Debian dsa-5805 : guix - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5805 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5805-1 [email protected] https://www.debian.org/security/ Moritz...

SUSE-SU-2024:3943-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262...

Ubuntu: Security Advisory (USN-7089-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Return Address Stack Side Channel

Bulletin ID: AMD-SB-7031 Potential Impact: N/A Severity: N/A Summary Researchers from the Google® Security Team have reported to AMD a new method of exploiting the previously reported CVE-2023-20569 “Inception” vulnerability on “Zen 3” and “Zen 4” based architectures. AMD believes that the...

Ubuntu: Security Advisory (USN-7088-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-6377-HFV9-HQF6 Twig has unguarded calls to `__toString()` when nesting an object into an array

Description In a sandbox, an attacker can call toString on an object even if the toString method is not allowed by the security policy when the object is part of an array or an argument list arguments to a function or a filter for instance. Resolution The sandbox mode now checks the toString meth...

Maritime lawyers assemble!

Maritime cyber insurance has been playing catch-up with maritime cyber security for a while now. It was all pretty good until the availability of cheap VSAT meant that ships became constantly connected. Vessels were mostly not connected at sea, other than Fleet Broadband connections, rarely used...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 3 for SLE 15 SP6) (SUSE-SU-2024:3884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:3871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar

Did you know that advanced threat actors can infiltrate the identity systems of major organizations and extract sensitive data within days? It's a chilling reality, becoming more common and concerning by the day. These attackers exploit vulnerabilities in SaaS and cloud environments, using...

CVE-2023-39130 affecting package gdb for versions less than 11.2-3

CVE-2023-39130 affecting package gdb for versions less than 11.2-3. A patched version of the package is available...

CVE-2024-8096 affecting package curl for versions less than 8.8.0-3

CVE-2024-8096 affecting package curl for versions less than 8.8.0-3. A patched version of the package is available...

CVE-2023-39129 affecting package gdb for versions less than 11.2-3

CVE-2023-39129 affecting package gdb for versions less than 11.2-3. A patched version of the package is available...

SUSE-SU-2024:3871-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262 - CVE-2024-41996: Avoid expensive public key validation for known safe-prime groups DHEATATTACK bsc1230698...

Malicious Package

Overview artifact-lab-3-package-24ddbc49 is a malicious package. This package contains malicious code and was removed from the package manager. Remediation Avoid using all malicious instances of the artifact-lab-3-package-24ddbc49 package...

Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy

CVE-2024-23113 The script is designed to detect CVE-2024-2311...

[SECURITY] Fedora 40 Update: micropython-1.23.0-1.fc40

Implementation of Python 3 with very low memory footprint...

[SECURITY] Fedora 39 Update: micropython-1.23.0-1.fc39

Implementation of Python 3 with very low memory footprint...

[SECURITY] Fedora 41 Update: micropython-1.23.0-1.fc41

Implementation of Python 3 with very low memory footprint...

SUSE-SU-2024:3785-1 Security update for pcp

This update for pcp fixes the following issues: pcp was updated from version 5.2.5 to version 6.2.0 jscPED-8192, jscPED-8389: - Security issues fixed: CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user bsc1230552 CVE-2024-45769: Fixed a heap corruption...