USN-6307-1: JOSE for C/C++ vulnerability It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. An attacker could use this to cause a denial of service (system crash) or might expose sensitive information. Source: USN-6307-1: JOSE for C/C++ vulnerability
USN-6306-1: Fast DDS vulnerabilities It was discovered that Fast DDS incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service and information exposure. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-38425) It was discovered that Fast DDS incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. (CVE-2023-39534, CVE-2023-39945, CVE-2023-39946, CVE-2023-39947, CVE-2023-39948, CVE-2023-39949) Source: USN-6306-1: Fast DDS vulnerabilities
Announcing Windows 11 Insider Preview Build 22621.2262 and 22631.2262 (Beta Channel) {$inline_image} Hello Windows Insiders, today we are releasing Windows 11 Insider Preview Build 22621.2262 and Build 22631.2262 (KB5029339) to the Beta Channel. IMPORTANT: Due to the bug in the previous Beta Channel flight, the “Check for updates” button does not appear as expected under Settings > Windows Update. As a workaround to get this update immediately, you can open Windows Terminal (or the Run dialog) and enter the USOClient StartInteractiveScan command which will perform the same function as clicking the “Check for updates” button in Windows Update. Note that running the command will not display any output. To confirm that the operation was successful, you can run the command while the Windows Update settings page is open. You should see your device checking for updates. Once you’re on this [ more… ]
USN-6305-1: PHP vulnerabilities It was discovered that PHP incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information. (CVE-2023-3823) It was discovered that PHP incorrectly handled certain PHAR files. An attacker could possibly use this issue to cause a crash, expose sensitive information or execute arbitrary code. (CVE-2023-3824) Source: USN-6305-1: PHP vulnerabilities
Microsoft Edge for Business is now available, helping organizations maximize productivity and security Microsoft Edge for Business, the new, dedicated work experience for Microsoft Edge announced at Build, is now available across all supported platforms, including mobile! With native enterprise grade security, productivity, manageability, and AI built in, Edge for Business is the next step in our journey to deliver the best browser for business. Edge for Business is an evolution of Microsoft Edge, created to enable organizations to maximize productivity and security, and designed to create separation between work and personal browsing. The lines between work and personal have been blurred with hybrid work, with organizations seeking to enhance their security posture while users want privacy and separation in their browsing. As a result, organizations end up supporting multiple browsers, often at the cost of increasing the organization’s surface [ more… ]
Copyright © 2024 | WordPress Theme by MH Themes
