May 6, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 6, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 6, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 6, 2020
Several vulnerabilities were discovered in WordPress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cross-Site Request Forgery (CSRF) attacks, create files on the server, disclose private information, create open
May 6, 2020
security update
May 6, 2020
security update
May 6, 2020
VPN Concerns with Unplanned Remote Employees
May 5, 2020
An update that solves one vulnerability and has three fixes is now available.
May 5, 2020
An update that fixes three vulnerabilities is now available.
May 5, 2020
Ghost blogging platform servers hacked to mine cryptocurrency
Ghost wasn’t the only victim of break-ins over the weekend that exploited critical holes in infrastructure automation software for which patches were available The post Ghost blogging platform servers hacked to mine cryptocurrency appeared first on WeLiveSecurity
May 5, 2020
New Kaiji Botnet Targets IoT, Linux Devices
May 5, 2020
Reading Time: ~ 3 min. Your password passing habit may not be as be as harmless as you think. And yes, that includes Netflix login info too. That’s one finding to come out of our newly released study of 2020’s Most (and Least) Cyber-Secure States. In this year’s analysis of the cyber readiness of all […]
May 5, 2020
A Denial of Service (DoS) vulnerability was discovered in the network time protocol server/client, ntp. ntp allowed an “off-path” attacker to block unauthenticated
May 5, 2020
An update for sqlite is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 5, 2020
Update to Samba 4.12.2
May 5, 2020
Update to Samba 4.12.2
May 5, 2020
security update
May 4, 2020
A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU.
May 4, 2020
Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling and code execution in the AJP connector (disabled by default in Debian).
May 4, 2020
Tarkett floored by cyber attack
May 4, 2020
Uncle Sam to agencies: No encrypted DNS for you!
May 4, 2020
Monday review – the hot 11 stories of the week
May 4, 2020
An update for cri-o is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 4, 2020
An update for haproxy is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 4, 2020
An update that fixes two vulnerabilities is now available.
May 3, 2020
An update that fixes four vulnerabilities is now available.
May 3, 2020
Ghost blogging platform suffers security breach
May 3, 2020
A vulnerability was discovered in mailman. GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against
May 3, 2020
New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.
May 3, 2020
An update that fixes 5 vulnerabilities is now available.
May 3, 2020
A security flaw was found on rubygem-json prior to 2.3.0 which was now assigned as CVE-2020-10663. This new rpm contains backport fixes for this issue.
May 3, 2020
Update to latest upstream OpenVPN 2.4.9 release. It contains a security fix for CVE-2020-11810. This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-id reference. If successful, only a single client just initiating a new connection will experience a denial of service situation. This […]
May 3, 2020
security update
May 2, 2020
An update that fixes two vulnerabilities is now available.
May 2, 2020
An update that solves one vulnerability and has two fixes is now available.
May 2, 2020
A vulnerability was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. LDAP search filters with nested boolean expressions can result in denial of service (slapd daemon
May 2, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 2, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 1, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 1, 2020
security update
May 1, 2020
Sextortion scammers still shilling with stolen passwords
The email includes the potential victim’s password as evidence of a hack, but there is more than meets the eye The post Sextortion scammers still shilling with stolen passwords appeared first on WeLiveSecurity
May 1, 2020
Reading Time: ~ 3 min. Anyone who has spent late nights scrolling through their social media feed or grinding on video games knows one thing is true: Technology can be a good thing, but only in moderation. Like too much of anything, spending a lot of time on the internet or social media can lead […]
May 1, 2020
Reading Time: ~ 2 min. As Oil Prices Drop, Hackers Take Aim at Producers With the recent crash in oil prices, and supply rapidly piling up, a new spear phishing campaign has begun targeting executives at several major oil producers. A massive number of emails started being distributed in late March, without the telltale signs […]
May 1, 2020
An update that solves two vulnerabilities and has one errata is now available.
May 1, 2020
Several vulnerabilities have been discovered in otrs2 (Open source Ticket Request System)
May 1, 2020
An update that fixes one vulnerability is now available.
May 1, 2020
OpenJDK 14 April CPU update
May 1, 2020
Security fix for CVE-2020-5260 and CVE-2020-11008 CVE-2020-5260 – From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.4.txt): > With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The
May 1, 2020
Update to 2.9.10 * Fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595
May 1, 2020