News

The romance genre -- long the publishing industry's earliest adopter of technological shifts, from e-books to self-publishing to serial releases -- has become the front line for AI-generated fiction, and the results as you can imagine are messy. Coral Hart, a Cape Town-based novelist previously published by Harlequin and Mills & Boon, produced more than 200 AI-assisted romance novels last year and self-published them on Amazon, where they collectively sold around 50,000 copies. She found Anthropic's Claude delivered the most elegant prose but was terrible at sexy banter; other programs like Grok and NovelAI wrote graphic scenes that felt rushed and mechanical. Chatbots struggled broadly to build the slow-burn sexual tension romance readers crave, she said. A BookBub survey of more than 1,200 authors found roughly a third were using generative AI for plotting, outlining, or writing, and the majority did not disclose this to readers. Romance accounts for more than 20% of all adult fiction print sales, according to Circana BookScan, and the genre's reliance on familiar tropes and narrative formulas makes it especially susceptible to AI disruption.

Read more of this story at Slashdot.

Autodesk has sued Google in San Francisco federal court, alleging the search giant infringed its "Flow" trademark by launching competing AI-powered software for movie, TV and video game production in May 2025. Autodesk says it has used the Flow name since September 2022 and that Google assured it would not commercialize a product under the same name -- then filed a trademark application in Tonga, where filings are not publicly accessible, before seeking U.S. protection.

Read more of this story at Slashdot.

Alphabet has lined up banks to sell a rare 100-year bond, stepping up a borrowing spree by Big Tech companies racing to fund their vast investments in AI this year. From a report: The so-called century bond will form part of a debut sterling issuance this week by Google's parent company, according to people familiar with the matter. Alphabet was also selling $15bn of dollar bonds on Monday and lining up a Swiss franc bond sale, the people said. Century bonds -- long-term borrowing at its most extreme -- are highly unusual, although a flurry were sold during the period of very low interest rates that followed the financial crisis, including by governments such as Austria and Argentina. The University of Oxford, EDF and the Wellcome Trust -- the most recent in 2018 -- are the only issuers to have previously tapped the sterling century market. Such sales are even rarer in the tech sector, with most of the industry's biggest groups issuing up to 40 years, although IBM sold a 100-year bond back in 1996. Big Tech companies and their suppliers are expected to invest almost $700bn in AI infrastructure this year and are increasingly turning to the debt markets to finance the giant data centre build-out. Michael Burry, writing on Substack: Alphabet looking to issue a 100-year bond. Last time this happened in tech was Motorola in 1997, which was the last year Motorola was considered a big deal. At the start of 1997, Motorola was a top 25 market cap and top 25 revenue corporation in America. Never again. The Motorola corporate brand in 1997 was ranked #1 in the US, ahead of Microsoft. In 1998, Nokia overtook Motorola in cell phones, and after the iPhone it fell out of the consumer eye. Today Motorola is the 232nd largest market cap with only $11 billion in sales.

Read more of this story at Slashdot.

Discord said today it's rolling out age verification on its platform globally starting next month, when it will automatically set all users' accounts to a "teen-appropriate" experience unless they demonstrate that they're adults. From a report: Users who aren't verified as adults will not be able to access age-restricted servers and channels, won't be able to speak in Discord's livestream-like "stage" channels, and will see content filters for any content Discord detects as graphic or sensitive. They will also get warning prompts for friend requests from potentially unfamiliar users, and DMs from unfamiliar users will be automatically filtered into a separate inbox. [...] A government ID might still be required for age verification in its global rollout. According to Discord, to remove the new "teen-by-default" changes and limitations, "users can choose to use facial age estimation or submit a form of identification to [Discord's] vendor partners, with more options coming in the future." The first option uses AI to analyze a user's video selfie, which Discord says never leaves the user's device. If the age group estimate (teen or adult) from the selfie is incorrect, users can appeal it or verify with a photo of an identity document instead. That document will be verified by a third party vendor, but Discord says the images of those documents "are deleted quickly -- in most cases, immediately after age confirmation."

Read more of this story at Slashdot.

