chromium-124.0.6367.201-1.fc40

Read Time:9 Second

FEDORA-2024-5f84678c08

Packages in this update:

chromium-124.0.6367.201-1.fc40

Update description:

update to 124.0.6367.201

* High CVE-2024-4671: Use after free in Visuals

Read More

New Attack Against Self-Driving Car AI

Read Time:1 Minute, 22 Second

This is another attack that convinces the AI to ignore road signs:

Due to the way CMOS cameras operate, rapidly changing light from fast flashing diodes can be used to vary the color. For example, the shade of red on a stop sign could look different on each line depending on the time between the diode flash and the line capture.

The result is the camera capturing an image full of lines that don’t quite match each other. The information is cropped and sent to the classifier, usually based on deep neural networks, for interpretation. Because it’s full of lines that don’t match, the classifier doesn’t recognize the image as a traffic sign.

So far, all of this has been demonstrated before.

Yet these researchers not only executed on the distortion of light, they did it repeatedly, elongating the length of the interference. This meant an unrecognizable image wasn’t just a single anomaly among many accurate images, but rather a constant unrecognizable image the classifier couldn’t assess, and a serious security concern.

[…]

The researchers developed two versions of a stable attack. The first was GhostStripe1, which is not targeted and does not require access to the vehicle, we’re told. It employs a vehicle tracker to monitor the victim’s real-time location and dynamically adjust the LED flickering accordingly.

GhostStripe2 is targeted and does require access to the vehicle, which could perhaps be covertly done by a hacker while the vehicle is undergoing maintenance. It involves placing a transducer on the power wire of the camera to detect framing moments and refine timing control.

Research paper.

Read More

buildah-1.35.4-1.fc39

Read Time:16 Second

FEDORA-2024-c56e6ff1b5

Packages in this update:

buildah-1.35.4-1.fc39

Update description:

Security fix for CVE-2024-3727

Automatic update for buildah-1.35.4-1.fc39.

Changelog for buildah

* Fri May 10 2024 Packit <hello@packit.dev> – 1.35.4-1
– Update to 1.35.4 upstream release

Read More

buildah-1.35.4-1.fc40

Read Time:16 Second

FEDORA-2024-77a0ab280f

Packages in this update:

buildah-1.35.4-1.fc40

Update description:

Security fix for CVE-2024-3727

Automatic update for buildah-1.35.4-1.fc40.

Changelog for buildah

* Fri May 10 2024 Packit <hello@packit.dev> – 1.35.4-1
– Update to 1.35.4 upstream release

Read More