Damian Poddebniak and Fabian Ising discovered a response injection vulnerability in Evolution data server, which could enable MITM attacks.
July 16, 2020
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 16, 2020
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 16, 2020
Brazil’s Banking Trojans Go Global
July 15, 2020
Welcome Chat as a secure messaging app? Nothing could be further from the truth
ESET research uncovers a malicious operation that both spies on victims and leaks their data The post Welcome Chat as a secure messaging app? Nothing could be further from the truth appeared first on WeLiveSecurity
July 15, 2020
An update that solves 5 vulnerabilities and has one errata is now available.
July 15, 2020
An update that fixes 5 vulnerabilities is now available.
July 15, 2020
Several security issues were fixed in libvpx.
July 15, 2020
kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure (CVE-2019-18660) SL6 x86_64 kernel-2.6.32-754.31.1.el6.x86_64.rpm kernel-debug-2.6.32-754.31.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-754.31.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.31.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.31.1.el6.i686.rpm kernel-debug-devel-2.6.3 [More…]
July 15, 2020
An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
July 15, 2020
Multiple security issues were discovered in Python, an interactive high-level object-oriented language. CVE-2018-20406
July 15, 2020
Microsoft Tackles 123 Fixes for July Patch Tuesday
July 14, 2020
DMARC Adoption Spikes, Higher Ed Remains Behind
July 14, 2020
RATicate malware gang goes commercial
July 14, 2020
Critical SAP Bug Allows Full Enterprise System Takeover
July 14, 2020
Several security issues were fixed in WebKitGTK.
July 14, 2020
An update that fixes one vulnerability is now available.
July 14, 2020
An update that contains security fixes can now be installed.
July 14, 2020
An update that fixes one vulnerability is now available.
July 14, 2020
An update that solves one vulnerability and has one errata is now available.
July 14, 2020
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 14, 2020
security update
July 13, 2020
Reading Time: ~ 4 min. Prior to the outbreak of the novel coronavirus, Webroot’s annual Threat Report highlighted a 640% increase in active phishing sites on the web. However difficult it may be to believe (or easy, depending on your outlook), things have gotten even worse since. From fake anti-malware sites named for the […]
July 13, 2020
Zoom patches zero‑day flaw in Windows client
The vulnerability exposed Zoom users running Windows 7 or earlier OS versions to remote attacks The post Zoom patches zero‑day flaw in Windows client appeared first on WeLiveSecurity
July 13, 2020
Secret Service Creates Cyber Fraud Task Forces
July 13, 2020
Digicert revokes a raft of web security certificates
July 13, 2020
An update is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 13, 2020
The Enemy Within: How Insider Threats Are Changing
July 13, 2020
An update for machine-config-daemon and openshift is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 13, 2020
dbus: denial of service via file descriptor leak (CVE-2020-12049) SL7 x86_64 dbus-1.10.24-14.el7_8.x86_64.rpm dbus-debuginfo-1.10.24-14.el7_8.i686.rpm dbus-debuginfo-1.10.24-14.el7_8.x86_64.rpm dbus-libs-1.10.24-14.el7_8.i686.rpm dbus-libs-1.10.24-14.el7_8.x86_64.rpm dbus-x11-1.10.24-14.el7_8.x86_64.rpm dbus-devel-1.10.24-14.el7_8.i686.rpm dbus-devel-1.10.24- [More…]
July 13, 2020
Monday review – the hot stories of the week
July 13, 2020
An update that fixes four vulnerabilities is now available.
July 13, 2020
An update that fixes one vulnerability is now available.
July 13, 2020
The previous update for chromium released as DSA 4714-2 contained a flaw in the service worker implementation. This problem causes the browser to crash when a connection error occurs. Updated chromium packages are now available that correct this issue.
July 13, 2020
LiveAuctioneers security breach puts users at risk
July 11, 2020
Update to 2.28.3: * Fix kinetic scrolling with async scrolling. * Fix web process hangs on large GitHub pages. * Bubblewrap sandbox should not attempt to bind empty paths. * Fix threading issues in the media player. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
July 11, 2020
The 5.7.8 stable kernel update contains a number of important fixes across the tree.
July 11, 2020
Update to 2.53.3 The database format of the stored passwords and certificates in the user profile are now changed. SeaMonkey should perform the changes hiddenly at the first run, just asking for the master password (if used). To avoid a hypothetical data loss, it is recommended to backup user profile before the update, or even […]
July 11, 2020
This update applies a proposed fix for CVE-2018-12983.
July 10, 2020
This update applies a proposed fix for CVE-2018-12983.
July 10, 2020
Backport patches for CVE-2020-15306, CVE-2020-15305, CVE-2020-15304
July 10, 2020
Security fix
July 10, 2020
This update applies a proposed fix for CVE-2018-12983.
July 10, 2020
This update applies a proposed fix for CVE-2018-12983.
July 10, 2020
Google Bans Stalkerware Ads – With a Loophole
July 10, 2020
Reading Time: ~ 2 min. Ragnar locker Attacks Portuguese Energy Producer It was recently confirmed that Energias de Portugal (EDP), one of the largest energy producers in the world, has fallen victim to the Ragnar Locker ransomware variant. The original attack took place in April but was only discovered in May after nearly three weeks […]
July 10, 2020
Billions of stolen passwords for sale on the dark web
While logins to music and video streaming services sell for less than ten dollars each, domain admin access is being offered for US$120,000 The post Billions of stolen passwords for sale on the dark web appeared first on WeLiveSecurity
July 10, 2020
More evil: A deep look at Evilnum and its toolset
ESET research gives a detailed picture of the operations of the Evilnum group and its toolkit deployed in attacks against carefully chosen targets in the fintech sector The post More evil: A deep look at Evilnum and its toolset appeared first on WeLiveSecurity
July 10, 2020
Updated mbedtls packages fix security vulnerabilities Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave.
July 10, 2020
Updated mediawiki packages fix security vulnerability: In MediaWiki before 1.31.8, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This
July 10, 2020
Advisory text to describe the update. Wrap lines at ~75 chars. A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool.
July 10, 2020