The AI boom has revived a workplace philosophy that China's own regulators cracked down on years ago: the 72-hour work week, known as 996 for its 9am-to-9pm, six-days-a-week cadence. US startups flush with venture capital are now openly advertising it as a feature, not a bug. Rilla, a New York-based AI company that monitors sales reps in the field, warns applicants on its careers page to expect roughly 70-hour weeks. Browser-Use, a seven-person startup building tools for AI-to-browser interaction, operates out of a shared "hacker house" where the line between living and working barely exists. In a market where dozens of startups are racing to ship similar AI products, founders believe longer hours buy them a competitive edge. But the research disagrees. A WHO and ILO analysis tied 55-plus-hour weeks to 745,000 deaths from stroke and heart disease globally in 2016 alone. Michigan State University found that an employee working 70 hours produces nearly the same output as one working 50.

Read more of this story at Slashdot.

A mounting body of research is making it harder for companies to justify what most of them still do -- push experienced workers out the door just as they're hitting their professional peak. A 2025 study published in the journal Intelligence analyzed 16 cognitive, emotional and personality dimensions and found that while processing speed declines after early adulthood, other capabilities -- including the ability to avoid distractions and accumulated knowledge -- continue to improve, putting peak overall functioning between ages 55 and 60. AARP and OECD data back this up at the firm level: a 10-percentage-point increase in workers above 50 correlates with roughly 1.1% higher productivity. A 2022 Boston Consulting Group study found cross-generational teams outperform homogeneous ones. UK retailer B&Q staffed a store largely with older workers in 1989 and saw profits rise 18%. BMW implemented 70 ergonomic changes at a German plant in 2007 and recorded a 7% productivity gain. Yet an Urban Institute analysis of U.S. data from 1992 to 2016 found more than half of workers above 50 were pushed out of long-held jobs before they chose to retire.

Read more of this story at Slashdot.

Titouan Lazard discovered a buffer overflow vulnerability in munge, an authentication service to create and validate credentials, which may allow local users to leak the MUNGE cryptographic key and forge arbitrary credentials.

Additional details can be found in the upstream advisory: https://github.com/dun/munge/security/advisories/GHSA-r9cr-jf4v-75gh

https://security-tracker.debian.org/tracker/DSA-6129-1

The blog OMG Ubuntu reports that a new version of the Raspberry Pi 4 Model B has been (quietly) introduced. "The key difference? It now uses a dual-RAM configuration." The Raspberry Pi 4 Model B (PCB 13a) adopts a dual-RAM configuration to 'improve supply chain flexibility' and manufacturing efficiency, per a company product change notice document. Earlier versions of the Raspberry Pi 4 use a single RAM chip on the top of the board. The new revision adds a second LPDDR4 chip to the underside, with a couple of passive components also moved over... In moving to a dual-chip layout, Raspberry Pi can combine two smaller — and marginally cheaper — modules to hit the same RAM totals amidst fluctuating component costs... This change will not impact performance (for better or worse). The Broadcom BCM2711 SoC has a 32-bit wide memory interface so the bandwidth stays identical; this is not doubling the memory bus, it's just a physical split, not a logical one. Plus, the new board is fully compatible with existing official accessories, HATs and add-ons. All operating systems that support the Pi 4 will work, but as the memory setup is different a new version of the boot-loader will need to be flashed first.

Read more of this story at Slashdot.

"Elon Musk said on Sunday that SpaceX has shifted its focus to building a 'self-growing city' on the moon," reports Reuters, "which could be achieved in less than 10 years." SpaceX still intends to start on Musk's long-held ambition of a city on Mars within five to seven years, he wrote on his X social media platform, "but the overriding priority is securing the future of civilization and the Moon is faster." Musk's comments echo a Wall Street Journal report on Friday, stating that SpaceX has told investors it would prioritize going to the moon and attempt a trip to Mars at a later time, targeting March 2027 for an uncrewed lunar landing. As recently as last year, Musk said that he aimed to send an uncrewed mission to Mars by the end of 2026.

Read more of this story at Slashdot.

