November 4, 2022
Reducing the risk of cloud attack
An update that fixes one vulnerability is now available.
November 4, 2022
An update that fixes one vulnerability is now available.
November 4, 2022
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
November 4, 2022
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
November 4, 2022
– Updated to 106.0.3 —- – New upstream version (106.0.1)
November 4, 2022
– Updated to 106.0.3 —- – New upstream version (106.0.1)
November 4, 2022
security update
November 3, 2022
**PHP version 8.1.12** (27 Oct 2022) **Core:** * Fixes segfault with Fiber on FreeBSD i386 architecture. (David Carlier) **Fileinfo:** * Fixed bug [GH-8805](https://github.com/php/php-src/issues/8805) (finfo returns wrong mime type for woff/woff2 files). (Anatol) **GD:** * Fixed bug php#81739: OOB read due to insufficient input validation in imageloadfont(). (**CVE-2022-31630**)
November 3, 2022
**PHP version 8.1.12** (27 Oct 2022) **Core:** * Fixes segfault with Fiber on FreeBSD i386 architecture. (David Carlier) **Fileinfo:** * Fixed bug [GH-8805](https://github.com/php/php-src/issues/8805) (finfo returns wrong mime type for woff/woff2 files). (Anatol) **GD:** * Fixed bug php#81739: OOB read due to insufficient input validation in imageloadfont(). (**CVE-2022-31630**)
November 3, 2022
# New in release OpenJDK 17.0.5 (2022-10-18) * [Release announcement](https://bit.ly/openjdk1705) * [Full release notes](https://builds.shipilev.net/backports-monitor/release-notes-17.0.5.html) ## Security Fixes – JDK-8282252: Improve BigInteger/Decimal validation – JDK-8285662: Better permission resolution – JDK-8286077, CVE-2022-21618: Wider
November 3, 2022
# New in release OpenJDK 17.0.5 (2022-10-18) * [Release announcement](https://bit.ly/openjdk1705) * [Full release notes](https://builds.shipilev.net/backports-monitor/release-notes-17.0.5.html) ## Security Fixes – JDK-8282252: Improve BigInteger/Decimal validation – JDK-8285662: Better permission resolution – JDK-8286077, CVE-2022-21618: Wider
November 3, 2022
# New in release OpenJDK 11.0.17 (2022-10-18) * [Release announcement](https://bit.ly/openjdk11017) * [Full release notes](https://builds.shipilev.net/backports-monitor/release-notes-11.0.7.html) ## Security Fixes – JDK-8282252: Improve BigInteger/Decimal validation – JDK-8285662: Better permission resolution – JDK-8286077, CVE-2022-21618: Wider
November 3, 2022
# New in release OpenJDK 8u352 (2022-10-18) * [Release announcement](https://bit.ly/openjdk8u352) * [Full release notes](https://builds.shipilev.net/backports-monitor/release-notes- openjdk8u352.html) ## Security Fixes * JDK-8282252: Improve BigInteger/Decimal validation * JDK-8285662: Better permission resolution * JDK-8286511: Improve
November 3, 2022
Using daysofrisk.pl with the Red Hat Security Data API
November 3, 2022
The future starts now: 10 major challenges facing cybersecurity
To mark Antimalware Day, we’ve rounded up some of the most pressing issues for cybersecurity now and in the future The post The future starts now: 10 major challenges facing cybersecurity appeared first on WeLiveSecurity
November 3, 2022
Royal Mail customer data leak shutters online Click and Drop
November 3, 2022
US Treasury thwarts DDoS attack from Russian Killnet group
November 2, 2022
security update
November 2, 2022
security update
November 2, 2022
The spy who rented to me? Throwing the spotlight on hidden cameras in Airbnbs
Do you find reports of spy cams found in vacation rentals unsettling? Try these tips for spotting hidden cameras and put your worries to rest. The post The spy who rented to me? Throwing the spotlight on hidden cameras in Airbnbs appeared first on WeLiveSecurity
November 2, 2022
Ransomware cost US banks $1.2 billion last year
November 2, 2022
Upstream update including security & bug fixes as well as feature enhancements. From the upstream [release notes](https://github.com/git/git/raw/v2.38.1/Documen tation/RelNotes/2.30.6.txt): CVE-2022-39253 ————– When relying on the `–local` clone optimization, Git dereferences symbolic links in the source repository before creating hardlinks (or copies) of the dereferenced link in the
November 2, 2022
Azul detects Java vulnerabilities in production apps
November 2, 2022
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
November 2, 2022
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
November 2, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
November 2, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
November 2, 2022
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
November 2, 2022
OpenSSL downgrades horror bug after week of panic, hype
November 1, 2022
3 primo cloud computing jobs in 2023
November 1, 2022
Trick or treat? Stay so cyber‑safe it’s scary – not just on Halloween
Gather around, folks, to learn about some of the ghastliest tricks used by criminals online and how you can avoid security horrors this Halloween and beyond The post Trick or treat? Stay so cyber‑safe it’s scary – not just on Halloween appeared first on WeLiveSecurity
November 1, 2022
SHA-3 code execution bug patched in PHP – check your version!
