific situations. ...

LinuxSecurity - Security Articles

BlackBerry: Cyberattacks Are Being Launched Once Every Minute

Threat actors are evolving to target a wide variety of systems and infrastructure, BlackBerry says in a new report. "In addition, attacks against Linux systems and cloud infrastructure will increase as threat actors look to install backdoors on ...

LinuxSecurity - Security Articles

The Unrelenting Menace of the LockBit Ransomware Gang

The notorious Russian-speaking cybercriminals grew successful by keeping a low profile. But now they have a target on their backs....

The Hacker News

U.S. Federal Agencies Fall Victim to Cyber Attack Utilizing Legitimate RMM Software

At least two federal agencies in the U.S. fell victim to a "widespread cyber campaign" that involved the use of legitimate remote monitoring and management (RMM) software to perpetuate a phishing scam."Specifically, cyber criminal actors sent phishin...

LinuxSecurity - Security Advisories

Fedora 36: libXpm 2023-49dbeb6b03

libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883...

LinuxSecurity - Security Advisories

Fedora 37: redis 2023-fbfe7a6cfe

**Redis 7.0.8** Released Mon Jan 16 12:00:00 IDT 2023 Security Fixes: * (**CVE-2022-35977**) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands can drive Redis to OOM panic * (**CVE-2023-22458**) Integer overflow in the Redis HRANDFIELD...

LinuxSecurity - Security Advisories

Ubuntu 5829-1: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0466:01 Important: Red Hat OpenShift GitOps security

An update is now available for Red Hat OpenShift GitOps 1.6.4 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0468:01 Important: Red Hat OpenShift GitOps security

An update is now available for Red Hat OpenShift GitOps 1.5.9 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0467:01 Important: Red Hat OpenShift GitOps security

An update is now available for Red Hat OpenShift GitOps 1.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is ...

LinuxSecurity - Security Advisories

Ubuntu 5828-1: Kerberos vulnerabilities

Several security issues were fixed in Kerberos....

LinuxSecurity - Security Advisories

Ubuntu 5827-1: Bind vulnerabilities

Several security issues were fixed in Bind....

LinuxSecurity - Security Advisories

Ubuntu 5826-1: Privoxy vulnerabilities

Several security issues were fixed in Privoxy....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0461:01 Important: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0462:01 Important: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0237:01 Important: OpenShift Container Platform 4.8.57

Red Hat OpenShift Container Platform release 4.8.57 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vul...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0459:01 Important: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0456:01 Important: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severi...

The Hacker News

The Definitive Browser Security Checklist

Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is managed and protected. While not long-ago web-borne risks were still addressed by a patchwork...

LinuxSecurity - Security Articles

Linux Malware Rates Rise to Record Levels Amid Hacker Inconsistency

After rising and falling since 2021, new Linux malware hit record highs at year-end in 2022, growing by 117% over previous levels....

LinuxSecurity - Security Articles

OpenSSF Aimed to Stem Open Source Security Problems in 2022

In 2022, the Open Source Software Foundation (OpenSSF) set its sights on fixing security problems with the open software supply chain. including joining forces with companies including Apache, Google, Apple, and AWS, and meeting at the White House wi...

LinuxSecurity - Security Advisories

Ubuntu 5825-1: PAM vulnerability

PAM would allow unintended access to the machine over network....

The Hacker News

North Korean Hackers Turn to Credential Harvesting in Latest Wave of Cyberattacks

A North Korean nation-state group notorious for crypto heists has been attributed to a new wave of malicious email attacks as part of a "sprawling" credential harvesting activity targeting a number of industry verticals, marking a significant shift i...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0445:01 Moderate: go-toolset-1.18 security update

An update for go-toolset-1.18 and go-toolset-1.18-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, wh...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0446:01 Moderate: go-toolset:rhel8 security and bug fix

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

SUSE: 2023:206-1 bci/rust Security Update

The container bci/rust was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:205-1 bci/rust Security Update

The container bci/rust was updated. The following patches have been included in this update:...

