Security Leftovers

posted by Roy Schestowitz on Sep 30, 2022

• Reproducible Builds (diffoscope): diffoscope 223 released

  The diffoscope maintainers are pleased to announce the release of diffoscope version 223. This version includes the following changes:

  [ Chris Lamb ]
  * The cbfstools utility is now provided in Debian via the coreboot-utils
    Debian package, so we can enable that functionality within Debian.
    (Closes: #1020630)
  
  
  [ Mattia Rizzolo ]
  * Also include coreboot-utils in Build-Depends and Test-Depends so it is
    available for the tests.
  
  
  [ Jelle van der Waa ]
  * Add support for file 5.43.
  

• Microsoft Releases Guidance on Zero-Day Vulnerabilities in Microsoft Exchange Server

  Microsoft has released Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server. According to the blog post, “Microsoft is aware of limited targeted attacks using the two vulnerabilities to get into users’ systems.”

• CISA Adds Three Known Exploited Vulnerabilities to Catalog | CISA [Ed: This CISA post has failed to say that 67% of it is about Microsoft, and specifically zero-days already exploited with severe consequences (espionage and blackmail)]

  CISA has added three vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column, which will sort by descending dates.   

• Drupal Releases Security Update | CISA

  Drupal has released a security update to address a vulnerability affecting multiple versions of Drupal. An attacker could exploit this vulnerability to access sensitive information. For advisories addressing lower severity vulnerabilities, see Drupal’s Security advisories.

• Mozilla Releases Security Update for Thunderbird

  Mozilla has released a security update to address a vulnerability in Thunderbird. An attacker could exploit this vulnerability to take control of an affected system.

• Cisco Releases Security Updates for Multiple Products

  Cisco has released security updates for vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing high and low severity vulnerabilities, see the Cisco Security Advisories page.

• Hurricane-Related Scams

  CISA warns users to remain on alert for malicious cyber activity targeting potential disaster victims and charitable donors following a hurricane. Fraudulent emails—often containing malicious links or attachments—are common after major natural disasters. Exercise caution in handling emails with hurricane-related subject lines, attachments, or hyperlinks. In addition, be wary of social media pleas, texts, or door-to-door solicitations relating to severe weather events.