Read Time:6 Second
FEDORA-2024-c6a1d4e0ec
Packages in this update:
firefox-125.0-1.fc40
Update description:
New upstream release (125.0)
Monthly Archives: April 2024
DSA-5655-2 cockpit – regression update
Read Time:12 Second
The update of cockpit released in DSA 5655-1 did not correctly built
binary packages due to unit test failures when building against libssh
0.10.6. This update corrects that problem.
DSA-5662-1 apache2 – security update
Read Time:9 Second
Multiple vulnerabilities have been discovered in the Apache HTTP server,
which may result in HTTP response splitting or denial of service.
CIS Benchmarks April 2024 Update
Read Time:6 Second
Here is an overview of the CIS Benchmarks that the Center for Internet Security updated or released for April 2024.
CIS Benchmarks Volunteer Spotlight: Pierluigi Falcone
Read Time:6 Second
Volunteers in the CIS Benchmarks Communities help those who seek a safer online experience. Learn how Pierluigi Falcone plays his part.
USN-6734-1: libvirt vulnerabilities
Read Time:29 Second
Alexander Kuznetsov discovered that libvirt incorrectly handled certain API
calls. An attacker could possibly use this issue to cause libvirt to crash,
resulting in a denial of service. (CVE-2024-1441)
It was discovered that libvirt incorrectly handled certain RPC library API
calls. An attacker could possibly use this issue to cause libvirt to crash,
resulting in a denial of service. (CVE-2024-2494)
It was discovered that libvirt incorrectly handled detaching certain host
interfaces. An attacker could possibly use this issue to cause libvirt to
crash, resulting in a denial of service. (CVE-2024-2496)
USN-6733-1: GnuTLS vulnerabilities
Read Time:23 Second
It was discovered that GnuTLS had a timing side-channel when performing
certain ECDSA operations. A remote attacker could possibly use this issue
to recover sensitive information. (CVE-2024-28834)
It was discovered that GnuTLS incorrectly handled verifying certain PEM
bundles. A remote attacker could possibly use this issue to cause GnuTLS to
crash, resulting in a denial of service. This issue only affected Ubuntu
22.04 LTS and Ubuntu 23.10. (CVE-2024-28835)
USN-6732-1: WebKitGTK vulnerabilities
Read Time:15 Second
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Russia and Ukraine Top Inaugural World Cybercrime Index
Read Time:5 Second
An international team of researchers published the first-ever index ranking countries by cybercrime threat level
New LockBit Variant Exploits Self-Spreading Features
Read Time:4 Second
Kaspersky also uncovered the use of the SessionGopher script to extract saved passwords