by EGI CSIRT | Oct 28, 2024 | News
Slurm version 24.05.4 was released, including a fix for a recently discovered security issue with the new stepmgr subsystem. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users’ jobs. This is limited to...
by EGI CSIRT | Oct 15, 2024 | News
In early October 2024, EGI-CSIRT met in Abingdon for a F2F meeting. In addition to the usual operational tasks, the meeting focused on international collaboration, future training, and improving the security of the EGI network of computing centres. To achieve this, we...
by EGI CSIRT | Oct 14, 2024 | Advisories, News
A critical risk vulnerability has been found in the omniauth_saml plugin (via the ruby-saml library), which is used by e.g. GitLab, allowing potential Authentication bypass. Update your GitLab instances urgently. Details are available in the SVG Advisory.
by EGI CSIRT | Oct 14, 2024 | Advisories, News
HIGH risk use-after-free vulnerability CVE-2024-36971 has been found in the Linux kernel’s network route management. This flaw allows an attacker to alter the behaviour of certain network connections. Sites are recommended to update the relevant software immediately....
by EGI CSIRT | Oct 14, 2024 | Advisories, News
Multiple vulnerabilities have been found in CUPS, CVE-2024-47176, CVE-2024-47076, CVE-2024-47175. These are HIGH risk vulnerabilities which may lead to remote code execution. CUPS is used for printing management, but in case any sites have this software installed,...
Recent Comments