Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2023-0240: cri-o security update
Denial of service due to memory or disk exhaustion. (CVE-2022-1708) References: - https://bugs.mageia.org/show_bug.cgi?id=30526 - https://github.com/cri-o/cri-…
New Reptile Rootkit Malware Attacking Linux Systems Using Port Knocking
A new kernel module rootkit malware was released recently on GitHub, dubbed Reptile. It's an open-source rootkit that has the ability to hide itself, other mal…
Fedora 38: dotnet6.0 2023-feda45bc39
This is the July 2023 update for .NET 6. It updates the SDK to 6.0.120 and Runtime to 6.0.20. https://github.com/dotnet/announcements/issues/262
Fedora 38: dotnet7.0 2023-d25e798d6c
This is the July 2023 monthly update for .NET 7. It updates the SDK to 7.0.109 and Runtime to 7.0.9. https://github.com/dotnet/announcements/issues/262
GPAC DoS, Code Execution Flaws Fixed
Multiple severe security issues were discovered in the GPAC multimedia framework, including a heap-based Buffer Overflow in the GitHub repository gpac/gpac bef…
Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware
The npm registry for the Node.js JavaScript runtime environment is susceptible to what's called amanifest confusionattack that could potentially allow threat a…
Fedora 38: wabt 2023-ab291ca614
Latest stable release. Full upstream changelog: https://github.com/WebAssembly/wabt/compare/1.0.32...1.0.33 . Fixes CVE-2023-27116, CVE-2023-30300 and CVE-2023…
Fedora 38: dotnet7.0 2023-ee819d655b
This is the June 2023 monthly update for .NET 7. It includes fixes for several CVEs. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release…
Fedora 38: dotnet6.0 2023-401e38c388
This is the June 2023 monthly update for .NET 6. It includes fixes for several CVEs. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release…
Fedora 37: dotnet7.0 2023-e6d5cb11bb
This is the June 2023 monthly update for .NET 7. It includes fixes for several CVEs. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release…
Fedora 37: dotnet6.0 2023-edb993aeaf
This is the June 2023 monthly update for .NET 6. It includes fixes for several CVEs. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release…
Debian LTS: DLA-3460-1: python-mechanize security update
Erik Krogh Kristensen and Rasmus Petersen from the GitHub Security Lab discovered a ReDoS (Regular Expression Denial of Service) vulnerability in python-mechan…
Fedora 38: php 2023-2455981016
**PHP version 8.2.7** (08 Jun 2023) **Core:** * Fixed bug [GH-11152](https://github.com/php/php-src/issues/11152) (Unable to alias namespaces containing reserv…
Fedora 38: sympa 2023-271b912b2b
Update to sympa 6.2.72 Fixes CVE-2021-32850 For details, see: https://github.com/sympa-community/sympa/releases/tag/6.2.72
Fedora 37: sympa 2023-419ca55dd3
Update to sympa 6.2.72 Fixes CVE-2021-32850 For details, see: https://github.com/sympa-community/sympa/releases/tag/6.2.72
Debian LTS: DLA-3442-1: nbconvert security update
Alvaro Mu'±oz from the GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert, a tool and library used to con…
PyPI Open-Source Code Repository Deals with Manic Malware Maelstrom
Public source code repositories, from Sourceforge to GitHub , from the Linux Kernel Archives to ReactOS.org , from PHP Packagist to the Python Package Index , …
Fedora 36: git 2023-003e7d2867
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Fedora 37: git 2023-d84a75ea52
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Fedora 36: libsignal-protocol-c 2023-8b0938312e
Backport a fix for [CVE-2022-48468](https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2022-48468) for [protobuf-c](https://github.com/protobuf-c/protobuf-c),…
Fedora 38: libsignal-protocol-c 2023-4e094d5297
Backport a fix for [CVE-2022-48468](https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2022-48468) for [protobuf-c](https://github.com/protobuf-c/protobuf-c),…
Fedora 38: git 2023-eaf1bdd5ae
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Mageia 2023-0143: jpegoptim security update
A heap overflow can occur with crafted JPEG image file. (CVE-2023-27781) References: - https://bugs.mageia.org/show_bug.cgi?id=31764 - https://github.com/tjko/…
Fedora 36: php-Smarty 2023-7490239652
## [3.1.48] - 2023-03-28 ### Security - Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447. ### Fixed - Output buff…