The Hacker News

VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities

VMware on Tuesday released software to remediate four security vulnerabilities affectingvRealize Log Insight(aka Aria Operations for Logs) that could expose users to remote code execution attacks.Two of the flaws are critical, carrying a severity rat...

LinuxSecurity - Security Advisories

Fedora 36: nautilus 2023-f81ad89b81

Update to 42.6...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3281-1: swift security update

Sebastien Meriot discovered that the S3 API of Swift, a distributed virtual object store, was susceptible to information disclosure. For Debian 10 buster, this problem has been fixed in version ...

LinuxSecurity - Security Advisories

Ubuntu 5823-2: MySQL vulnerability

Several security issues were fixed in MySQL....

LinuxSecurity - Security Advisories

Debian LTS: DLA-3280-1: libde265 security update

Multiple issues were found in libde265, an open source implementation of the H.265 video codec, which may result in denial of service or have unspecified other impact. ...

LinuxSecurity - Security Advisories

SciLinux: SLSA-2023-0402-1 Moderate: bind on SL7.x x86_64

bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220) * bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795) For more details about the security issue(s), including the impact, a CVSS score, ack...

LinuxSecurity - Security Advisories

SciLinux: SLSA-2023-0399-1 Important: kernel on SL7.x x86_64

kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964) * hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 (CVE-2021-26401) For more details about the security issue(s), including the impact, a CVSS score, acknowle...

LinuxSecurity - Security Advisories

SciLinux: SLSA-2023-0403-1 Important: sssd on SL7.x x86_64

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters (CVE-2022-4254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es...

LinuxSecurity - Security Advisories

SciLinux: SLSA-2023-0203-1 Moderate: java-1.8.0-openjdk on SL7.x x86_64

OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830) * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS sco...

LinuxSecurity - Security Advisories

Ubuntu 5823-1: MySQL vulnerabilities

Several security issues were fixed in MySQL....

LinuxSecurity - Security Advisories

Debian: DSA-5327-1: swift security update

Sebastien Meriot discovered that the S3 API of Swift, a distributed virtual object store, was susceptible to information disclosure. For the stable distribution (bullseye), this problem has been fixed in ...

LinuxSecurity - Security Advisories

Debian: DSA-5326-1: nodejs security update

Multiple vulnerabilities were discovered in Node.js, which could result in HTTP request smuggling, bypass of host IP address validation and weak randomness setup. ...

LinuxSecurity - Security Advisories

Oracle7: ELSA-2023-0203: java-1.8.0-openjdk Moderate Security Update

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0303: usbguard security Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0304: libreoffice Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0318: postgresql-jdbc Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0285: firefox security Important Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0427:01 Moderate: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0402:01 Moderate: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity ratin...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0441:01 Important: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0403:01 Important: sssd

An update for sssd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rati...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0442:01 Important: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0440:01 Important: kernel

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0383: libXpm security Important Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0335: dbus security Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0338: libxml2 security Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0339: sqlite security Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0340: bash security Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-0337: expat security Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

The Hacker News

Chinese Hackers Utilize Golang Malware in DragonSpark Attacks to Evade Detection

Organizations in East Asia are being targeted by a likely Chinese-speaking actor dubbed DragonSpark while employing uncommon tactics to go past security layers."The attacks are characterized by the use of the little known open source SparkRAT and mal...

LinuxSecurity - Security Articles

An IBM Hacker Breaks Down High-Profile Attacks

For bad actors, the more intelligence they have on their target, the better. Attackers typically gather intelligence by scraping data readily available from public sources, called open source intelligence (OSINT)....

LinuxSecurity - Security Articles

New Boldmove Linux Malware Used to Backdoor Fortinet Devices

Suspected Chinese hackers exploited a recently disclosed FortiOS SSL-VPN vulnerability as a zero-day in December, targeting a European government and an African MSP with a new custom 'BOLDMOVE' Linux and Windows malware....

LinuxSecurity - Security Articles

A DevSecOps Process for Node.js Projects

Node.js is an open source development platform for running JavaScript code on the server side. Node is useful for developing applications that require a persistent browser-server connection and is often used for real-time applications such as chat, s...

