security update
May 18, 2022
DOJ Says Doctor is Malware Mastermind
May 18, 2022
Add security to Azure applications with Azure WAF
May 18, 2022
Fake news – why do people believe it?
In the age of the perpetual news cycle and digital media, the risks that stem from the fake news problem are all too real The post Fake news – why do people believe it? appeared first on WeLiveSecurity
May 18, 2022
Sysrv-K Botnet Targets Windows, Linux
May 17, 2022
Several security issues were fixed in PCRE.
May 17, 2022
Several security issues were fixed in Apport.
May 17, 2022
iPhones Vulnerable to Attack Even When Turned Off
May 17, 2022
needrestart could be made to run programs.
May 17, 2022
zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 zlib-1.2.7-20.el7_9.i686.rpm zlib-1.2.7-20.el7_9.x86_64.rpm zlib-debuginfo-1.2.7-20.el7_9.i686.rpm zlib-debuginfo-1.2.7-20 [More…]
May 17, 2022
Jakub Wilk discovered a local privilege escalation in needrestart, a utility to check which daemons need to be restarted after library upgrades. Regular expressions to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate
May 17, 2022
Only DevSecOps can save the metaverse
May 17, 2022
OpenLDAP could be made to perform arbitrary modifications to the database.
May 17, 2022
The State of Kubernetes Security in 2022
May 17, 2022
China reveals its top five sources of online fraud
May 17, 2022
The ffmpeg project released the new version 3.2.18 with fixes for various issues found by the OSS-Fuzz project. For Debian 9 stretch, this release is packaged in version 7:3.2.18-0+deb9u1.
May 16, 2022
An update that contains security fixes can now be installed.
May 16, 2022
An update that fixes one vulnerability is now available.
May 16, 2022
An update that fixes 8 vulnerabilities is now available.
May 16, 2022
An update that fixes one vulnerability is now available.
May 16, 2022
An update that fixes two vulnerabilities is now available.
May 16, 2022
More money for open source security won’t work
May 16, 2022
The downside of ‘debugging’ ransomware
The decision to release a ransomware decryptor involves a delicate balancing act between helping victims recover their data and alerting criminals to errors in their code The post The downside of ‘debugging’ ransomware appeared first on WeLiveSecurity
May 16, 2022
Infinite loop vulnerability in the CHM file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions. (CVE-2022-20770) Infinite loop vulnerability in the TIFF file parser. Issue affects versions
May 15, 2022
cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call. (CVE-2017-9814) References:
May 15, 2022
CERTINFO never-ending busy-loop. (CVE-2022-27781) TLS and SSH connection too eager reuse. (CVE-2022-27782) References: – https://bugs.mageia.org/show_bug.cgi?id=30410
May 15, 2022
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. (CVE-2022-27404) FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to
May 15, 2022
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. (CVE-2022-25235) References:
May 15, 2022
When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disagree on where one request starts and where it ends. This would allow requests to be smuggled via the front-end proxy to waitress and later behavior. […]
May 15, 2022
CVE-2021-3596 A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in
May 14, 2022
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in information disclosure or denial of service. For Debian 9 stretch, these problems have been fixed in version
May 14, 2022
The container trento/trento-runner was updated. The following patches have been included in this update:
May 14, 2022
The container bci/openjdk-devel was updated. The following patches have been included in this update:
May 14, 2022
The container bci/nodejs was updated. The following patches have been included in this update:
May 14, 2022
The container bci/nodejs was updated. The following patches have been included in this update:
May 14, 2022
security update
May 13, 2022
security update
May 13, 2022
security update
May 13, 2022
Malware Builder Leverages Discord Webhooks
May 13, 2022
How to spot and avoid a phishing attack – Week in security with Tony Anscombe
Can you spot the tell-tale signs of a phishing attempt and check if an email that has landed in your inbox is legit? The post How to spot and avoid a phishing attack – Week in security with Tony Anscombe appeared first on WeLiveSecurity
May 13, 2022
Upstream details at : https://access.redhat.com/errata/RHSA-2022:1440
May 13, 2022
Upstream details at : https://access.redhat.com/errata/RHSA-2022:2191
May 13, 2022
Upstream details at : https://access.redhat.com/errata/RHSA-2022:2213
May 13, 2022
Upstream details at : https://access.redhat.com/errata/RHSA-2022:1487
May 13, 2022
An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 13, 2022
* Updating for Keylime release v6.4.0 * Fixes CVE-2022-1053
May 12, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
May 12, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
May 12, 2022
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 12, 2022
An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 12, 2022
An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 12, 2022
9 questions you should ask about your cloud security
May 12, 2022
10 reasons why we fall for scams
The ‘it won’t happen to me’ mindset leaves you unprepared – here are some common factors that put any of us at risk of online fraud The post 10 reasons why we fall for scams appeared first on WeLiveSecurity
May 12, 2022
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don’t check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2’s buffer functions, for example libxslt through 1.1.35, is affected as well.
May 12, 2022