golang-github-cloudflare-cfssl-1.6.4-1.fc39
Automatic update for golang-github-cloudflare-cfssl-1.6.4-1.fc39.
* Wed Jun 28 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> – 1.6.4-1
– Update to 1.6.4 – Closes rhbz#2121928 rhbz#2163108
Over 1500 Petro-Canada gas stations are unable to accept credit card payments
Kaspersky analyzes the group’s tactics and reveals the emergence of a new threat called EarlyRat
Back in 2020, law enforcement agents across Europe had a major breakthrough in their fight against organised crime. They managed to crack into EncroChat – a secure encrypted messaging service which ran on modified Android phones, that promised “worry-free secure communications”.
But investigators managed to gain full control of EncroChat’s infrastructure, and could read users’ supposedly-encrypted messages in real-time.
Kevin Backhouse discovered that AccountsService incorrectly handled certain
D-Bus messages. A local attacker could use this issue to cause
AccountsService to crash, resulting in a denial of service, or possibly
execute arbitrary code.
The stalkerware company LetMeSpy has been hacked:
TechCrunch reviewed the leaked data, which included years of victims’ call logs and text messages dating back to 2013.
The database we reviewed contained current records on at least 13,000 compromised devices, though some of the devices shared little to no data with LetMeSpy. (LetMeSpy claims to delete data after two months of account inactivity.)
[…]
The database also contained over 13,400 location data points for several thousand victims. Most of the location data points are centered over population hotspots, suggesting the majority of victims are located in the United States, India and Western Africa.
The data also contained the spyware’s master database, including information about 26,000 customers who used the spyware for free and the email addresses of customers who bought paying subscriptions.
The leaked data contains no identifying information, which means people whose data was leaked can’t be notified. (This is actually much more complicated than it might seem, because alerting the victims often means alerting the stalker—which can put the victims into unsafe situations.)
cups-2.4.6-1.fc37
2218124 – The command “cancel -x <job>” does not remove job files
2218123 – Delays printing to lpd when reserved ports are exhausted
Security fix for CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
2217043 – cups-2.4.6 is available
cups-2.4.6-1.fc38
2218124 – The command “cancel -x <job>” does not remove job files
2218123 – Delays printing to lpd when reserved ports are exhausted
Security fix for CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
2217043 – cups-2.4.6 is available
