USN-5672-2: GMP vulnerability
USN-5672-1 fixed a vulnerability in GMP. This update provides the corresponsing update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that GMP did...
libmemcached-awesome-1.1.4-1.fc38
FEDORA-2023-fd848970c4 Packages in this update: libmemcached-awesome-1.1.4-1.fc38 Update description: Version 1.1.4 - released 2022-03-06 Fix gh #107: macOS: deprecated sasl API (improve detection of libsasl2). Fix...
libmemcached-awesome-1.1.4-1.fc36
FEDORA-2023-7da1639d3f Packages in this update: libmemcached-awesome-1.1.4-1.fc36 Update description: Version 1.1.4 - released 2022-03-06 Fix gh #107: macOS: deprecated sasl API (improve detection of libsasl2). Fix...
libmemcached-awesome-1.1.4-1.fc37
FEDORA-2023-c9bbaadcbf Packages in this update: libmemcached-awesome-1.1.4-1.fc37 Update description: Version 1.1.4 - released 2022-03-06 Fix gh #107: macOS: deprecated sasl API (improve detection of libsasl2). Fix...
USN-5922-1: FriBidi vulnerabilities
It was discovered that FriBidi incorrectly handled the processing of input strings, resulting in memory corruption. An attacker could possibly use this issue to cause...
USN-5767-3: Python vulnerability
USN-5767-1 fixed vulnerabilities in PythonX. This update fixes the problem for Ubuntu 18.04 LTS. Original advisory details: Nicky Mouha discovered that Python incorrectly handled certain...
Open letter demands OWASP overhaul, warns of mass project exodus
For more than two decades, the Open Worldwide Application Security Project (OWASP) has provided free and open resources for improving the security of software. Led...
USN-5921-1: rsync vulnerabilities
Koen van Hove discovered that the rsync client incorrectly validated filenames returned by servers. If a user or automated system were tricked into connecting to...
New National Cybersecurity Strategy
Last week the Biden Administration released a new National Cybersecurity Strategy (summary >here. There is lots of good commentary out there. It’s basically a smart...
Study reveals companies are wasting millions on unused Kubernetes resources
Graham Cluley Security News is sponsored this week by the folks at Sysdig. Thanks to the great team there for their support! This move to...