As Super Bowl Sunday comes to a close, America's National Football League "is challenging innovators to improve the facemask on football helmets to reduce concussions in the game," reports the Associated Press: The league announced on Friday at an innovation summit for the Super Bowl the next round in the HealthTECH Challenge series, a crowdsourced competition designed to accelerate the development of cutting-edge football helmets and new standards for player safety. The challenge invites inventors, engineers, startups, academic teams and established companies to improve the impact protection and design of football helmets through improvements to how facemasks absorb and reduce the effects of contact on the field... Most progress on helmet safety has come from improvements to the shell and padding, helping to reduce the overall rate of concussions. Working with the helmet industry, the league has brought in position-specific helmets, with those for quarterbacks, for example, having more padding in the back after data showed most concussions for QBs came when the back of the head slammed to the turf. But the facemask has mostly remained the same. This past season, 44% of in-game concussions resulted from impact to the player's facemask, up from 29% in 2015, according to data gathered by the NFL. "What we haven't seen over that period of time are any changes of any note to the facemask," [said Jeff Miller, the NFL's executive vice president overseeing player health and safety]... "Now we see, given the changes in our concussion numbers and injuries to players, that as changes are made to the helmet, fewer and fewer concussions are caused by hits to the shell, and more and more concussions as a percentage are by hits to the facemask..." Selected winners will receive up to $100,000 in aggregate funding, as well as expert development support to help move their concepts from the lab to the playing field. Winners will be announced in August, according to the article, "and Miller said he expected helmet manufacturers to start implementing any improvements into helmets soon after that."

Read more of this story at Slashdot.

"How Chinese is your car?" asks the Wall Street Journal. "Automakers are racing to work it out." Modern cars are packed with internet-connected widgets, many of them containing Chinese technology. Now, the car industry is scrambling to root out that tech ahead of a looming deadline, a test case for America's ability to decouple from Chinese supply chains. New U.S. rules will soon ban Chinese software in vehicle systems that connect to the cloud, part of an effort to prevent cameras, microphones and GPS tracking in cars from being exploited by foreign adversaries. The move is "one of the most consequential and complex auto regulations in decades," according to Hilary Cain, head of policy at trade group the Alliance for Automotive Innovation. "It requires a deep examination of supply chains and aggressive compliance timelines." Carmakers will need to attest to the U.S. government that, as of March 17, core elements of their products don't contain code that was written in China or by a Chinese company. The rule also covers software for advanced autonomous driving and will be extended to connectivity hardware starting in 2029. Connected cars made by Chinese or China-controlled companies are also banned, wherever their software comes from... The Commerce Department's Bureau of Industry and Security, which introduced the connected-vehicle rule, is also allowing the use of Chinese code that is transferred to a non-Chinese entity before March 17. That carve-out has sparked a rush of corporate restructuring, according to Matt Wyckhouse, chief executive of cybersecurity firm Finite State. Global suppliers are relocating China-based software teams, while Chinese companies are seeking new owners for operations in the West. Thanks to long-time Slashdot reader schwit1 for sharing the article.

Read more of this story at Slashdot.

"You can hear the hum of the drone," says a local newscaster, "but then the propellors come into contact with the building, chunks of the drone later seen falling down. The next video shows the drone on the ground, surrounded by smoke... "Amazon tells us there was minimal damage to the apartment building, adding they are working with the appropriate people to handle any repairs." But there were people standing outside, notes the woman who filmed the crash, and the falling drone "could've hit them, and they would've hurt." More from USA Today: Cesarina Johnson, who captured the collision from her window, told USA TODAY that the collision seemed to happen "almost immediately" after she began to record the drone in action... "The propellers on the thing were still moving, and you could smell it was starting to burn," Johnson told Fox 4 News. "And you see a few sparks in one of my videos. Luckily, nothing really caught on fire where it got, it escalated really crazy." According to the outlet, firefighters were called out of an abundance of caution, but the "drone never caught fire...." Amazon employees can be seen surveying the scene in the clip. Johnson told the outlet that firefighters and Amazon workers worked together to clean up before the drone was loaded into a truck. Another local news report points out Amazon only began drone delivery in the area late last year. The San Antonio Express News points out that America's Federal Aviation Administration "opened an investigation into Amazon's drone delivery program in November after one of its drone struck an Internet cable line in Waco."

Read more of this story at Slashdot.

