security update
February 28, 2021
– New upstream version (86.0)
February 28, 2021
Update to 88.0.4324.182. Fixes CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157
February 28, 2021
Get started with CrowdSec v.1.0.X>
February 28, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
February 28, 2021
An update that fixes two vulnerabilities is now available.
February 27, 2021
An update that fixes three vulnerabilities is now available.
February 27, 2021
An update that solves 5 vulnerabilities and has one errata is now available.
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0661
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0656
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0024
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2020:5408
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2020:5402
February 27, 2021
Beast Glatisant and Jelmer Vernooij reported that python-aiohttp, a async HTTP client/server framework, is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website.
February 27, 2021
security update
February 27, 2021
Stalkerware Volumes Remain Concerningly High, Despite Bans
February 26, 2021
Lazarus Targets Defense Companies with ThreatNeedle Malware
February 26, 2021
Yeezy Fans Face Sneaker-Bot Armies for Boost ‘Sun’ Release
February 26, 2021
Malware Gangs Partner Up in Double-Punch Security Threat
February 26, 2021
Podcast: Ransomware Attacks Exploded in Q4 2020
February 26, 2021
Protecting Sensitive Cardholder Data in Today’s Hyper-Connected World
February 26, 2021
An update that fixes one vulnerability is now available.
February 26, 2021
Championing worthy causes: How ESET gives a helping hand
A snapshot of some of the ways ESET makes an impact supporting the well-being of people, communities and the environment The post Championing worthy causes: How ESET gives a helping hand appeared first on WeLiveSecurity
February 26, 2021
Half a million stolen French medical records, drowned in feeble excuses
February 26, 2021
Several issues have been found in python-pysaml2, a pure python implementation of SAML Version 2 Standard. CVE-2017-1000433
February 26, 2021
The container suse/sles12sp5 was updated. The following patches have been included in this update:
February 26, 2021
security update
February 25, 2021
security update
February 25, 2021
Update postgresql and libpq to the new upstream release.
February 25, 2021
Update postgresql and libpq to the new upstream release.
February 25, 2021
Linux: display frontend “be-alloc” mode is unsupported (comment only) [XSA-363, CVE-2021-26934] (#1929549) arm: The cache may not be cleaned for newly allocated scrubbed pages [XSA-364, CVE-2021-26933] (#1929547)
February 25, 2021
Cyberattacks Launch Against Vietnamese Human-Rights Activists
February 25, 2021
Facebook ramps up fight against child abuse content
Two new tools will warn users about the risks of searching for and sharing content that exploits children, including the potential legal consequences of doing so The post Facebook ramps up fight against child abuse content appeared first on WeLiveSecurity
February 25, 2021
Health Website Leaks 8 Million COVID-19 Test Results
February 25, 2021
Malicious Mozilla Firefox Extension Allows Gmail Takeover
February 25, 2021
Google’s Password Checkup tool rolling out to Android devices
People who use devices running Android 9 or newer will be alerted if their login credentials have been stolen The post Google’s Password Checkup tool rolling out to Android devices appeared first on WeLiveSecurity
February 25, 2021
Cisco Warns of Critical Auth-Bypass Security Flaw
February 25, 2021
Defense in depth with Red Hat Insights
February 25, 2021
An update that fixes one vulnerability is now available.
February 25, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or information disclosure.
February 25, 2021
The package mumble before version 1.3.4-1 is vulnerable to arbitrary code execution.
February 25, 2021
The package postgresql before version 13.2-1 is vulnerable to information disclosure.
February 25, 2021
The package ansible-base before version 2.10.6-1 is vulnerable to information disclosure.
February 25, 2021
The package keycloak before version 12.0.3-1 is vulnerable to cross- site scripting.
February 25, 2021
Tax Season Ushers in Quickbooks Data-Theft Spike
February 24, 2021
Mozilla Patches Bugs in Firefox, Now Blocks Cross-Site Cookie Tracking
February 24, 2021
VMWare Patches Critical RCE Flaw in vCenter Server
February 24, 2021
Nvidia’s Anti-Cryptomining GPU Chip May Not Discourage Attacks
February 24, 2021
Microsoft Lures Populate Half of Credential-Swiping Phishing Emails
February 24, 2021
An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 24, 2021
An update for ansible is now available for Ansible Engine 2.9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 24, 2021
Red Hat OpenShift Container Platform release 4.7.0 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 24, 2021
Introducing Red Hat Vulnerability Scanner Certification
February 24, 2021
The history of open source risk reporting
February 24, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 24, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 24, 2021
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 24, 2021
Daycare Webcam Service Exposes 12,000 User Accounts
February 23, 2021
IBM Squashes Critical Remote Code-Execution Flaw
February 23, 2021
Clubhouse chats streamed to third‑party website
The incident raises concerns about the privacy and security of conversations taking place on the platform The post Clubhouse chats streamed to third‑party website appeared first on WeLiveSecurity
February 23, 2021
Finnish IT Giant Hit with Ransomware Cyberattack
February 23, 2021
Keybase secure messaging fixes photo-leaking bug – patch now!
February 23, 2021
10K Microsoft Email Users Hit in FedEx Phishing Attack
February 23, 2021
NurseryCam suffers data breach after security concerns raised
February 23, 2021
An update that solves two vulnerabilities and has two fixes is now available.
February 22, 2021
TDoS Attacks Take Aim at Emergency First-Responder Services
February 22, 2021
Chinese Hackers Hijacked NSA-Linked Hacking Tool: Report
February 22, 2021
security update
February 22, 2021
security update
February 22, 2021
security update
February 22, 2021
Assume Clubhouse Conversations Are Being Recorded, Researchers Warn
February 22, 2021
Brave browser’s Tor mode exposed users’ dark web activity
A bug in the ad blocking component of Brave’s Tor feature caused the browser to leak users’ DNS queries The post Brave browser’s Tor mode exposed users’ dark web activity appeared first on WeLiveSecurity
February 22, 2021
gdk-pixbuf2 2.42.2 release, fixing CVE-2021-20240 and CVE-2020-29385. This update also includes new gdk-pixbuf2-xlib package that was split out from gdk- pixbuf2 to its own source rpm. The gdk-pixbuf2-xlib and gdk-pixbuf2-xlib-devel binary package names are identical to what they were before the split.
February 22, 2021
gdk-pixbuf2 2.42.2 release, fixing CVE-2021-20240 and CVE-2020-29385. This update also includes new gdk-pixbuf2-xlib package that was split out from gdk- pixbuf2 to its own source rpm. The gdk-pixbuf2-xlib and gdk-pixbuf2-xlib-devel binary package names are identical to what they were before the split.
February 22, 2021
An update that fixes one vulnerability is now available.
February 22, 2021
The package python-django before version 3.1.7-1 is vulnerable to url request injection.
February 22, 2021