Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3369-1: runc security update
Multiple vulnerabilities were discovered in runc, the Open Container Project runtime, which is often used with virtualization environments such as Docker. Mali…
Verifying Linux Server Security: What Every Admin Needs to Know
Linux is a widespread OS known for its robust security . That being said, vulnerabilities are inevitable in any OS, and Linux system administrators must be vig…
Debian LTS: DLA-3368-1: libreoffice security update
Multiple vulnerabilities were found in LibreOffice an office productivity software suite, leading to arbitrary script execution, improper certificate validatio…
Mageia 2023-0102: libtpms security update
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDe…
Debian LTS: DLA-3361-1: redis security update
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used…
Fortinet FortiOS Flaw Exploited in Targeted Cyberattacks on Government Entities
Government entities and large organizations have been targeted by an unknown threat actor by exploiting a security flaw in Fortinet FortiOS software to result …
Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity
The North Korea-linkedLazarus Grouphas been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice wi…
New TPM 2.0 Flaws Could Let Hackers Steal Cryptographic Keys
The Trusted Platform Module (TPM) 2.0 specification is affected by two buffer overflow vulnerabilities that could allow attackers to access or overwrite sensit…
Apple iOS Vulnerability Could Expose Users’ Messages And Photos
Apple silently patched a serious security vulnerability affecting iOS users that could expose data. Specifically,…Apple iOS Vulnerability Could Expose Users’ M…
Debian: DSA-5354-1: snort security update
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Debian LTS: DLA-3317-1: snort security update
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Researcher Discovers Backdoor In Toyota Supplier Management Network
A security researcher discovered a serious security vulnerability that risked Toyota’s suppliers’ and users’ data.…Researcher Discovers Backdoor In Toyota Supp…
RedHat: RHSA-2023-0691:01 Moderate: openvswitch2.17 security,
An update for openvswitch2.17 is now available for Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-0685:01 Moderate: openvswitch2.13 security,
An update for openvswitch2.13 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-0688:01 Moderate: openvswitch2.17 security,
An update for openvswitch2.17 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-0689:01 Moderate: openvswitch2.16 security,
An update for openvswitch2.16 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
Mageia 2023-0042: opusfile security update
NULL pointer dereferences in op_get_data() and op_open1() in opusfile.c (CVE-2022-47021) References: - https://bugs.mageia.org/show_bug.cgi?id=31505
Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered
Two new security weaknesses discovered in several electric vehicle (EV) charging systems could be exploited to remotely shut down charging stations and even ex…
Atlassian's Jira Software Found Vulnerable to Critical Authentication Vulnerability
Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass …
Atlassian's Jira Service Management Found Vulnerable to Critical Vulnerability
Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass …
Intel's "DOITM" Security Feature Not Intended For Always-On Use, Linux Patches To Be Revised
Last week I wrote about Linux developers evaluating a new "DOITM" security mitigation for the latest Intel CPUs . While the cost for now of engaging the Data O…
SciLinux: SLSA-2023-0403-1 Important: sssd on SL7.x x86_64
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters (CVE-2022-4254) For more details about the security issue(s), including the impact…
RedHat: RHSA-2023-0076:01 Moderate: Red Hat Ceph Storage 5.3 security
An update for ceph, cephadm-ansible, ceph-iscsi, python-dataclasses, and python-werkzeug is now available for Red Hat Ceph Storage 5.3. Red Hat Product Securit…
Debian: DSA-5313-1: hsqldb security update
It was found that those using java.sql.Statement or java.sql.PreparedStatement in hsqldb, a Java SQL database, to process untrusted input may be vulnerable to …