Add proposed patches for CVE-2021-29338 and a heap buffer overflow.
June 11, 2021
Add proposed patches for CVE-2021-29338 and a heap buffer overflow.
June 11, 2021
security update
June 11, 2021
Baby Clothes Giant Carter’s Leaks 410K Customer Records
June 11, 2021
REvil Hits US Nuclear Weapons Contractor: Report
June 11, 2021
Google fixes actively exploited Chrome zero‑day
The latest Chrome update patches a bumper crop of security flaws across the browser’s desktop versions The post Google fixes actively exploited Chrome zero‑day appeared first on WeLiveSecurity
June 11, 2021
BackdoorDiplomacy: Upgrading from Quarian to Turian
ESET researchers discover a new campaign that evolved from the Quarian backdoor The post BackdoorDiplomacy: Upgrading from Quarian to Turian appeared first on WeLiveSecurity
June 11, 2021
Cyberpunk 2077 Hacked Data Circulating Online
June 11, 2021
The package wireshark-cli before version 3.4.6-1 is vulnerable to denial of service.
June 11, 2021
The package kube-apiserver before version 1.21.1-1 is vulnerable to insufficient validation.
June 11, 2021
The package nettle before version 3.7.3-1 is vulnerable to denial of service.
June 11, 2021
The package isync before version 1.4.2-1 is vulnerable to arbitrary code execution.
June 11, 2021
The package python-websockets before version 9.1-1 is vulnerable to private key recovery.
June 11, 2021
The package python-urllib3 before version 1.26.5-1 is vulnerable to denial of service.
June 11, 2021
Police Grab Slilpp, Biggest Stolen-Logins Market
June 11, 2021
Hackers Steal FIFA 21 Source Code, Tools in EA Breach
June 11, 2021
security update
June 10, 2021
security update
June 10, 2021
Chrome Browser Bug Under Active Attack
June 10, 2021
STEM Audio Table Rife with Business-Threatening Bugs
June 10, 2021
Gelsemium: When threat actors go gardening
ESET researchers shed light on new campaigns from the quiet Gelsemium group The post Gelsemium: When threat actors go gardening appeared first on WeLiveSecurity
June 10, 2021
Microsoft: Big Cryptomining Attacks Hit Kubeflow
June 10, 2021
Steam Gaming Platform Hosting Malware
June 10, 2021
An update for servicemesh-operator is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 10, 2021
libwebp could be made to crash or run programs as your login if it opened a specially crafted file.
June 10, 2021
An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 10, 2021
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 10, 2021
An update for the container-tools:3.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 10, 2021
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 10, 2021
Intel Plugs 29 Holes in CPUs, Bluetooth, Security
June 9, 2021
rxvt, VT102 terminal emulator for the X Window System, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q).
June 9, 2021
mrxvt, lightweight multi-tabbed X terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q).
June 9, 2021
eterm, an enlightened terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q).
June 9, 2021
Red Hat OpenShift Container Platform release 3.11.452 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 3.11.
June 9, 2021
DarkSide Pwned Colonial With Old VPN Password
June 9, 2021
An update that fixes three vulnerabilities is now available.
June 9, 2021
Identity and access in the DevSecOps life cycle
June 9, 2021
Several security issues were fixed in Intel Microcode.
June 9, 2021
Lewd Phishing Lures Aimed at Business Explode
June 8, 2021
TrickBot Coder Faces Decades in Prison
June 8, 2021
Google Patches Critical Android RCE Bug
June 8, 2021
Hundreds of suspected criminals arrested after being tricked into using FBI‑run chat app
Law enforcement around the world used a messaging app called AN0M to monitor the communications of alleged criminals The post Hundreds of suspected criminals arrested after being tricked into using FBI‑run chat app appeared first on WeLiveSecurity
June 8, 2021
‘An0m’ Encrypted-Chat Sting Leads to Arrest of 800
June 8, 2021
Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 Mozilla developers Gabriele Svelto, Anny Gakhokidze, Alexandru Michis, Christian Holler reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been […]
June 8, 2021
Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file (CVE-2021-30145). References: – https://bugs.mageia.org/show_bug.cgi?id=29058 – https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QVXB4F67QODLPKYBZX7SBXTE7ESGKGOD/
June 8, 2021
This update patches the vendored `smallvec` Rust crate in librsvg to fix a security vulnerability: The Iterator implementation mishandles destructors, leading to a double free (CVE-2021-25900). References:
June 8, 2021
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability (CVE-2021-20193). References: – https://bugs.mageia.org/show_bug.cgi?id=29049 – https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRDSUUE3LUKBDRLPB7GTT5QZRPV5J7O4/
June 8, 2021
Exponential entity expansion attack bypasses all existing protection mechanisms. (CVE-2021-3541). References: – https://bugs.mageia.org/show_bug.cgi?id=29039 – https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/NYSYJVWYEQHFG2TBIQJRJ5COUR5LNFJJ/
June 8, 2021
A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a […]
June 8, 2021
FBI Claws Back Millions of DarkSide’s Ransom Profits
June 7, 2021
Bad Apple: App Store Rife with Fraud, Fleeceware
June 7, 2021
USN-4937-1 introduced a regression in GNOME Autoar.
June 7, 2021
USN-4969-1 introduced a regression in DHCP.
June 7, 2021