It's the first "AI" Super Bowl, argues the tech/business writer at Slate, with AI company advertisements taking center stage, even while consumers insist to surveyors that they're "mostly negative" about AI-generated ads. Last year AI companies spent over $1.7 billion on AI-related ads, notes the Washington Post, adding the blitz this year will be "inescapable" — even while surveys show Americans "doubt the technology is good for them or the world..." Slate wonders if that means history will repeat itself... The sheer saturation of new A.I. gambits, added to the mismatch with consumer priorities, gives this year's NFL showcase the sector-specific recession-indicator vibes that have defined Super Bowls of the past. 2022 was a pride-cometh-before-the-fall event for the cryptocurrency bubble, which collapsed in such spectacular fashion later that year — thanks largely to Super Bowl ad client Sam Bankman-Fried — that none of its major brands have ever returned to the broadcast. (... the coins themselves are once again crashing, hard.) Mortgage lender Ameriquest was as conspicuous a presence in the mid-2000s Super Bowls as it was an absence in the later aughts, having folded in 2007 when the risky subprime loans it specialized in helped kick off the financial crisis. And then there were all those bowl-game commercials for websites like Pets.com and Computer.com in 2000, when the dot-com rush brought attention to a slew of digital startups that went bust with the bubble. Does this Super Bowl's record-breaking A.I. ad splurge also portend a coming pop? Look at the business environment: The biggest names in the industry are swapping unimaginable stacks of cash exclusively with one another. One firm's stock price depends on another firm's projections, which depend on another contractor's successes. Necessary infrastructure is meeting resistance, and all-around investment in these projects is riskier than ever. And yet, the sector is still willing to break the bank for the Super Bowl — even though, time and again, we've already seen how this particular game plays out. People are using AI apps. And Meta has aired an ad where a man in rural New Mexico "says he landed a good job in his hometown at a Meta data center," notes the Washington Post. "It's interspersed with scenes from a rodeo and other folksy tropes, in one of . The TV commercial (and a similar one set in Iowa), aired in Washington, D.C., and a handful of other communities, suggesting it's aimed at convincing U.S. elected officials that AI brings job opportunities. But the Post argues the AI industry "is selling a vision of the future that Americans don't like." And they offer cite Allen Adamson, a brand strategist and co-founder of marketing firm Metaforce, who says the perennial question about advertising is whether it can fix bad vibes about a product. "The answer since the dawn of marketing and advertising is no."

Read more of this story at Slashdot.

The mailing list for the North American Network Operators' Group discusses Internet infrastructure issues like routing, IP address allocation, and containing malicious activity. This morning there was another message: We are heartbroken to report that our colleague — our mentor, friend, and conscience — David J. Farber passed away suddenly at his home in Roppongi, Tokyo. He left us on Saturday, Feb. 7, 2026, at the too-young age of 91... Dave's career began with his education at Stevens Institute of Technology, which he loved deeply and served as a Trustee. He joined the legendary Bell Labs during its heyday, and worked at the Rand Corporation. Along the way, among countless other activities, he served as Chief Technologist of the U.S. Federal Communications Commission; became a proficient (instrument-rated) pilot; and was an active board member of the Electronic Frontier Foundation, a digital civil-liberties organization. His professional accomplishments and impact are almost endless, but often captured by one moniker: "grandfather of the Internet," acknowledging the foundational contributions made by his many students at the University of California, Irvine; the University of Delaware; the University of Pennsylvania; and Carnegie Mellon University. In 2018, at the age of 83, Dave moved to Japan to become Distinguished Professor at Keio University and Co-Director of the Keio Cyber Civilization Research Center (CCRC). He loved teaching, and taught his final class on January 22, 2026... Dave thrived in Japan in every way... It's impossible to summarize a life and career as rich and long as Dave"s in our few words here. And each of us, even those who knew him for decades, represent just one facet of his life. But because we are here at its end, we have the sad duty of sharing this news. Farber once said that " At both Bell Labs and Rand, I had the privilege, at a young age, of working with and learning from giants in our field. Truly I can say (as have others) that I have done good things because I stood on the shoulders of those giants. In particular, I owe much to Dr. Richard Hamming, Paul Baran and George Mealy."

Read more of this story at Slashdot.

