Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3740-1: gnutls28 security update
Hubert Kario discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, was vuln…
Debian: DSA-5615-1: runc security update
It was discovered that runc, a command line client for running applications packaged according to the Open Container Format (OCF), was suspectible to multiple …
Debian: DSA-5613-1: openjdk-17 security update
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in side channel attacks, leaking sensitive data to log files, denial…
Protecting Linux Users Against Ransomware: Essential Backup Strategies
Data security in a modern business environment is considered one of the most critical factors for any company. The digitalization of the world has led to more …
Debian LTS: DLA-3728-1: openjdk-11 security update
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in side channel attacks, leaking sensitive data to log files, denial…
Debian: DSA-5604-1: openjdk-11 security update
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in side channel attacks, leaking sensitive data to log files, denial…
Ubuntu 6354-1: Python vulnerability
Python could be made to crash or leak sensitive information if it received specially crafted input.
Fedora 38: mosquitto 2023-6a87c003c4
2.0.17 Broker: * Fix `max_queued_messages 0` stopping clients from receiving messages * Fix `max_inflight_messages` not being set correctly. Apps: * Fix `mosqu…
Fedora 38: libwebsockets 2023-6a87c003c4
2.0.17 Broker: * Fix `max_queued_messages 0` stopping clients from receiving messages * Fix `max_inflight_messages` not being set correctly. Apps: * Fix `mosqu…
Fedora 37: mosquitto 2023-e7ed15ab9e
2.0.17 Broker: * Fix `max_queued_messages 0` stopping clients from receiving messages * Fix `max_inflight_messages` not being set correctly. Apps: * Fix `mosqu…
SciLinux: SLSA-2023-4819-1 Important: kernel on SL7.x x86_64
kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788) * hw: amd: Cross-Process Information Leak (CVE-2023-20593) For more details abo…
SciLinux: SLSA-2023-4766-1 Important: cups on SL7.x x86_64
cups: Information leak through Cups-Get-Document operation (CVE-2023-32360) For more details about the security issue(s), including the impact, a CVSS score, a…
Fedora 38: youtube-dl 2023-1f11546a48
Update to latest upstream git snapshot. Various changes, including bug fix for cookie leak vulnerability.
Fedora 37: youtube-dl 2023-5435c10480
Update to latest upstream git snapshot. Various changes, including bug fix for cookie leak vulnerability.
Monti Ransomwares Linux Variant Attacks the Financial & Healthcare Industries
The Monti ransomware was found in June 2022 that attracted notice due to its close resemblance to the Conti ransomware, both in name and tactics, drawing atten…
Debian LTS: DLA-3522-1: hdf5 security update
Multiple security vulnerabilities were discovered in HDF5, a Hierarchical Data Format and a library for scientific data. Memory leaks, out-of-bound reads and d…
Debian LTS: DLA-3515-1: cjose security update
An incorrect Authentication Tag length usage was discovered in cjose, a C library implementing the Javascript Object Signing and Encryption (JOSE) standard, wh…
Debian LTS: DLA-3511-1: amd64-microcode security update
Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in "Zen 2" CPUs may not be written to 0 correctly. This flaw a…
Debian: DSA-5462-1: linux security update
Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in AMD "Zen 2" CPUs may not be written to 0 correctly. This fl…
Debian: DSA-5459-1: amd64-microcode security update
Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in "Zen 2" CPUs may not be written to 0 correctly. This flaw a…
New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
Debian LTS: DLA-3478-1: yajl security update
A memory leak has been found in yajl, a JSON parser / small validating JSON generator written in ANSI C, which might allow an attacker to cause an out of memor…
Debian LTS: DLA-3463-1: opensc security update
Multiple vulnerabilities were found in opensc, a set of libraries and utilities to access smart cards, which could lead to application crash or information lea…
Debian LTS: DLA-3458-1: php7.3 security update
Niels Dossche and Tim D'¼sterhus discovered that PHP's implementation of the SOAP HTTP Digest authentication did not check for failures, which may result in a …