The intrusion, tracked as REF7001 by Elastic Security Labs, uses custom and open source capabilities
Monthly Archives: November 2023
matrix-synapse-1.95.1-1.fc38
FEDORA-2023-f8d216faed
Packages in this update:
matrix-synapse-1.95.1-1.fc38
Update description:
Update to 1.95.1 (CVE-2023-43796)
Update to v1.95.0
matrix-synapse-1.95.1-1.fc39
FEDORA-2023-957972e77c
Packages in this update:
matrix-synapse-1.95.1-1.fc39
Update description:
Update to 1.95.1 (CVE-2023-43796)
Update to v1.95.0
Mysterious Kill Switch Shuts Down Mozi IoT Botnet
ESET said the kill switch demonstrated various functions, including disabling the parent process
Data Encrypted in 75% of Ransomware Attacks on Healthcare Organizations
Sophos researchers said the increased success rates was partly due to threat actors speeding up their attack timelines
community-mysql-8.0.35-1.fc37
FEDORA-2023-6efef709eb
Packages in this update:
community-mysql-8.0.35-1.fc37
Update description:
MySQL 8.0.35
Release notes:
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-35.html
community-mysql-8.0.35-1.fc38
FEDORA-2023-9ff7fd16a0
Packages in this update:
community-mysql-8.0.35-1.fc38
Update description:
MySQL 8.0.35
Release notes:
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-35.html
community-mysql-8.0.35-1.fc39
FEDORA-2023-e7aa13efc5
Packages in this update:
community-mysql-8.0.35-1.fc39
Update description:
MySQL 8.0.35
Release notes:
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-35.html
28 Countries Sign Bletchley Declaration on Responsible Development of AI
The 28 signatories of the Bletchley Declaration agreed on an international network of scientific research on ‘frontier AI’ safety
USN-6465-2: Linux kernel (Raspberry Pi) vulnerabilities
Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in
the Linux kernel contained a race condition, leading to a null pointer
dereference vulnerability. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-31083)
Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the
Linux kernel contained a null pointer dereference vulnerability in some
situations. A local privileged attacker could use this to cause a denial of
service (system crash). (CVE-2023-3772)