[SECURITY] Fedora 41 Update: sfnt2woff-zopfli-1.3.1-15.fc41

This is a modified version of the sfnt2woff utility that uses Zopfli as a compression algorithm instead of zlib. This results in compression gains of =E2=80=94 on average =E2=80=94 5-8% compared to regular WOFF files. Zopfli generates co mpressed output that is compatible with regular zlib...

[SECURITY] Fedora 42 Update: sfnt2woff-zopfli-1.3.1-15.fc42

This is a modified version of the sfnt2woff utility that uses Zopfli as a compression algorithm instead of zlib. This results in compression gains of =E2=80=94 on average =E2=80=94 5-8% compared to regular WOFF files. Zopfli generates co mpressed output that is compatible with regular zlib...

PT-2025-23038

Name of the Vulnerable Software and Affected Versions GNU Coreutils affected versions not specified Description A flaw was found in the sort utility's begfield function, which is vulnerable to a heap buffer under-read. This issue may cause the program to access memory outside the allocated buffer...

CVE-2025-4876

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained t...

CVE-2025-4876 Hardcoded Key Revealed in ConnectWise Password Encryption Utility

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained t...

DynaNoise: Dynamic Probabilistic Noise Injection for Defending against Membership Inference Attacks

Membership Inference Attacks MIAs pose a significant risk to the privacy of training datasets by exploiting subtle differences in model outputs to determine whether a particular data sample was used during training. These attacks can compromise sensitive information, especially in domains such as...

Safe Delta: Consistently Preserving Safety When Fine-Tuning LLMs on Diverse Datasets

Large language models LLMs have shown great potential as general-purpose AI assistants across various domains. To fully leverage this potential in specific applications, many companies provide fine-tuning API services, enabling users to upload their own data for LLM customization. However,...

Optimal Allocation of Privacy Budget on Hierarchical Data Release

Releasing useful information from datasets with hierarchical structures while preserving individual privacy presents a significant challenge. Standard privacy-preserving mechanisms, and in particular Differential Privacy, often require careful allocation of a finite privacy budget across differen...

Privacy and Confidentiality Requirements Engineering for Process Data

The application and development of process mining techniques face significant challenges due to the lack of publicly available real-life event logs. One reason for companies to abstain from sharing their data are privacy and confidentiality concerns. Privacy concerns refer to personal data as...

CVE-2025-20629

Insecure inherited permissions in the NVM Update Utility for some IntelR Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated user to potentially enable escalation of privilege via local access...

Cape: Context-Aware Prompt Perturbation Mechanism with Differential Privacy

Large Language Models LLMs have gained significant popularity due to their remarkable capabilities in text understanding and generation. However, despite their widespread deployment in inference services such as ChatGPT, concerns about the potential leakage of sensitive user data have arisen...

Alibaba Cloud Linux 3 : 0046: apr-util (ALINUX3-SA-2023:0046)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0046 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-25147: Integer Overflow or Wraparound...

CVE-2025-20629

CVE-2025-20629 affects Intel® NVM Update Utility for the Ethernet Network Adapter E810 Series (prior to v4.60). Root cause: insecure inherited permissions that could allow an authenticated, low-privilege user with local access to escalate privileges. Impact: potential elevation of privilege via l...

CVE-2025-20629

Insecure inherited permissions in the NVM Update Utility for some IntelR Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Ethernet Connections Boot Utility Software Advisory - Lenovo Support US

No description provided...

ALSA-2025:7050 Moderate: rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

PT-2025-21104 · Intel · Intel Ethernet Network Adapter E810 Series

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Network Adapter E810 Series versions prior to 4.60 Description: Insecure inherited permissions in the NVM Update Utility may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Ethernet Connections Boot Utility Software Advisory

Summary: A potential security vulnerability in the Intel® Ethernet Connections Boot Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20015 Description: Uncontrolled search path...

Intel® Ethernet Network Adapter E810 Series Advisory

Summary: A potential security vulnerability in some Non-Volatile Memory NVM Update Utility for Intel® Ethernet Network Adapter E810 Series may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20629...

Moderate: iptraf-ng security update

IPTraf-ng is a console-based network monitoring utility which includes an IP traffic monitor, a TCP and UDP service monitor, and a LAN statistics module. It supports Ethernet, FDDI, ISDN, SLIP, PPP, and loopback interfaces as well as the built-in raw socket interface of the Linux kernel. Security...