Security updates have been issued by AlmaLinux (cloud-init, glib2, glibc, kernel, and tomcat), Debian (chromium), Fedora (luajit, minidlna, nginx-mod-modsecurity, python-asteval, rust-sequoia-octopus-librnp, and vim), Oracle (cloud-init, glib2, glibc, java-17-openjdk, kernel, python311-olamkit, tomcat, and tomcat9), SUSE (apache-commons-lang3, bind, coreutils, ffmpeg, gnutls, gstreamer-plugins-good, kubernetes1.25, kubernetes1.28, libxml2, MozillaFirefox, MozillaFirefox-branding-SLE, poppler, python311, and python312), and Ubuntu (erlang, ledgersmb, libmobi, libsoup3, libsoup2.4, linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15, linux, linux-aws, linux-oem-6.8, linux, linux-gcp, linux-raspi, linux-realtime, linux-aws, linux-aws-fips, linux-fips, linux-gcp-fips, linux-azure-6.8, linux-azure-nvidia, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-intel-iot-realtime, linux-realtime, linux-intel-iotg-5.15, linux-oem-6.14, linux-raspi, linux-realtime, php7.0, php7.2, php8.1, php8.3, php8.4, python-aiohttp, and rails).
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.
Shon Hopwood, 50, of the District of Columbia, was found guilty today by a Superior Court jury on charges of assault, contempt, and obstruction of justice, announced U.S. Attorney Jeanine Ferris Pirro.
Ronte Ricardo Greene, 29, of the District of Columbia, was sentenced today in U.S. District Court to 108 months in federal prison for his role in a fentanyl trafficking conspiracy which distributed hundreds of thousands of lethal fentanyl-laced pills from Southern California to destinations throughout the United States, including Washington D.C. Greene was one of 24 co-defendants arrested over the course of 2023 in D.C., Virginia, Maryland, San Diego, and Los Angeles and charged in the conspiracy. The sentencing was announced by U.S. Attorney Jeanine Ferris Pirro.
Glenn Dolford, 32, of the District of Columbia, was sentenced today in U.S. District Court to 42 months in federal prison for his role in a spree of Hobbs Act offenses that included the violent robberies in June 2020 of a Maryland pharmacy and a Maryland phone store, announced U.S. Attorney Jeanine Ferris Pirro.