The 5..15..12 stable kernel update contains a number of important fixes across the tree.
December 31, 2021
security update
December 31, 2021
The 5..15..12 stable kernel update contains a number of important fixes across the tree.
December 31, 2021
https://lib.openmpt.org/libopenmpt/2021/12/23/security- update-0.5.15-releases-0.4.27-0.3.36/
December 31, 2021
22 cybersecurity statistics to know for 2022
As we usher in the New Year, let’s take a look at some statistics that will help you stay up-to-date on recent cybersecurity trends The post 22 cybersecurity statistics to know for 2022 appeared first on WeLiveSecurity
December 31, 2021
An update that fixes one vulnerability is now available.
December 31, 2021
An update that fixes one vulnerability is now available.
December 31, 2021
An update that fixes four vulnerabilities is now available.
December 30, 2021
An update that fixes one vulnerability is now available.
December 30, 2021
Patch for CVE-2021-39359. —- Update to 5.2.10
December 30, 2021
xwayland 21.1.4 Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011 Store EGLcontext to avoid superfluous eglMakeCurrent() calls Prefer EGLStream with NVIDIA proprietary driver if both GBM and EGLstream are available
December 30, 2021
What the Rise in Cyber-Recon Means for Your Security Strategy
December 30, 2021
APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools
December 30, 2021
Instagram copyright infringment scams – don’t get sucked in!
December 30, 2021
5 Cybersecurity Trends to Watch in 2022
December 30, 2021
stack-based buffer overflow in handle_request() in DHT.c (CVE-2021-44847) References: – https://bugs.mageia.org/show_bug.cgi?id=29821 – https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/S7EBS3NIRYJ7V3PTNINP3PJSVUHGZTGA/
December 30, 2021
HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818) References: – https://bugs.mageia.org/show_bug.cgi?id=29817
December 30, 2021
e2guardian did not validate TLS hostnames (CVE-2021-44273) References: – https://bugs.mageia.org/show_bug.cgi?id=29811 – https://www.openwall.com/lists/oss-security/2021/12/23/2
December 30, 2021
ReDoS vulnerability in html_preprocess_rules in ebooks/conversion/preprocess.py References: – https://bugs.mageia.org/show_bug.cgi?id=29803
December 30, 2021
HTTP Request Smuggling due to spaces in headers. The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS). (CVE-2021-22959) HTTP Request Smuggling when parsing the body. The parse ignores chunk extensions when parsing the body of chunked requests. This leads […]
December 30, 2021
Authenticate active help requests to the local help web server (CVE-2020-27225) References: – https://bugs.mageia.org/show_bug.cgi?id=29048
December 30, 2021
security update
December 29, 2021
Log4Shell vulnerability Number Four: “Much ado about something”
December 29, 2021
Cryptomining Attack Exploits Docker API Misconfiguration Since 2019
December 29, 2021
Two vulnerabilities were fixed in the reSIProcate SIP stack. CVE-2017-11521
December 29, 2021
An update that fixes 33 vulnerabilities is now available.
December 29, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.
December 29, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 29, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 29, 2021
New wpa_supplicant packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
December 28, 2021
2021 in review: The biggest cybersecurity stories of the year
As we close out another year like no other, let’s look back at some of the most notable cybersecurity stories that shaped 2021 The post 2021 in review: The biggest cybersecurity stories of the year appeared first on WeLiveSecurity
December 28, 2021
That Toy You Got for Christmas Could Be Spying on You
December 28, 2021
A couple of vulnerabilites were found in paramiko, an implementation of SSHv2 protocol in Python. CVE-2018-1000805
December 28, 2021
An XSS vulnerability was discovered in noVNC, a HTML5 VNC client, in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
December 28, 2021
A cookie prefix spoofing vulnerability in CGI::Cookie.parse and a regular expression denial of service vulnerability (ReDoS) on date parsing methods were discovered in src:ruby2.1, the Ruby interpreter.
December 28, 2021
2021 Wants Another Chance (A Lighter-Side Year in Review)
December 28, 2021
What most cloud-using CIOs want in 2022
December 28, 2021
Several vulnerabilities were discovered in djvulibre, a library and set of tools to handle documents in the DjVu format. An attacker could crash document viewers and possibly execute arbitrary code through
December 28, 2021
The python-rdflib-tools package (tools for converting to and from RDF) had wrappers that could load Python modules from the current working directory, allowing code injection.