The Hacker News

Security Navigator Research: Some Vulnerabilities Date Back to the Last Millennium

Vulnerability analysis results inOrange Cyberdefenses' Security Navigatorshow that some vulnerabilities first discovered in 1999 are still found in networks today. This is concerning.Age of VOC findingsOur Vulnerability Scans are performed on a recur...

The Hacker News

Emotet Malware Makes a Comeback with New Evasion Techniques

The Emotet malware operation has continued to refine its tactics in an effort to fly under the radar, while also acting as a conduit for other dangerous malware such as Bumblebee and IcedID.Emotet, which officiallyreemergedin late 2021 following a co...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0241:01 Low: OpenShift Container Platform 4.10.50 bug and

Red Hat OpenShift Container Platform release 4.10.50 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0203:01 Moderate: java-1.8.0-openjdk security and bug fix

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0393:01 Moderate: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0397:01 Important: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0395:01 Important: kernel

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0396:01 Important: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base...

The Hacker News

Apple Issues Updates for Older Devices to Fix Actively Exploited Vulnerability

Apple has backported fixes for a recently disclosed critical security flaw affecting older devices, citing evidence of active exploitation.The issue, tracked asCVE-2022-42856, is a type confusion vulnerability in the WebKit browser engine that could ...

LinuxSecurity - Security Advisories

SUSE: 2023:195-1 suse/sle-micro/5.3/toolbox Security Update

The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:9-1 suse-sles-15-sp4-chost-byos-v20230111-hvm-ssd-x86_64 Security Update

The container suse-sles-15-sp4-chost-byos-v20230111-hvm-ssd-x86_64 was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:8-1 suse-sles-15-sp4-chost-byos-v20230111-x86_64-gen2 Security Update

The container suse-sles-15-sp4-chost-byos-v20230111-x86_64-gen2 was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

Mageia 2023-0025: sudo security update

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to proce...

LinuxSecurity - Security Advisories

Mageia 2023-0024: virtualbox security update

Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. (CVE-2023-21884) Unauthenticated attacker with network access via multiple proto...

LinuxSecurity - Security Advisories

Mageia 2023-0023: jpegoptim security update

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. (CVE-2022-32325) References: - https://bugs.mageia.org/show_bug.cgi?id=31424 ...

LinuxSecurity - Security Advisories

Mageia 2023-0022: phoronix-test-suite security update

XSS in phoromatic_r_add_test_details.php (CVE-2022-40704) References: - https://bugs.mageia.org/show_bug.cgi?id=31423 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ETFF53AECMDP6PTNUVVCOODN3HMOETUU/ ...

LinuxSecurity - Security Advisories

Mageia 2023-0021: vim security update

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. (CVE-2023-0049) References: - https://bugs.mageia.org/show_bug.cgi?id=31422 ...

LinuxSecurity - Security Advisories

Mageia 2023-0020: sdl2 security update

Potential memory leak when creating a texture for an OpenGL ES image (CVE-2022-4743) References: - https://bugs.mageia.org/show_bug.cgi?id=31418 ...

LinuxSecurity - Security Advisories

Ubuntu 5820-1: exuberant-ctags vulnerability

Exuberant ctags could be make to perform arbitary command execution if run with maliciously crafted user input...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0354:01 Moderate: OpenJDK 8u362 Windows Security Update

The Red Hat build of OpenJDK 8 (java-1.8.0-openjdk) is now available for Windows. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0387:01 Moderate: OpenJDK 8u362 Security Update for

The Red Hat build of OpenJDK 8 (java-1.8.0-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0388:01 Moderate: OpenJDK 11.0.18 Security Update for

The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0389:01 Moderate: OpenJDK 17.0.6 Security Update for

The Red Hat build of OpenJDK 17 (java-17-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0353:01 Moderate: OpenJDK 11.0.18 Security Update for

The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for Windows. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

Fedora 37: kernel 2023-0597579983

The 6.1.7 stable kernel update contains a number of important fixes across the tree....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0381:01 Important: libXpm security update

An update for libXpm is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0380:01 Important: libXpm security update

An update for libXpm is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0378:01 Important: libXpm security update

An update for libXpm is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0377:01 Important: libXpm security update

An update for libXpm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity ra...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0245:01 Moderate: OpenShift Container Platform 4.11.25

Red Hat OpenShift Container Platform release 4.11.25 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vul...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0205:01 Moderate: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

openSUSE: 2023:0030-1 moderate: python-mechanize

An update that solves one vulnerability and has one errata is now available. ...

