Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
RedHat: RHSA-2022-4788:01 Moderate: openvswitch2.16 security update
An update for openvswitch2.16 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secu…
Ubuntu 5424-2: OpenLDAP vulnerabili
OpenLDAP could be made to perform arbitrary modifications to the database.
Fedora 35: rubygem-nokogiri 2022-e9b2e1c1
This rpm backports the patch for the issue for improper handling of unexpected data types, related to untrusted inputs to the SAX parsers, which is assigned as…
Fedora 36: rubygem-nokogiri 2022-00713284
New version 1.13.6 is released. This rpm addresses the issue for improper handling of unexpected data types, related to untrusted inputs to the SAX parsers, wh…
Fedora 34: rubygem-nokogiri 2022-0e5d64ce
This rpm backports the patch for the issue for improper handling of unexpected data types, related to untrusted inputs to the SAX parsers, which is assigned as…
Ubuntu 5424-1: OpenLDAP vulnerabili
OpenLDAP could be made to perform arbitrary modifications to the database.
Researchers Explain How Exploit Vanity URLs Could Allow Phishing Attacks
While vanity URLs have become a convenient way to personalize links, they also risk phishing…Researchers Explain How Exploit Vanity URLs Could Allow Phishing A…
Debian LTS: DLA-3001-1: libgoogle-gson-java security upda
It was discovered that the package com.google.code.gson:gson before 2.8.9 is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in i…
Mageia 2022-0142: libarchive security upda
7zip reader: fix PPMD read beyond boundary. ZIP reader: fix possible out of bounds read. ISO reader: fix possible heap buffer overflow in read_children(). RARv…
Mageia 2022-0133: usbredir security upda
A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This iss…
New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers
A newly disclosed security vulnerability in the Kubernetes container engine CRI-O calledcr8escapecould be exploited by an attacker to break out of containers a…
Debian: DSA-5101-1: libphp-adodb security upda
Emmet Leahy reported that libphp-adodb, a PHP database abstraction layer library, allows to inject values into a PostgreSQL connection string. Depending on how…
Researchers Warn of Linux Kernel ‘Dirty Pipe’ Arbitrary File Overwrite Vulnerability
Linux distributions are in the process of issuing patches to address a newly disclosed security vulnerability in the kernel that could allow an attacker to ove…
Mageia 2022-0092: kernel security upda
This kernel update is based on upstream 5.15.25 and fixes at least the following security issues: A vulnerability in the Linux kernel since version 5.8 due to …
Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities
An analysis of data crowdsourced from more than 200,000 network-connected infusion pumps used in hospitals and healthcare entities has revealed that 75% of tho…
Ubuntu 5304-1: PolicyKit vulnerabili
policykit-1 could be made to crash if it received specially crafted data.
SciLinux: SLSA-2022-0620-1 Important: kernel on SL7.x x86_
kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466) * kernel: Use After Free in unix_gc() which could result in a local p…
Master Key for Hive Ransomware Retrieved Using a Flaw in its Encryption Algorithm
Researchers have detailed what they call the "first successful attempt" at decrypting data infected with Hive ransomware without relying on the private key use…
A Free Solution to Protect Your Business from 6 Biggest Cyber Threats in 2022
For the last few years, the cybersecurity threat landscape has gotten progressively more complex and dangerous. The online world is now rife with data thieves,…
Debian LTS: DLA-2927-1: twisted security upda
It was discovered that Twisted, a Python event-based framework for internet applications, is affected by HTTP request splitting vulnerabilities, and may expose…
Red Cross Cyberattack Links Back To A Zoho ManageEngine Vulnerability
A month after the disruptive data breach, Red Cross has shared more details about the…Red Cross Cyberattack Links Back To A Zoho ManageEngine Vulnerability on …
VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products
VMware on Tuesday patched severalhigh-severityvulnerabilitiesimpacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could …
Fedora 34: rust-afterburn 2022-06569a0a
Rebuild to fix [RUSTSEC-2022-0006](https://rustsec.org/advisories/RUSTSEC-2022-0006.html) (possible memory corruption caused by a data race) and [CVE-2022-2165…
Fedora 35: rust-afterburn 2022-1b76e3a1
Rebuild to fix [RUSTSEC-2022-0006](https://rustsec.org/advisories/RUSTSEC-2022-0006.html) (possible memory corruption caused by a data race) and [CVE-2022-2165…