Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
High-Severity ntfs-3g Buffer Overflow Vulns Fixed
Several buffer overflow vulnerabilities have been identified in ntfs-3g. With a low attack complexity and a high confidentiality, integrity and availability im…
Critical Remotely Exploitable Django Vuln Fixed
It was discovered that Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1 incorrectly handled uploading multiple files using one form field (CVE-…
Linux Kernel DoS, Info Disclosure Bugs Fixed
Several important security issues have been found in the Linux kernel, including a slab-out-of-bound read problem (CVE-2023-1380), a heap out-of-bounds read/wr…
Mageia 2023-0184: libssh security update
Potential NULL dereference during rekeying with algorithm guessing. (CVE-2023-1667) Authorization bypass in pki_verify_data_signature. (CVE-2023-2283 Reference…
How To Secure Against WordPress Vulnerabilities with Predictive Analysis Detection & Automated Remediation
WordPress is one of the most popular content management systems in the world due to the ability it gives non-technical, inexperienced users to create professio…
Git 2.40.1 & Other Updates Address Three High-Impact Security Vulnerabilities
Git 2.40.1 has been released to address three new security vulnerabilities being disclosed, which have been classified as ''high-severity'' by the National Vul…
Debian: DSA-5395-1: nodejs security update
An untrusted search path vulnerability was discovered in Node.js, which could result in unexpected searching or loading ICU data when running with elevated pri…
Git 2.40.1 & Other Updates Address Three New Security Vulnerabilities
Git 2.40.1 has been released to address three new security vulnerabilities being disclosed, which have been classified as ''high-severity'' by the National Vul…
Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE Attacks
The maintainers of theApache Supersetopen source data visualization software have released fixes to plug an insecure default configuration that could lead to r…
Mageia 2023-0151: openimageio security update
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-…
Debian LTS: DLA-3396-1: redis security update
It was discovered that there was a potential remote denial of service vulnerability in Redis, a popular 'NoSQL' key-value database. Authenticated users could h…
Ubuntu 6036-1: PatchELF vulnerability
patchelf could be made to crash or read sensitive data if it opened a specially crafted file.
Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks
Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code execution (RCE) vulnerability in its GoAnywhere MFT tool that has come underacti…
RedHat: RHSA-2023-1823:01 Moderate: openvswitch2.13 security update
An update for openvswitch2.13 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
Mageia 2023-0146: firefox security update
Updated firefox and libwebp packages fix security vulnerabilities: Unexpected data returned from the Safe Browsing API could have led to memory corruption and …
Mageia 2023-0144: libheif security update
Vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to caus…
RedHat: RHSA-2023-1770:01 Moderate: openvswitch3.1 security update
An update for openvswitch3.1 is now available in Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a secur…
RedHat: RHSA-2023-1766:01 Moderate: openvswitch3.1 security update
An update for openvswitch3.1 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secur…
RedHat: RHSA-2023-1765:01 Moderate: openvswitch2.17 security update
An update for openvswitch2.17 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secu…
RedHat: RHSA-2023-1769:01 Moderate: openvswitch2.17 security update
An update for openvswitch2.17 is now available in Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a secu…
Mageia 2023-0135: ipmitool security update
It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffe…
Mageia 2023-0134: ghostscript security update
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp…
Study Reveals WiFi Protocol Vulnerability Exposing Network Traffic
Researchers have discovered a major security vulnerability in the WiFi protocol that risks data exposure…Study Reveals WiFi Protocol Vulnerability Exposing Net…
Mageia 2023-0122: dino security update
When a Dino client receives a specifically crafted message from an unauthorized sender, it would use information from that message to add, update or remove ent…