May 9, 2020
– Release 0.24.1
May 9, 2020
**Version 1.4.4** This is a **service and security update** to the stable version 1.4 of Roundcube Webmail. It contains four fixes for recently reported security vulnerabilities as well a number of general improvements from our issue tracker. – Fix bug where attachments with Content-Id were attached to the message on reply (#7122) – Fix identity […]
May 9, 2020
**Version 1.4.4** This is a **service and security update** to the stable version 1.4 of Roundcube Webmail. It contains four fixes for recently reported security vulnerabilities as well a number of general improvements from our issue tracker. – Fix bug where attachments with Content-Id were attached to the message on reply (#7122) – Fix identity […]
May 8, 2020
– Release 0.24.1
May 8, 2020
**Version 1.4.4** This is a **service and security update** to the stable version 1.4 of Roundcube Webmail. It contains four fixes for recently reported security vulnerabilities as well a number of general improvements from our issue tracker. – Fix bug where attachments with Content-Id were attached to the message on reply (#7122) – Fix identity […]
May 8, 2020
security update
May 8, 2020
Black Hat USA, DEF CON 28 Go Virtual
May 8, 2020
Digital transformation could be accelerated by COVID‑19
The pandemic has highlighted the need for businesses to act with alacrity and prepare for the long haul – and to do so with cybersecurity in mind The post Digital transformation could be accelerated by COVID‑19 appeared first on WeLiveSecurity
May 8, 2020
5 common password mistakes you should avoid
Password recycling or using easy-to-guess passwords are just two common mistakes you may be making when protecting your digital accounts The post 5 common password mistakes you should avoid appeared first on WeLiveSecurity
May 8, 2020
Report: Microsoft’s GitHub Account Gets Hacked
May 8, 2020
Updated libvncserver packages fix security vulnerability: libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value (CVE-2019-20788).
May 8, 2020
Updated roundcubemail packages fix security vulnerabilities: – Cross-Site Scripting (XSS) via malicious HTML content (CVE-2020-12625) – CSRF attack can cause an authenticated user to be logged out
May 8, 2020
Updated samba packages fix security vulnerabilities: A client combining the ‘ASQ’ and ‘Paged Results’ LDAP controls can cause a use-after-free in Samba’s AD DC LDAP server (CVE-2020-10700).
May 8, 2020
Updated qt4 packages fix security vulnerabilities: A double-free or corruption during parsing of a specially crafted illegal XML document (CVE-2018-15518).
May 8, 2020
Multiple security issues were discovered in the microdns plugin of the VLC media player, which could result in denial of service or potentially the execution of arbitrary code via malicious mDNS packets (CVE-2020-6071, CVE-2020-6072, CVE-2020-6073, CVE-2020-6077, CVE-2020-6078, CVE-2020-6079, CVE-2020-6080).
May 8, 2020
Updated matio packages fix a security vulnerability: Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c (CVE-2019-13107).
May 8, 2020
security update
May 7, 2020
security update
May 7, 2020
security update
May 7, 2020
How to customize crypto policies in RHEL 8.2
May 7, 2020
Police nab InfinityBlack hackers
May 7, 2020
Update to 2.53.2 If you have Lightning and/or Chatzilla extensions previously disabled, they are enabled after the update. Disable it again if needed (in about:addons), or remove completely (which can improve startup time).
May 7, 2020
Update to Samba 4.11.8
May 7, 2020
Update to Samba 4.11.8
May 7, 2020
ceph-14.2.9 GA Security fix for CVE-2020-1760 ceph: header-splitting in RGW GetObject has a possible XSS Security fix for CVE-2020-1759 ceph: secure mode of msgr2 breaks both confidentiality and integrity aspects for long-lived sessions
May 7, 2020
Update to Samba 4.10.15
May 6, 2020
Update to Samba 4.10.15
May 6, 2020
security update
May 6, 2020
security update
May 6, 2020
Almost a million WordPress websites targeted in massive campaign
An unknown threat actor is exploiting vulnerabilities in plugins for which patches have been available for months, or even years The post Almost a million WordPress websites targeted in massive campaign appeared first on WeLiveSecurity
May 6, 2020
Professional data leakage: How did that security vendor get my personal data?
…and why are they selling it to other security vendors and product testers? The post Professional data leakage: How did that security vendor get my personal data? appeared first on WeLiveSecurity
May 6, 2020
Microsoft Shells Out $100K for IoT Security
May 6, 2020
An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 6, 2020
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 6, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 6, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 6, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 6, 2020
Several vulnerabilities were discovered in WordPress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cross-Site Request Forgery (CSRF) attacks, create files on the server, disclose private information, create open
May 6, 2020
security update
May 6, 2020
security update
May 6, 2020
VPN Concerns with Unplanned Remote Employees
May 5, 2020
An update that solves one vulnerability and has three fixes is now available.
May 5, 2020
An update that fixes three vulnerabilities is now available.
May 5, 2020
Ghost blogging platform servers hacked to mine cryptocurrency
Ghost wasn’t the only victim of break-ins over the weekend that exploited critical holes in infrastructure automation software for which patches were available The post Ghost blogging platform servers hacked to mine cryptocurrency appeared first on WeLiveSecurity
May 5, 2020
New Kaiji Botnet Targets IoT, Linux Devices
May 5, 2020