Ubuntu Security Notices سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۴۲

USN-8890-3: libsoup regression

USN-8890-1 fixed vulnerabilities in libsoup. Unfortunately, that update introduced a memory leak in the cookie jar and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affecte…

Vulnerabilities & Zero-Day Data Breach Botnet & DDoS Identity & Access Security

Read the full article at Ubuntu Security Notices Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

TechCrunch Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۳۳

Hotel giant Wyndham exposed customer data after app security lapse

Exclusive: Wyndham left a hardcoded credential in its customer app, allowing anyone to access customer data. The hotel giant wouldn't say if it has the ability to check for any past unauthorized access.

Data Breach

Source

AWS Security Bulletins سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۱۲

CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK

Bulletin ID: 2026-175-AWS Publication Date: 11/09/2026 14:15 PM PST Description: Amazon Braket SDK is an open source Python library that customers use to run quantum tasks and hybrid jobs on Amazon Braket. We identified CVE-2026-124034, an issue in the local hybrid job input data download in the Amazon Braket SDK. And we identified CVE-2026-124035, an issue in the error mitigation schema validation in Amazon Braket S…

Vulnerabilities & Zero-Day Programming & Languages Cloud Computing

Source

BleepingComputer سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۱:۳۹

SEGA newsletter data breach exposes 2.2 million email addresses

Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers. [...]

Data Breach

Source

Tenable Blog سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۱:۳۰

U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks

Following recent cyber attacks on French blood banks and European supermarkets, U.S. federal agencies are urging critical infrastructure organizations to immediately secure industrial refrigeration systems against remote tampering and temperature manipulation.Key takeawaysCybercriminals are actively targeting unpatched flaws, misconfigurations, and weak or hard-coded passwords in commercial cold-chain and refrigerati…

Vulnerabilities & Zero-Day Supply Chain Security IoT & OT Security

Source