LinuxSecurity - Security Advisories

openSUSE: 2023:0031-1 moderate: upx

An update that fixes one vulnerability is now available. ...

LinuxSecurity - Security Advisories

Debian: DSA-5324-1: linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. ...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

TROJANPUZZLE Attack Compels AI Assistants To Suggest Rogue Codes

Researchers have devised a novel attack strategy against AI assistants. Dubbed “TrojanPuzzle,” the data poisoning…TROJANPUZZLE Attack Compels AI Assistants To Suggest Rogue Codes on Latest Hacking News | Cyber Security News, Hacking Tools a...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Multiple Vulnerabilities Found In Samsung Galaxy App Store App

Researchers discovered numerous security vulnerabilities in Samsung’s Galaxy App Store application that threatened Samsung users.…Multiple Vulnerabilities Found In Samsung Galaxy App Store App on Latest Hacking News | Cyber Security News, Hac...

LinuxSecurity - Security Advisories

Ubuntu 5806-2: Ruby vulnerability

Ruby could allow for internet traffic to be modified if a vulnerable application processed malicious user input....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0294:01 Important: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0289:01 Important: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0204:01 Moderate: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS)...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0293:01 Important: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0290:01 Important: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base scor...

LinuxSecurity - Security Advisories

Ubuntu 5818-1: PHP vulnerability

PHP could be made do crash or execute arbitrary code if it received a specially crafted input....

LinuxSecurity - Security Articles

C++ Programming Language and Safety: Here's Where It Goes Next

There's been a shift towards 'memory safe' languages. So, can updates to C++ help it catch up in the eyes of developers?...

LinuxSecurity - Security Articles

How to Check if Your Linux System is Infected with a Virus

Linux is undoubtedly the best open-source operating system, and is arguably the most secure OS by design . Most computers these days are Linux-based. Android OS, which is the most commonly used mobile operating system, is also Linux-based. The same g...

The Hacker News

SaaS Security Posture Management (SSPM) as a Layer in Your Identity Fabric

The move to SaaS and other cloud tools has put an emphasis on Identity & Access Management (IAM). After all, user identity is one of the only barriers standing between sensitive corporate data and any unauthorized access.The tools used to define IAM ...

LinuxSecurity - Security Advisories

Ubuntu 5817-1: Setuptools vulnerability

Setuptools could be made to crash if it received specially crafted input....

LinuxSecurity - Security Advisories

Debian LTS: DLA-3279-1: trafficserver security update

Multiple vulnerabilities were found in trafficserver, a caching proxy server. CVE-2021-37150 ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0291:01 Important: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rati...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0281:01 Important: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0280:01 Important: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-0284:01 Important: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rati...

LinuxSecurity - Security Advisories

SUSE: 2023:194-1 suse/sle-micro/5.4/toolbox Security Update

The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

Ubuntu 5816-1: Firefox vulnerabilities

Several security issues were fixed in Firefox....

LinuxSecurity - Security Advisories

Fedora 36: kernel 2023-58eac2b872

The 6.1.7 stable kernel update contains a number of important fixes across the tree....

LinuxSecurity - Security Advisories

Mageia 2023-0008: kernel-linus security update

This kernel-linus update is based on upstream 5.15.88 and fixes atleast the following security issues: A use-after-free flaw was found in the Linux kernel¢''s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user...

LinuxSecurity - Security Advisories

Mageia 2023-0007: kernel security update

This kernel update is based on upstream 5.15.88 and fixes atleast the following security issues: A use-after-free flaw was found in the Linux kernel¢''s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, ...

LinuxSecurity - Security Advisories

Fedora 36: firefox 2023-b1cc6d3454

- Update to 109.0...

