Isaac Boukris and Andrew Bartlett discovered that the S4U2Self Kerberos extension used in Samba’s Active Directory support was susceptible to man-in-the-middle attacks caused by incomplete checksum validation.
May 14, 2019
Multiple issues have been addressed in Qt4. CVE-2018-15518
May 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft ASP.NET Core is prone to a remote denial-of-service vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Windows is prone to local information-disclosure vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
May 14, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 14, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 14, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 14, 2019
Risk Level: Very Low. Type: Trojan.
May 14, 2019
security update
May 13, 2019
Risk Level: Very Low. Type: Trojan.
May 13, 2019
ThreatList: Top 5 Most Dangerous Attachment Types
May 13, 2019
Verizon’s data breach report: What the numbers say
What are some of the most interesting takeaways from Verizon’s latest annual security report? The post Verizon’s data breach report: What the numbers say appeared first on WeLiveSecurity
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes two vulnerabilities is now available.
May 13, 2019
An update that fixes 16 vulnerabilities is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes three vulnerabilities is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes 7 vulnerabilities is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
May 13, 2019
An update that fixes 9 vulnerabilities is now available.
May 13, 2019
The PostgreSQL project has release a new minor release of the 9.4 branch. For Debian 8 “Jessie”, this has been uploaded as version
May 13, 2019
An update for python-jinja2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 13, 2019
Updated openssh packages fix security vulnerabilities: Due to missing character encoding in the progress display, the object name can be used to manipulate the client output, for example to employ ANSI codes to hide additional files being transferred (CVE-2019-6109).
May 12, 2019
Updated cronie packages fix security vulnerabilities: Cronie before 1.5.3 allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked (CVE-2019-9704).
May 12, 2019
Updated tcpreplay package fixes security vulnerabilities: An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary.
May 12, 2019
A vulnerability was found in the svgsalamander library. If the library is being used in a web application for processing user supplied SVG files then the app is vulnerable to SSRF (CVE-2017-5617). References:
May 12, 2019
Updated mxml packages fix security vulnerabilities: An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the ”
May 12, 2019
The updated packages fix security vulnerabilities: A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS)
May 12, 2019
Updated qt4 packages fix security vulnerability: A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp (CVE-2018-19872).
May 12, 2019
Updated bash package fixes security vulnerability: A vulnerability in which shell did not prevent user BASH_CMDS, allowing the user to execute any command with the permissions of the shell (CVE-2019-9924).
May 12, 2019
pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers (CVE-2019-9923). References:
May 12, 2019
Updated openexr package fixes security vulnerabilities: It was discovered that makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact (CVE-2018-18444).
May 12, 2019
Updated python packages fix security vulnerability: A ‘file:’ blacklist bypass in URIs by using the ‘local-file:’ scheme instead (CVE-2019-9948).
May 12, 2019
Updated sysstat package fix security vulnerabilities: Out-of-bounds read during a memmove call inside the remap_struct function (CVE-2018-19416).
May 12, 2019
What is VPS Hosting? How Does it Work?
May 11, 2019
Update to April 2019 CPU. See: http://mail.openjdk.java.net/pipermail/jdk- updates-dev/2019-April/000951.html
May 10, 2019
security update
May 10, 2019
security update
May 10, 2019
The WannaCry Security Legacy and What’s to Come
May 10, 2019
Nvidia Warns Windows Gamers on GPU Driver Flaws
May 10, 2019
Students pull off below-the-belt mailing list prank
May 10, 2019
An update that contains security fixes can now be installed.
May 10, 2019
An update that solves one vulnerability and has one errata is now available.
May 10, 2019
Stay Safe: 5 Tips to Keep Fraudsters at Bay
May 10, 2019
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, information disclosure or the execution of arbitrary code.
May 10, 2019
Reading Time: ~2 min. Dharma Ransomware Employs Diversion Tactics Researchers recently discovered a new ransomware variant that displays an ESET AV removal screen once launched in order to divert the a victim’s attention from the silent encryption taking place. Initially dropped by an email spam campaign, the payload comes as a password protected zip archive, […]
May 10, 2019
FTC renews call for single federal privacy law
May 10, 2019
Multiple vulnerabilities were discovered in the Symfony PHP framework which could lead to cache bypass, authentication bypass, information disclosure, open redirect, cross-site request forgery, deletion of arbitrary files, or arbitrary code execution.
May 10, 2019
security update
May 10, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
The 5.0.13 update contains a number of important fixes across the tree. There is no kernel-headers build this time. The tools version is 5.0.12 because originally it was built with the 5.0.12 kernel version but 5.0.13 was built before 5.0.12 could be filed in bodhi.
May 9, 2019
The 5.0.13 update contains a number of important fixes across the tree. There is no kernel-headers build this time. The tools version is 5.0.12 because originally it was built with the 5.0.12 kernel version but 5.0.13 was built before 5.0.12 could be filed in bodhi.
May 9, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
Hackers Take Over IoT Devices to ‘Click’ on Ads
May 9, 2019