Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SciLinux: SLSA-2022-8491-1 Important: xorg-x11-server on SL7.x x86_64
xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550) * xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-…
Complete Guide to Ethical Hacking on Linux
Ethical hacking is analyzing a system without permission to try and discover vulnerabilities that hackers can use. On the other hand, penetration testing attem…
Linux Database Security Tips
Data leaks are extremely prominent in the cyber world due to lack of proper or adequate security implementation. Securing databases is an essential practice to…
Debian: DSA-5272-1: xen security update
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks. For th…
SciLinux: SLSA-2022-7069-1 Important: firefox on SL7.x x86_64
This update upgrades Firefox to version 102.4.0 ESR. * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Me…
Debian: DSA-5246-1: mediawiki security update
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in restriction bypass, information leaks, cr…
SciLinux: SLSA-2022-6710-1 Important: thunderbird on SL7.x x86_64
This update upgrades Thunderbird to version 102.3.0. * Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh…
Debian LTS: DLA-3109-1: nova security update
It was found that authenticated users could trigger a fault in Nova, a cloud computing fabric controller, to cause information leak. In addition, this update i…
Debian: DSA-5197-1: curl security update
Multiple security vulnerabilities have been discovered in cURL, an URL transfer library. These flaws may allow remote attackers to obtain sensitive information…
Ubuntu 5532-1: Bottle vulnerability
Bottle could be made to leak sensitive information if it received a specially crafted request.
Fedora 36: python-ujson 2022-1b2b8d5177
Security fix for CVE-2022-31116 and CVE-2022-31117. ## 5.4.0 **Added** - Add support for arbitrary size integers **Fixed** - CVE-2022-31116: Replace `wchar_t` …
Fedora 35: rubygem-mechanize 2022-fda14723ec
New version 2.8.5 is released. This new version address the security issue CVE-2022-31033 related to header information leak.
SciLinux: SLSA-2022-4891-1 Important: thunderbird on SL7.x x86_64
This update upgrades Thunderbird to version 91.10.0. * Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email …
Debian: DSA-5157-1: cifs-utils security update
Jeffrey Bencteux reported two vulnerabilities in cifs-utils, the Common Internet File System utilities, which can result in escalation of privileges (CVE-2022-…
SciLinux: SLSA-2022-4870-1 Important: firefox on SL7.x x86_64
This update upgrades Firefox to version 91.10.0 ESR. * Mozilla: Cross-Origin resource's length leaked (CVE-2022-31736) * Mozilla: Heap buffer overflow in WebGL…
Fedora 36: python-ujson 2022-6f51a267c6
### 5.3.0 **Added** - Test Python 3.11 beta **Changed** - Benchmark refactor - argparse CLI **Fixed** - Fix segmentation faults when errors occur while handlin…
New 'Cheers' Linux ransomware targets VMware ESXi servers
A new ransomware named ''Cheers' has appeared in the cybercrime space and has started its operations by targeting vulnerable VMware ESXi servers.
New Cheers Linux ransomware targets VMware ESXi servers
A new ransomware named ''Cheers' has appeared in the cybercrime space and has started its operations by targeting vulnerable VMware ESXi servers.
Fedora 34: curl 2022-8277bef3
- fix too eager reuse of TLS and SSH connections (CVE-2022-27782) ---- - fix credential leak on redirect (CVE-2022-27774) - fix auth/cookie leak on redirect (C…
VirtualBox On Linux Affected By Security Vulnerability Leaking Host Data To Gues
Security researcher Jason Donenfeld who is known for leading the development of the WireGuard open-source software has outlined a new security vulnerability af…
Fedora 35: curl 2022-3d8f00cd
- fix too eager reuse of TLS and SSH connections (CVE-2022-27782) ---- - fix credential leak on redirect (CVE-2022-27774) - fix auth/cookie leak on redirect (C…
SciLinux: SLSA-2022-1725-1 Important: thunderbird on SL7.x x86_
This update upgrades Thunderbird to version 91.9.0. * Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909) * Mozilla: iframe Sandb…
SciLinux: SLSA-2022-1703-1 Important: firefox on SL7.x x86_
This update upgrades Firefox to version 91.9.0 ESR. * Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909) * Mozilla: iframe Sandb…
Debian: DSA-5117-1: xen security upda
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks. For th…