LinuxSecurity - Security Advisories

Fedora 36: dotnet6.0 2023-4d5f7e5cb0

This updates .NET 6 to the January 2023 security release. The updated versions are SDK 6.0.113 and Runtime 6.0.13 This include a fix for CVE-2023-21538...

LinuxSecurity - Security Advisories

Fedora 36: upx 2023-8d91390935

Patches for CVE-2023-23456 and CVE-2023-23457...

LinuxSecurity - Security Advisories

Fedora 37: sudo 2023-9078f609e6

Rebase to sudo-1.9.12p2 - security fix for CVE-2023-22809...

LinuxSecurity - Security Advisories

Fedora 37: libXpm 2023-1bd07375a7

libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883...

LinuxSecurity - Security Advisories

Fedora 37: dotnet6.0 2023-f9368f7fea

This updates .NET 6 to the January 2023 security release. The updated versions are SDK 6.0.113 and Runtime 6.0.13 This include a fix for CVE-2023-21538...

LinuxSecurity - Security Advisories

openSUSE: 2023:0027-1 moderate: tor

An update that contains security fixes can now be installed. ...

LinuxSecurity - Security Advisories

openSUSE: 2023:0025-1 important: cacti, cacti-spine

An update that fixes one vulnerability is now available. ...

LinuxSecurity - Security Advisories

SUSE: 2023:193-1 suse/sle-micro/5.2/toolbox Security Update

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:191-1 suse/sle-micro/5.1/toolbox Security Update

The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:190-1 bci/ruby Security Update

The container bci/ruby was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:189-1 bci/python Security Update

The container bci/python was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:188-1 bci/python Security Update

The container bci/python was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:187-1 suse/pcp Security Update

The container suse/pcp was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

Fedora 36: git 2023-746c4aacce

Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.txt) and the security advisories ([CVE-2022- 41903](https://github.com/git/git/security/advis...

LinuxSecurity - Security Advisories

Fedora 36: rust 2023-575fcaf4bf

Security fix for CVE-2022-46176: Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. For more details, see the upstream [security advisory](https://blog.rust- lang.org/2023/01/10/cve-2022-46176.html)....

LinuxSecurity - Security Advisories

Fedora 36: yarnpkg 2023-18fd476362

Add patches for CVE-2021-43138, CVE-2022-3517, CVE-2020-7677...

LinuxSecurity - Security Advisories

Fedora 37: git 2023-9718cc6113

Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.txt) and the security advisories ([CVE-2022- 41903](https://github.com/git/git/security/advis...

LinuxSecurity - Security Advisories

Fedora 37: yarnpkg 2023-ce8943223c

Add patches for CVE-2021-43138, CVE-2022-3517, CVE-2020-7677...

LinuxSecurity - Security Advisories

Slackware: 2023-020-02: seamonkey Security Update

New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. ...

LinuxSecurity - Security Advisories

Slackware: 2023-020-01: mozilla-thunderbird Security Update

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3278-1: tiff security update

Multiple vulnerabilities were found in tiff, a library and tools providing support for the Tag Image File Format (TIFF), leading to denial of service (DoS) and possibly local code execution. ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3277-1: powerline-gitstatus security update

Powerline Gitstatus, a status line plugin for the VIM editor, allows arbitrary code execution. Git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gits...

The Hacker News

Roaming Mantis Spreading Mobile Malware That Hijacks Wi-Fi Routers' DNS Settings

Threat actors associated with the Roaming Mantis attack campaign have been observed delivering an updated variant of their patent mobile malware known as Wroba to infiltrate Wi-Fi routers and undertake Domain Name System (DNS) hijacking.Kaspersky, wh...

The Hacker News

Gamaredon Group Launches Cyberattacks Against Ukraine Using Telegram

The Russian state-sponsored cyber espionage group known as Gamaredon has continued its digital onslaught against Ukraine, with recent attacks leveraging the popular messaging app Telegram to strike military and law enforcement sectors in the country....

LinuxSecurity - Security Articles

Linux FU: UEFI Booting

Unless your computer is pretty old, it probably uses UEFI (Unified Extensible Firmware Interface) to boot. The idea is that a bootloader picks up files from an EFI partition and uses them to start your operating system....