December 28, 2021
An update that contains security fixes can now be installed.
December 28, 2021
Global Cyberattacks from Nation-State Actors Posing Greater Threats
December 27, 2021
The 5 Most-Wanted Threatpost Stories of 2021
December 27, 2021
Several security vulnerabilities were found in Apache Log4j2, a Logging Framework for Java, which could lead to a denial of service or information disclosure.
December 27, 2021
Invalid read for malformed DVI files was fixed in GNU libextractor, a library that extracts meta-data from files of arbitrary type. For Debian 9 stretch, this problem has been fixed in version
December 27, 2021
What app developers need to do now to fight Log4j exploits
December 27, 2021
Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
December 26, 2021
Backport fix for CVE-2021-45078
December 26, 2021
Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
December 26, 2021
Backport fix for CVE-2021-45078
December 26, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 26, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 26, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 26, 2021
The 5.15.11 stable kernel update contains a number of important fixes across the tree.
December 25, 2021
Updat eto 4.6.5 to fix CVE-2021-43818.
December 25, 2021
Update to 2.53.10.1 Backport fixes to improve compatibility of some sites
December 25, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 25, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 25, 2021
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
December 25, 2021
The container ses/7/ceph/grafana was updated. The following patches have been included in this update:
December 25, 2021
The container ses/7/cephcsi/cephcsi was updated. The following patches have been included in this update:
December 25, 2021
security update
December 24, 2021
security update
December 24, 2021
https://lib.openmpt.org/libopenmpt/2021/12/23/security- update-0.5.15-releases-0.4.27-0.3.36/
December 24, 2021
The following vulnerabilities have been discovered in the wpewebkit web engine: CVE-2021-30887
December 24, 2021
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30887
December 24, 2021
OpenPGP signature status doesn’t consider additional message content. (CVE-2021-4126) Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow. (CVE-2021-44538)
December 24, 2021
security update
December 23, 2021
security update
December 23, 2021
Security fix for CVE-2021-44224, CVE-2021-44790
December 23, 2021
Rebuild 3.8.5 using golang-1.16.12
December 23, 2021
Rebuild 3.8.5 using golang-1.16.12
December 23, 2021
4-Year-Old Microsoft Azure Zero-Day Exposes Web App Source Code
December 23, 2021
The cool retro phone with a REAL DIAL… plus plenty of IoT problems
December 23, 2021
This holiday season, give your children the gift of cybersecurity awareness
Don’t leave your kids to their own devices – give them a head start with staying safe online instead The post This holiday season, give your children the gift of cybersecurity awareness appeared first on WeLiveSecurity
December 23, 2021
Telegram Abused to Steal Crypto-Wallet Credentials
December 23, 2021
‘Spider-Man: No Way Home’ Download Installs Cryptominer
December 23, 2021
Time to Ditch Big-Brother Accounts for Network Scanning
December 23, 2021
An update that fixes four vulnerabilities is now available.
December 23, 2021
An update that solves two vulnerabilities and has one errata is now available.
December 23, 2021
An update that solves two vulnerabilities and has one errata is now available.
December 23, 2021
An update that fixes one vulnerability is now available.
December 23, 2021
Alibaba Cloud slapped by Chinese ministry for mishandling Log4j
December 23, 2021
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
December 22, 2021
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
December 22, 2021
security update
December 22, 2021
PYSA Emerges as Top Ransomware Actor in November
December 22, 2021
All in One SEO Plugin Bug Threatens 3M Websites with Takeovers
December 22, 2021
Critical Apache HTTPD Server Bugs Could Lead to RCE, DoS
December 22, 2021
Plundered bitcoins recovered by FBI – all 3,879-and-one-sixth of them!
December 22, 2021
Four Bugs in Microsoft Teams Left Platform Vulnerable Since March
December 22, 2021
An update that fixes 33 vulnerabilities is now available.
December 22, 2021
An update that solves one vulnerability and has one errata is now available.
December 22, 2021
An update that fixes one vulnerability is now available.
December 22, 2021
It was discovered that missing SAML signature validation in the SOGo groupware could result in impersonation attacks. For the oldstable distribution (buster), this problem has been fixed
December 22, 2021
An update that fixes three vulnerabilities is now available.
December 22, 2021
An update that solves one vulnerability and has one errata is now available.
December 22, 2021