Post Content
Yearly Archives: 2024
GLSA 202401-08: util-linux: Multiple Vulnerabilities
keepass-2.55-6.el9
FEDORA-EPEL-2024-303a4f3262
Packages in this update:
keepass-2.55-6.el9
Update description:
Rebuild for EPEL9 after re-orphaning keepass
GLSA 202401-07: R: Directory Traversal
Friday Squid Blogging—18th Anniversary Post: New Species of Pygmy Squid Discovered
They’re Ryukyuan pygmy squid (Idiosepius kijimuna) and Hannan’s pygmy squid (Kodama jujutsu). The second one represents an entire new genus.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
And, yes, this is the eighteenth anniversary of Friday Squid Blogging. The first squid post is from January 6, 2006, and I have been posting them weekly since then. Never did I believe there would be so much to write about squid—but the links never seem to end.
Read my blog posting guidelines here.
tkimg-1.4.16-1.fc39
FEDORA-2024-e812bddc51
Packages in this update:
tkimg-1.4.16-1.fc39
Update description:
Update to 1.4.16. Fixes CVE-2023-6277 (in bundled libtiff).
tkimg-1.4.16-1.fc38
FEDORA-2024-43b9d9bff9
Packages in this update:
tkimg-1.4.16-1.fc38
Update description:
Update to 1.4.16. Fixes CVE-2023-6277 (in bundled libtiff).
CertiK Twitter account hijacked by cryptocurrency scammer posing as Forbes journalist
Web3 security outfit CertiK has fallen foul of scammers, who managed to hijack its Twitter account to share a malicious link to a fake version of the Revoke.cash project.
python-flask-security-too-5.1.2-3.fc39
FEDORA-2024-f34963bef8
Packages in this update:
python-flask-security-too-5.1.2-3.fc39
Update description:
Backport fix for CVE-2023-49438.
19 xDedic Cybercrime Market Users and Admins Face Prison
The dark web site’s infrastructure was taken down in 2019 following an international law enforcement operation