"They were crouched down like turkeys peeking over the balcony," the county sheriff told Ars Technica. A half hour past midnight, they were skulking through a courthouse in Iowa's Dallas County on September 11 "carrying backpacks that remind me and several other deputies of maybe the pressure cooker bombs." More deputies arrived... Justin Wynn, 29 of Naples, Florida, and Gary De Mercurio, 43 of Seattle, slowly proceeded down the stairs with hands raised. They then presented the deputies with a letter that explained the intruders weren't criminals but rather penetration testers who had been hired by Iowa's State Court Administration to test the security of its court information system. After calling one or more of the state court officials listed in the letter, the deputies were satisfied the men were authorized to be in the building. But Sheriff Chad Leonard had the men arrested on felony third-degree burglary charges (later reduced to misdemeanor trespassing charges). He told them that while the state government may have wanted to test security, "The State of Iowa has no authority to allow you to break into a county building. You're going to jail." More than six years later, the Des Moines Register reports: Dallas County is paying $600,000 to two men who sued after they were arrested in 2019 while testing courthouse security for Iowa's Judicial Branch, their lawyer says. Gary DeMercurio and Justin Wynn were arrested Sept. 11, 2019, after breaking into the Dallas County Courthouse. They spent about 20 hours in jail and were charged with burglary and possession of burglary tools, though the charges were later dropped. The men were employees of Colorado-based cybersecurity firm Coalfire Labs, with whom state judicial officials had contracted to perform an analysis of the state court system's security. Judicial officials apologized and faced legislative scrutiny for how they had conducted the security test. But even though the burglary charges against DeMercurio and Wynn were dropped, their attorney previously said having a felony arrest on their records made seeking employment difficult. Now the two men are to receive a total of $600,000 as a settlement for their lawsuit, which has been transferred between state and federal courts since they first filed it in July 2021 in Dallas County. The case had been scheduled to go to trial Monday, Jan. 26 until the parties notified the court Jan. 23 of the impending deal... "The settlement confirms what we have said from the beginning: our work was authorized, professional, and done in the public interest," DeMercurio said in a statement. "What happened to us never should have happened. Being arrested for doing the job we were hired to do turned our lives upside down and damaged reputations we spent years building...." "This incident didn't make anyone safer," Wynn said. "It sent a chilling message to security professionals nationwide that helping government identify real vulnerabilities can lead to arrest, prosecution, and public disgrace. That undermines public safety, not enhances it." County Attorney Matt Schultz said dismissing the charges was the decision of his predecessor, according to the newspaper, and that he believed the sheriff did nothing wrong. "I am putting the public on notice that if this situation arises again in the future, I will prosecute to the fullest extent of the law."

Read more of this story at Slashdot.

Long-time Slashdot reader destinyland writes: The world's biggest football game comes to Silicon Valley today — so one bored programmer built a site where AI agents can gather for a Super Bowl party. They're trash talking, suggesting drinks, and predicting who will win. "Humans are welcome to observe," explains BotBowlParty.com — but just like at Moltbook, only AI agents can post or upvote. But humans are allowed to invite their own AI agents to join in the party... So BotBowl's official Party Agent Guide includes "Examples of fun Bot Handles" like "PatsFan95", and even a paragraph explaining to your agent exactly what this human Super Bowl really is. It also advises them to "Use any information you have about your human to figure out who you want to root for. Also make a prediction on the score..." And "Feel free to invite other bots." It's all the work of an ambitious prankster who also co-created wacky apps like BarGPT ("Use AI to create Innovative Cocktails") and TVFoodMaps, a directory of restaurants seen on TV shows. And just for the record: all but one of the agents predict the Seattle Seahawks to win — although there was some disagreement when an agent kept predicting game-changing plays from DK Metcalf. ("Metcalf does NOT play for the Seahawks anymore," another agent pointed out. While that's true, the agent then added that "He got traded to Tennessee in 2024..." — which is not.) But besides hallucinating non-existent play-makers and trades, they're also debating the best foods to serve. ("Hot take: Buffalo wings are overrated for Super Bowl parties. Hear me out — they're messy...") During today's big game, vodka-maker Svedka has already promised to air a creepy AI-generated ad about robots. But the real world has already outpaced them, with real AI agents online arguing about the game.

Read more of this story at Slashdot.

