July 7, 2021
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 7, 2021
An update is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 7, 2021
linuxptp: missing length check of forwarded messages (CVE-2021-3570) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 – linuxptp-2.0-2.el7_9.1.x86_64.rpm – linuxptp-debuginfo-2.0-2.el7_9.1.x86_64.rpm – Scientific Linux Development Team
July 7, 2021
Several security issues were fixed in PHP.
July 7, 2021
libuv could be made to crash or expose sensitive information if it received a specially crafted input.
July 7, 2021
A bug in TCG TPM2 Software Stack may result in information disclosure to a local attacker.
July 7, 2021
Pro-Trump ‘Gettr’ Social Platform Hacked On Day One
July 7, 2021
security update
July 6, 2021
security update
July 6, 2021
Western Digital Users Face Another RCE
July 6, 2021
An update for linuxptp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 6, 2021
An update for linuxptp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 6, 2021
An update for linuxptp is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 6, 2021
An update for linuxptp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 6, 2021
Red Hat OpenShift Container Platform release 4.7.19 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7.
July 6, 2021
An update that fixes three vulnerabilities is now available.
July 6, 2021
Kaseya Attack Fallout: CISA, FBI Offer Guidance
July 5, 2021
Ransomware Defense: Top 5 Things to Do Right Now
July 5, 2021
An update that contains security fixes can now be installed.
July 5, 2021
DjVuLibre could be made to crash or execute arbitrary code if it opened a specially crafted file.
July 5, 2021
* CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, if attacker has local access. * CVE-2021-33515: On-path attacker could have injected plaintext commands before STARTTLS negotiation that would be executed after STARTTLS finished with the
July 4, 2021
* CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, if attacker has local access. * CVE-2021-33515: On-path attacker could have injected plaintext commands before STARTTLS negotiation that would be executed after STARTTLS finished with the
July 4, 2021
The ieee-data package, which provides the OUI and IAB listings of identifiers assigned by IEEE Standards Association, ships a script (update-ieee-data) which queries ieee.org to download the most recent dataset and save it to /var/lib/ieee-data/.
July 4, 2021
Updated live packages fix security vulnerabilities: Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska
July 4, 2021
Updated PHP packages fix security vulnerabilities: – Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705) PDO_Firebird: – Fixed bug #76448: Stack buffer overflow in firebird_info_cb.
July 4, 2021
Updated file-roller package fixes security vulnerability: A path traversal vulnerability was found in file-roller due to an incomplete fix for CVE-2020-11736. It may still be possible to extract files outside of the intended directory in case of malicious archives
July 4, 2021
Updated busybox packages fix security vulnerability: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data (CVE-2021-28831).
July 4, 2021
A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability. (CVE-2021-20297)
July 4, 2021
Kaseya supply‑chain attack: What we know so far
As news breaks about the supply-chain ransomware attack against Kaseya’s IT management software, here’s what we know so far The post Kaseya supply‑chain attack: What we know so far appeared first on WeLiveSecurity
July 3, 2021
Cyber resilience refers to a business’s ability to mitigate damage to its systems, processes and even its reputation. It’s based on the principle that, in the real (and really connected) world, adverse events occur. This could be in the form of a user enabling a breach by providing sensitive information during a phishing attack, through […]
July 2, 2021
An update that fixes three vulnerabilities is now available.
July 2, 2021
An update that fixes two vulnerabilities is now available.
July 2, 2021
An update that solves four vulnerabilities and has one errata is now available.
July 2, 2021
TrickBot Spruces Up Its Banking Trojan Module
July 2, 2021
CISA Offers New Mitigation for PrintNightmare Bug
July 2, 2021
The container ses/7/cephcsi/cephcsi was updated. The following patches have been included in this update:
July 2, 2021
Upgrade to 2.9.23. Fixes CVE-2021-3583
July 1, 2021
Update to 2.53.8 Some improvements for performance and stability. Following the upstream and Firefox behaviour, no more use system colors (some backgrounds etc.) by default. You can change it in Appearance–>Colors as usual.
July 1, 2021
Upgrade to 2.9.23. Fixes CVE-2021-3583
July 1, 2021
Red Hat OpenShift Container Platform release 4.5.41 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of [[Important]]. A Common Vulnerability Scoring System (CVSS) base score,
July 1, 2021
Netgear Authentication Bypass Allows Router Takeover
July 1, 2021
An update for go-toolset-1.15 and go-toolset-1.15-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 1, 2021
An update that fixes 14 vulnerabilities is now available.
July 1, 2021
An update that fixes 14 vulnerabilities is now available.
July 1, 2021
An update that solves 12 vulnerabilities and has 42 fixes is now available.
July 1, 2021
An update that fixes one vulnerability is now available.
July 1, 2021
A buffer overflow was discovered in HTMLDOC, a HTML processor that generates indexed HTML, PS, and PDF, which could potentially result in the execution of arbitrary code. In addition a number of crashes were addressed.
July 1, 2021