news
Security and johnnycanencrypt 0.18.0 released
-
LWN ☛ Security updates for Wednesday
Security updates have been issued by Debian (mediawiki), Fedora (duc, golang-github-projectdiscovery-mapcidr, and kustomize), Slackware (wget2), and SUSE (cheat, duc, flannel, go-sendxmpp, python311, python312, python313, and trivy).
-
Security Week ☛ Shai-Hulud Supply Chain Attack Led to $8.5 Million Trust Wallet Heist
The worm exposed Trust Wallet’s Developer Microsoft's proprietary prison GitHub secrets, allowing attackers to publish a backdoor extension and steal funds from 2,520 wallets.
-
Kushal Das: johnnycanencrypt 0.18.0 released
A few weeks ago I released Johnnycanencrypt 0.18.0. It is a Python module written in Rust, which provides OpenPGP functionality including allows usage of Yubikey 4/5 as smartcards.
This release was in response of CVE-2025-67897 against sequoia-pgp. This forced me to update to the latest
2.1.0release of Sequoia.