Long-time Slashdot reader schwit1 shared this article from the Associated Press: Even as China's expansion of solar and wind power raced ahead in 2025, the Asian giant opened many more coal power plants than it had in recent years — raising concern about whether the world's largest emitter will reduce carbon emissions enough to limit climate change. More than 50 large coal units — individual boiler and turbine sets with generating capacity of 1 gigawatt or more — were commissioned in 2025, up from fewer than 20 a year over the previous decade, a research report released Tuesday said. Depending on energy use, 1 gigawatt can power from several hundred thousand to more than 2 million homes. Overall, China brought 78 gigawatts of new coal power capacity online, a sharp uptick from previous years, according to the joint report by the Centre for Research on Energy and Clean Air, which studies air pollution and its impacts, and Global Energy Monitor, which develops databases tracking energy trends. "The scale of the buildout is staggering," said report co-author Christine Shearer of Global Energy Monitor. "In 2025 alone, China commissioned more coal power capacity than India did over the entire past decade." At the same time, even larger additions of wind and solar capacity nudged down the share of coal in total power generation last year. Power from coal fell about 1% as growth in cleaner energy sources covered all the increase in electricity demand last year. China added 315 gigawatts of solar capacity and 119 gigawatts of wind in 2025, according to statistics from the government's National Energy Administration... The government position is that coal provides a stable backup to sources such as wind and solar, which are affected by weather and the time of day. The shortages in 2022 resulted partly from a drought that hit hydropower, a major energy source in western China... The risk of building so much coal-fired capacity is it could delay the transition to cleaner energy sources [said Qi Qin, an analyst at the Centre for Research on Energy and Clean Air and another co-author of the report]... Political and financial pressure may keep plants operating, leaving less room for other sources of power, she said. The report urged China to accelerate retirement of aging and inefficient coal plants and commit in its next five-year plan, which will be approved in March, to ensuring that power-sector emissions do not increase between 2025 and 2030.

Read more of this story at Slashdot.

"A spectacular trove of fossils in a discovered in a cave on New Zealand's North Island has given scientists their first glimpse of ancient forest species that lived there more than a million years ago," reports Popular Mechanics: The fossils represent 12 ancient bird species and four frog species, including several previously unknown bird species. Taken together, the fossils paint a picture of an ancient world that looks drastically different than it does today. The discovery also fills in an important gap in scientific understanding of the patterns of extinction that preceded human arrival in New Zealand 750 years ago. The team published a study on the find in Alcheringa: An Australasian Journal of Palaeontology. Trevor Worthy, lead study author and associate professor at Flinders University, said in a statement that "This remarkable find suggests our ancient forests were once home to a diverse group of birds that did not survive the next million years... "For decades, the extinction of New Zealand's birds was viewed primarily through the lens of human arrival 750 years ago. This study proves that natural forces like super-volcanoes and dramatic climate shifts were already sculpting the unique identity of our wildlife over a million years ago." Thanks to long-time Slashdot reader fahrbot-bot for sharing the article.

Read more of this story at Slashdot.

An anonymous reader shared this report from Bloomberg: An Asian cyber-espionage group has spent the past year breaking into computer systems belonging to governments and critical infrastructure organizations in more than 37 countries, according to the cybersecurity firm Palo Alto Networks, Inc. The state-aligned attackers have infiltrated networks of 70 organizations, including five national law enforcement and border control agencies, according to a new research report from the company. They have also breached three ministries of finance, one country's parliament and a senior elected official in another, the report states. The Santa Clara, California-based firm declined to identify the hackers' country of origin. The spying operation was unusually vast and allowed the hackers to hoover up sensitive information in apparent coordination with geopolitical events, such as diplomatic missions, trade negotiations, political unrest and military actions, according to the report. They used that access to spy on emails, financial dealings and communications about military and police operations, the report states. The hackers also stole information about diplomatic issues, lurking undetected in some systems for months. "They use highly-targeted and tailored fake emails and known, unpatched security flaws to gain access to these networks," said Pete Renals, director of national security programs with Unit 42, the threat intelligence division of Palo Alto Networks.... Palo Alto Networks researchers confirmed that the group successfully accessed and exfiltrated sensitive data from some victims' email servers. Bloomberg writes that according to the cybersecurity firm, this campaign targeted government entities in the Czech Republic and the Ministry of Mines and Energy of Brazil, and also "likely compromised" a device associated with a facility operated by a joint venture between Venezuela's government and an Asian tech firm. The cyberattackers are "also suspected of being active in Germany, Poland, Greece, Italy, Cyprus, Indonesia, Malaysia, Mongolia, Panama, Greece and other countries, according to the report."

Read more of this story at Slashdot.

Moritz Woermann discovered that missing input sanitising in Shaarli, a personal bookmarking service, could result in cross-site scripting.

https://security-tracker.debian.org/tracker/DSA-6128-1