eterm, an enlightened terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q).
June 9, 2021
Red Hat OpenShift Container Platform release 3.11.452 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 3.11.
June 9, 2021
DarkSide Pwned Colonial With Old VPN Password
June 9, 2021
An update that fixes three vulnerabilities is now available.
June 9, 2021
Identity and access in the DevSecOps life cycle
June 9, 2021
Several security issues were fixed in Intel Microcode.
June 9, 2021
Lewd Phishing Lures Aimed at Business Explode
June 8, 2021
TrickBot Coder Faces Decades in Prison
June 8, 2021
Google Patches Critical Android RCE Bug
June 8, 2021
Hundreds of suspected criminals arrested after being tricked into using FBI‑run chat app
Law enforcement around the world used a messaging app called AN0M to monitor the communications of alleged criminals The post Hundreds of suspected criminals arrested after being tricked into using FBI‑run chat app appeared first on WeLiveSecurity
June 8, 2021
‘An0m’ Encrypted-Chat Sting Leads to Arrest of 800
June 8, 2021
Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 Mozilla developers Gabriele Svelto, Anny Gakhokidze, Alexandru Michis, Christian Holler reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been […]
June 8, 2021
Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file (CVE-2021-30145). References: – https://bugs.mageia.org/show_bug.cgi?id=29058 – https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QVXB4F67QODLPKYBZX7SBXTE7ESGKGOD/
June 8, 2021
This update patches the vendored `smallvec` Rust crate in librsvg to fix a security vulnerability: The Iterator implementation mishandles destructors, leading to a double free (CVE-2021-25900). References:
June 8, 2021
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability (CVE-2021-20193). References: – https://bugs.mageia.org/show_bug.cgi?id=29049 – https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRDSUUE3LUKBDRLPB7GTT5QZRPV5J7O4/
June 8, 2021
Exponential entity expansion attack bypasses all existing protection mechanisms. (CVE-2021-3541). References: – https://bugs.mageia.org/show_bug.cgi?id=29039 – https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/NYSYJVWYEQHFG2TBIQJRJ5COUR5LNFJJ/
June 8, 2021
A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a […]
June 8, 2021
FBI Claws Back Millions of DarkSide’s Ransom Profits
June 7, 2021
Bad Apple: App Store Rife with Fraud, Fleeceware
June 7, 2021
USN-4937-1 introduced a regression in GNOME Autoar.
June 7, 2021
USN-4969-1 introduced a regression in DHCP.
June 7, 2021
Go fuzz to catch hard-to-find bugs in Go
June 7, 2021
Hacking space: How to pwn a satellite
Hacking an orbiting satellite is not light years away – here’s how things can go wrong in outer space The post Hacking space: How to pwn a satellite appeared first on WeLiveSecurity
June 7, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 7, 2021
An update for libwebp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 7, 2021
An update that fixes one vulnerability is now available.
June 7, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 7, 2021
An update that fixes one vulnerability is now available.
June 6, 2021
Multiple security issues have been discovered in libwebp CVE-2018-25009
June 6, 2021
An update that solves 12 vulnerabilities and has 23 fixes is now available.
June 6, 2021
An update that fixes 21 vulnerabilities is now available.
June 5, 2021
Several security issues were fixed in the Linux kernel.
June 5, 2021
security update
June 5, 2021
New version 3.4.5, Fix for CVE-2021-22207.
June 4, 2021
Fix for CVE-2021-25217
June 4, 2021
New version 3.4.5, Fix for CVE-2021-22207.
June 4, 2021
security update
June 4, 2021
Cyberattack Suspected in Cox TV and Radio Outages
June 4, 2021
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. In adddition two security issues were addressed in the OpenPGP support.
June 4, 2021
Zero‑day in popular WordPress plugin exploited to take over websites
Websites using Fancy Product Designer are susceptible to remote code execution attacks even if the plugin is deactivated The post Zero‑day in popular WordPress plugin exploited to take over websites appeared first on WeLiveSecurity
June 4, 2021
REvil Ransomware Gang Spill Details on US Attacks
June 4, 2021
An update that fixes one vulnerability is now available.
June 4, 2021
Is it possible to automate all of cloud operations?
June 4, 2021
Apply fix for CVE-2021-3500. —- Apply fix for CVE-2021-32490, CVE-2021-32491, CVE-2021-32492, CVE-2021-32493
June 3, 2021
Backport fixes for CVE-2021-32617, CVE-2021-29623.
June 3, 2021
Upgrade to upstream security release 3.7.4
June 3, 2021
Apply fix for CVE-2021-3500. —- Apply fix for CVE-2021-32490, CVE-2021-32491, CVE-2021-32492, CVE-2021-32493
June 3, 2021
Backport fixes for CVE-2021-32617, CVE-2021-29623.
June 3, 2021
security update
June 3, 2021
Google PPC Ads Used to Deliver Infostealers
June 3, 2021
Exchange Servers Targeted by ‘Epsilon Red’ Malware
June 3, 2021
ESET Threat Report T1 2021
A view of the T1 2021 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report T1 2021 appeared first on WeLiveSecurity
June 3, 2021
Podcast: The State of Ransomware
June 2, 2021
Effective Adoption of SASE in 2021
June 2, 2021
security update
June 2, 2021