May 29, 2020
git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak (CVE-2020-11008) SL7 x86_64 git-1.8.3.1-23.el7_8.x86_64.rpm git-daemon-1.8.3.1-23.el7_8.x86_64.rpm git-debuginfo-1.8.3.1-23.el7_8.x86_64.rpm git-gnome-keyring-1.8.3.1-23.el7_8.x86_64.rpm git-svn-1.8.3.1-23.el7_8.x86_64.rpm noarch emacs-git-1.8.3.1-23.el7_8.noarch.rpm [More…]
May 29, 2020
## Python 3.8.3 This is the third maintenance release of Python 3.8. See [the c hangelog](https://docs.python.org/release/3.8.3/whatsnew/changelog.html#changelo g) for details. Contains the security fix for CVE-2020-8492.
May 28, 2020
Hackers Compromise Cisco Servers Via SaltStack Flaws
May 28, 2020
An update that fixes three vulnerabilities is now available.
May 28, 2020
USN-4369-1 introduced a regression in the Linux kernel.
May 28, 2020
USN-4367-1 introduced a regression in the Linux kernel.
May 28, 2020
Critical Android flaw lets attackers hijack almost any app, steal data
Left unpatched, the vulnerability could expose almost all Android users to the risk of having their personal data intercepted by attackers The post Critical Android flaw lets attackers hijack almost any app, steal data appeared first on WeLiveSecurity
May 28, 2020
Microsoft warns of PonyFinal ransomware attacks
May 28, 2020
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine.
May 28, 2020
Inside a ransomware gang’s attack toolbox
May 28, 2020
NetWalker ransomware – what you need to know
May 28, 2020
An update for freerdp is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 28, 2020
An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 28, 2020
Various minor vulnerabilities have been addredd in libexif, a library to parse EXIF metadata files.
May 28, 2020
This is a security update for JBoss EAP Continuous Delivery 19. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 28, 2020
An update that fixes 5 vulnerabilities is now available.
May 28, 2020
Smashing Security podcast #180: Taking care of Clare
May 28, 2020
security update
May 27, 2020
security update
May 27, 2020
From Agent.BTZ to ComRAT v4: A ten‑year journey
Turla has updated its ComRAT backdoor and now uses the Gmail web interface for Command and Control The post From Agent.BTZ to ComRAT v4: A ten‑year journey appeared first on WeLiveSecurity
May 27, 2020
An update that fixes three vulnerabilities is now available.
May 27, 2020
Several security issues were fixed in Unbound.
May 27, 2020
Google may soon add end-to-end encryption for RCS
May 27, 2020
Updated transmission packages fix security vulnerability: Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent
May 27, 2020
Updated sleuthkit packages fix security vulnerabilities: An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table (CVE-2019-14532).
May 27, 2020
Updated log4net packages fix security vulnerability This patch fixes a security vulnerabiliy reported by Karthik Balasundaram. The security vulnerability was found in the way how log4net parses xml configuration files where it allowed to process XML External Entity Processing. An attacker could use
May 27, 2020
Advisory text to describe the update. Wrap lines at ~75 chars. Updated dojo package fixes security vulnerabilities: In affected versions of dojo, the deepCopy method is vulnerable to
May 27, 2020
Crooks threaten to leak customer data stolen from e‑commerce sites
A hack-and-extort campaign takes aim at poorly secured databases replete with customer information that can be exploited for further attacks The post Crooks threaten to leak customer data stolen from e‑commerce sites appeared first on WeLiveSecurity
May 26, 2020
Two years later, has GDPR fulfilled its promise?
Has the landmark law helped build a culture of privacy in organizations and have consumers become more wary of sharing their personal data? The post Two years later, has GDPR fulfilled its promise? appeared first on WeLiveSecurity
May 26, 2020
New iPhone jailbreak released
May 26, 2020
Turla APT Revamps One of Its Go-To Spy Tools
May 26, 2020
Docker Desktop danger discovered, patch now
May 26, 2020
An update that fixes one vulnerability is now available.
May 26, 2020
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 26, 2020
Reading Time: ~ 2 min. Our 2020 Threat Report shows increasing risks for businesses and consumers still running Windows 7, which ceased updates, support and patches earlier this year. This creates security gaps that hackers are all too eager to exploit. In fact, according to the report, malware targeting Windows 7 increased by 125%. And […]
May 26, 2020
Several security issues were fixed in Thunderbird.
May 26, 2020
An update for rh-maven35-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 26, 2020
An update that fixes one vulnerability is now available.
May 26, 2020
An update that fixes one vulnerability is now available.
May 26, 2020
This microcode updates provides new microcode versions for the following Intel Ice Lake and Sandy Bride family processors: Processor Stepping Model Update Name – ICL-U/Y D1 6-7e-5/80 00000046->00000078 Core Gen10 Mobile
May 25, 2020
An update that contains security fixes can now be installed.
May 25, 2020
### python-markdown2 2.3.9 ### – [pull #335] Added header support for wiki tables – [pull #336] Reset _toc when convert is run – [pull #353] XSS fix – [pull #350] XSS fix
May 24, 2020
An update that fixes one vulnerability is now available.
May 24, 2020
The 5.6.14 stable kernel update contains a number of important fixes across the tree
May 24, 2020
### python-markdown2 2.3.9 ### – [pull #335] Added header support for wiki tables – [pull #336] Reset _toc when convert is run – [pull #353] XSS fix – [pull #350] XSS fix
May 24, 2020
An update that fixes two vulnerabilities is now available.
May 24, 2020
Georgi Guninski and the Qualys Research Labs discovered multiple vulnerabilities in qmail (shipped in Debian as netqmail with additional patches) which could result in the execution of arbitrary code, bypass of mail address verification and a local information leak whether a file
May 24, 2020
Security fix for CVE-2018-1285
May 24, 2020
Update to 8.10 release (CVE-2020-12823)
May 24, 2020
security update
May 24, 2020
Security fix for CVE-2020-12662 and CVE-2020-12663
May 23, 2020
– CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn’t start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to crash the submission service without authentication. – CVE-2020-10958: lmtp/submission:
May 23, 2020