November 1, 2022
Several security issues were fixed in OpenSSL.
November 1, 2022
Several security issues were fixed in OpenSSL.
November 1, 2022
**PHP version 8.0.25** (27 Oct 2022) **GD:** * Fixed bug php#81739: OOB read due to insufficient input validation in imageloadfont(). (**CVE-2022-31630**) (cmb) **Hash:** * Fixed bug php#81738: buffer overflow in hash_update() on long parameter. (**CVE-2022-37454**) (nicky at mouha dot be) **Session:** * Fixed bug [GH-9583](https://github.com/php/php-src/issues/9583)
November 1, 2022
**PHP version 8.0.25** (27 Oct 2022) **GD:** * Fixed bug php#81739: OOB read due to insufficient input validation in imageloadfont(). (**CVE-2022-31630**) (cmb) **Hash:** * Fixed bug php#81738: buffer overflow in hash_update() on long parameter. (**CVE-2022-37454**) (nicky at mouha dot be) **Session:** * Fixed bug [GH-9583](https://github.com/php/php-src/issues/9583)
November 1, 2022
New upstream release fixing CVE-2022-3515
November 1, 2022
New upstream release fixing CVE-2022-3515
November 1, 2022
security update
October 31, 2022
Psychotherapy extortion suspect: arrest warrant issued
October 31, 2022
Ordinary web access request or command to malware?
October 31, 2022
Libtasn1 could cause a crash when processing certain inputs.
October 31, 2022
An update that fixes one vulnerability is now available.
October 31, 2022
An update that fixes 6 vulnerabilities is now available.
October 31, 2022
An update that fixes one vulnerability is now available.
October 31, 2022
An update that fixes one vulnerability is now available.
October 31, 2022
An update that fixes 6 vulnerabilities is now available.
October 31, 2022
Apple patches actively exploited iPhone, iPad kernel vulns
October 31, 2022
Singapore hosts ICS/OT cybersecurity training extravaganza
October 31, 2022
security update
October 30, 2022
security update
October 30, 2022
security update
October 30, 2022
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2021-43980
October 30, 2022
It was discovered that Apache Batik, a SVG library for Java, allowed attackers to run arbitrary Java code by processing a malicious SVG file. For the stable distribution (bullseye), these problems have been fixed in
October 30, 2022
A security issue was discovered in Chromium, which could result in the execution of arbitrary code. For the stable distribution (bullseye), this problem has been fixed in
October 30, 2022
It was discovered that libxml2, the GNOME XML library, was vulnerable to integer overflows and memory corruption. CVE-2022-40303
October 30, 2022
A heap use-after-free vulnerability after overeager destruction of a shared DTD in the XML_ExternalEntityParserCreate function in Expat, an XML parsing C library, may result in denial of service or potentially the execution of arbitrary code.
October 30, 2022
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For Debian 10 buster, these problems have been fixed in version
October 30, 2022
Courts vs. cybercrime – Week in security with Tony Anscombe
A look at a recent string of law enforcement actions directed against (in some cases suspected) perpetrators of various types of cybercrime The post Courts vs. cybercrime – Week in security with Tony Anscombe appeared first on WeLiveSecurity
October 29, 2022
Chrome issues urgent zero-day fix – update now!
October 29, 2022
It was discovered that Apache Batik, a SVG library for Java, allowed attackers to run arbitrary Java code by processing a malicious SVG file. For Debian 10 buster, these problems have been fixed in version
October 29, 2022
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
October 29, 2022
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
October 29, 2022
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
October 29, 2022
An issue has been found in openvswitch, a software-based, Ethernet virtual switch.
October 29, 2022
An issue has been found in ncurses, a collection of shared libraries for terminal handling. This issue is about an out-of-bounds read in convert_strings in the
October 29, 2022
security update
October 28, 2022
Why your phone is slow – and how to speed it up
You probably don’t have to ditch your phone just yet – try these simple tips and tricks to make any Android device or iPhone run faster The post Why your phone is slow – and how to speed it up appeared first on WeLiveSecurity
October 28, 2022
Multiple vulnerabilities were discovered in Django, a popular Python-based web development framework: * CVE-2020-24583: Fix incorrect permissions on intermediate-level
October 28, 2022
The top cloud cyber security threats unpacked
October 28, 2022
Post-quantum cryptography: Hash-based signatures
October 28, 2022
3 primo cloud gigs in 2023
October 28, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
October 28, 2022
The container bci/rust was updated. The following patches have been included in this update:
October 28, 2022