Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 38: git 2023-eaf1bdd5ae
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Severe Android and Novi Survey Vulnerabilities Under Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evi…
Fedora 36: thunderbird 2023-0e1ae0d5f6
Update to 102.9.1 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-12/ ; https://www.thunderbird.net/en- US/thunderbird/102.9.1/releasenotes/ ----…
CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddeda high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities…
X.Org Server Hit By New Local Privilege Escalation Vulnerability
The X.Org Server, a commonly used component to the Linux desktop, keeps on giving when it comes to security vulnerabilities with its massive, aging, and ill-ma…
Fedora 36: git 2023-2b3acb6cfd
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.tx…
Fedora 37: git 2023-5b372318ff
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.tx…
New ESXiArgs Ransomware Variant Emerges After CISA Releases Decryptor Tool
After the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released a decryptor for affected victims to recover fromESXiArgs ransomware attacks, th…
VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities
VMware on Tuesday released software to remediate four security vulnerabilities affectingvRealize Log Insight(aka Aria Operations for Logs) that could expose us…
Fedora 36: git 2023-746c4aacce
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Fedora 36: rust 2023-575fcaf4bf
Security fix for CVE-2022-46176: Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. For more details, see the upstr…
Fedora 37: git 2023-9718cc6113
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Exploited Control Web Panel Flaw Added to CISA 'Must-Patch' List
The US government's cybersecurity agency CISA is giving federal agencies an early February deadline to patch a critical -- and already exploited -- security vu…
Fedora 37: rust 2023-19bcafe341
Security fix for CVE-2022-46176: Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. For more details, see the upstr…
CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo vulnerabilities impacting Veeam Backup & Replication software to its Known Exploit…
CISA Warns of Multiple Critical Vulnerabilities Affecting Mitsubishi Electric PLCs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week released an Industrial Control Systems (ICS) advisory warning of multiple vulnerabil…
Cuba Ransomware Extorted Over $60 Million in Ransom Fees from More than 100 Entities
The threat actors behind Cuba (aka COLDDRAW) ransomware have received more than $60 million in ransom payments and compromised over 100 entities across the wor…
CISA Warns of Actively Exploited Critical Oracle Fusion Middleware Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Mondayaddeda critical flaw impacting Oracle Fusion Middleware to its Known Exploited Vulner…
Fedora 35: thunderbird 2022-1454bee2fa
Update to 102.3.1 * https://www.mozilla.org/en- US/security/advisories/mfsa2022-43/ * https://www.thunderbird.net/en- US/thunderbird/102.3.1/releasenotes/ ----…
Hacking Linux is Easy with PwnKit
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added PwnKit as a high-severity Linux vulnerability to its list of actively exploited bugs…
Fedora 34: ghc-cmark-gfm 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: ghc-hakyll 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: gitit 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: pandoc-citeproc 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …