The json-c shared library had an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
May 31, 2020
Gollem, as used in Horde Groupware Webmail Edition and other products, had been affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET dir parameter in the browser functionality, affecting
May 31, 2020
The json-c shared library had an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
May 31, 2020
An update that solves one vulnerability and has one errata is now available.
May 31, 2020
New upstream release with bug and security fixes. Also, consolidates duplicate pakages marked and nodejs-marked. I tested upgrades from both, but may have missed some wonky situation.
May 30, 2020
New version 3.2.4, enabled build with androiddump.
May 30, 2020
Two memory management issues were found in the asfdemux element of the GStreamer “ugly” plugin collection, which can be triggered via a maliciously crafted file.
May 30, 2020
Two memory handling issues were found in gst-plugins-good0.10, a collection of GStreamer plugins from the “good” set:
May 30, 2020
It was discovered that there was both an invalid memory and heap overflow vulnerability in dosfstools, a collection of utilities for making and checking MS-DOS FAT filesystems.
May 30, 2020
Several vulnerabilities were discovered in package salt, a configuration management and infrastructure automation software.
May 30, 2020
New version 3.2.4, enabled build with androiddump.
May 29, 2020
An update that fixes one vulnerability is now available.
May 29, 2020
People know reusing passwords is risky – then do it anyway
And most people don’t change their password even after hearing about a breach, a survey finds The post People know reusing passwords is risky – then do it anyway appeared first on WeLiveSecurity
May 29, 2020
An update that solves one vulnerability and has two fixes is now available.
May 29, 2020
git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak (CVE-2020-11008) SL7 x86_64 git-1.8.3.1-23.el7_8.x86_64.rpm git-daemon-1.8.3.1-23.el7_8.x86_64.rpm git-debuginfo-1.8.3.1-23.el7_8.x86_64.rpm git-gnome-keyring-1.8.3.1-23.el7_8.x86_64.rpm git-svn-1.8.3.1-23.el7_8.x86_64.rpm noarch emacs-git-1.8.3.1-23.el7_8.noarch.rpm [More…]
May 29, 2020
## Python 3.8.3 This is the third maintenance release of Python 3.8. See [the c hangelog](https://docs.python.org/release/3.8.3/whatsnew/changelog.html#changelo g) for details. Contains the security fix for CVE-2020-8492.
May 28, 2020
Hackers Compromise Cisco Servers Via SaltStack Flaws
May 28, 2020
An update that fixes three vulnerabilities is now available.
May 28, 2020
USN-4369-1 introduced a regression in the Linux kernel.
May 28, 2020
USN-4367-1 introduced a regression in the Linux kernel.
May 28, 2020
Critical Android flaw lets attackers hijack almost any app, steal data
Left unpatched, the vulnerability could expose almost all Android users to the risk of having their personal data intercepted by attackers The post Critical Android flaw lets attackers hijack almost any app, steal data appeared first on WeLiveSecurity
May 28, 2020
Microsoft warns of PonyFinal ransomware attacks
May 28, 2020
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine.
May 28, 2020
Inside a ransomware gang’s attack toolbox
May 28, 2020
NetWalker ransomware – what you need to know
May 28, 2020
An update for freerdp is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 28, 2020
An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 28, 2020
Various minor vulnerabilities have been addredd in libexif, a library to parse EXIF metadata files.
May 28, 2020
This is a security update for JBoss EAP Continuous Delivery 19. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 28, 2020
An update that fixes 5 vulnerabilities is now available.
May 28, 2020
Smashing Security podcast #180: Taking care of Clare
May 28, 2020
security update
May 27, 2020
security update
May 27, 2020
From Agent.BTZ to ComRAT v4: A ten‑year journey
Turla has updated its ComRAT backdoor and now uses the Gmail web interface for Command and Control The post From Agent.BTZ to ComRAT v4: A ten‑year journey appeared first on WeLiveSecurity
May 27, 2020
An update that fixes three vulnerabilities is now available.
May 27, 2020
Several security issues were fixed in Unbound.
May 27, 2020
Google may soon add end-to-end encryption for RCS
May 27, 2020
Updated transmission packages fix security vulnerability: Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent
May 27, 2020
Updated sleuthkit packages fix security vulnerabilities: An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table (CVE-2019-14532).
May 27, 2020
Updated log4net packages fix security vulnerability This patch fixes a security vulnerabiliy reported by Karthik Balasundaram. The security vulnerability was found in the way how log4net parses xml configuration files where it allowed to process XML External Entity Processing. An attacker could use
May 27, 2020
Advisory text to describe the update. Wrap lines at ~75 chars. Updated dojo package fixes security vulnerabilities: In affected versions of dojo, the deepCopy method is vulnerable to
May 27, 2020
Crooks threaten to leak customer data stolen from e‑commerce sites
A hack-and-extort campaign takes aim at poorly secured databases replete with customer information that can be exploited for further attacks The post Crooks threaten to leak customer data stolen from e‑commerce sites appeared first on WeLiveSecurity
May 26, 2020
Two years later, has GDPR fulfilled its promise?
Has the landmark law helped build a culture of privacy in organizations and have consumers become more wary of sharing their personal data? The post Two years later, has GDPR fulfilled its promise? appeared first on WeLiveSecurity
May 26, 2020
New iPhone jailbreak released
May 26, 2020
Turla APT Revamps One of Its Go-To Spy Tools
May 26, 2020
Docker Desktop danger discovered, patch now
May 26, 2020
An update that fixes one vulnerability is now available.
May 26, 2020