LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
July 6, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
July 6, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
July 6, 2018
LinuxSecurity.com: It was discovered that the Soup HTTP library performed insuffient validation of cookie requests which could result in an out-of-bounds memory read.
July 5, 2018
LinuxSecurity.com: The system could be made to expose sensitive information.
July 5, 2018
LinuxSecurity.com: Some security vulnerabilities were found in Mercurial which allow authenticated users to trigger arbitrary code execution and unauthorized data access in certain server configuration. Malformed patches and repositories can also lead to crashes and arbitrary code
July 5, 2018
LinuxSecurity.com: New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues.
July 5, 2018
LinuxSecurity.com: Archive Zip module could be made to expose sensitive information if it received a specially crafted input.
July 5, 2018
LinuxSecurity.com: Archive Zip module could be made to expose sensitive information if it received a specially crafted input.
July 5, 2018
Risk Level: Very Low. Type: Trojan.
July 5, 2018
Five tips for pentesters in iOS
Recommendations for pentesters looking for security flaws in iOS applications made by developers The post Five tips for pentesters in iOS appeared first on WeLiveSecurity
July 5, 2018
Tor-linked nonprofit raided by police
July 5, 2018
Gentoo hack caused by three rookie mistakes
July 5, 2018
Thunderbird gets its EFAIL patch
July 5, 2018
Chrome, Firefox pull invasive browser extension
July 5, 2018
Top 7 Most Popular and Best Cyber Forensics Tools
July 4, 2018
security update
July 4, 2018
security update
July 4, 2018
LinuxSecurity.com: Several security issues were fixed in the kernel.
July 4, 2018
LinuxSecurity.com: Several security issues were fixed in Exiv2.
July 4, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 4, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 4, 2018
Welcome to a New Look for Threatpost
July 4, 2018
ThreatList: Top Summer DDoS Trends
July 4, 2018
LinuxSecurity.com: The package git-annex before version 6.20180626-1 is vulnerable to multiple issues including arbitrary filesystem access and information disclosure.
July 4, 2018
LinuxSecurity.com: The package gitlab before version 11.0.1-1 is vulnerable to multiple issues including cross-site scripting and insufficient validation.
July 4, 2018
Elderly scam victims are too embarrassed to speak up
July 4, 2018
Going on vacation? Five things to do before you leave
You’ve set up an out-of-office auto-responder and packed your stuff, but have you done all of your “homework” before you rush out the front door for that well-deserved time off? The post Going on vacation? Five things to do before you leave appeared first on WeLiveSecurity
July 4, 2018
Facebook accidentally unblocks people
July 4, 2018
Someone else is reading your Gmails
July 4, 2018
NHS Developer Error Leads to Data Leak
July 4, 2018
Ransomware: Not dead, just getting a lot sneakier
July 4, 2018
Huawei enterprise comms kit has a TLS crypto bug
July 4, 2018
LinuxSecurity.com: Fabian Henneke discovered a cross-site scripting vulnerability in the password change form of GOsa, a web-based LDAP administration program. For the stable distribution (stretch), this problem has been fixed in
July 3, 2018
LinuxSecurity.com: Several vulnerabilites have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of service or the execution of arbitrary code if a malformed file is parsed.
July 3, 2018
LinuxSecurity.com: libsoup could be made to crash if it received a specially crafted input.
July 3, 2018
LinuxSecurity.com: Two vulnerabilities affecting the cups printing server were found which can lead to arbitrary IPP command execution and denial of service.
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2001
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1979
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1997
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1965
July 3, 2018
Typeform data breach exposes users of many websites
July 3, 2018
Britain’s tax authority reports takedown of record 20,000 fake sites
Her Majesty’s Revenue & Customs (HMRC) is “consistently the most abused government brand”, according to the National Cyber Security Centre (NCSC) The post Britain’s tax authority reports takedown of record 20,000 fake sites appeared first on WeLiveSecurity
July 3, 2018
HMRC: 29% Increase in Malicious Site Deactivations
July 3, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: glibc: Buffer overflow in glob with GLOB_TILDE (CVE-2017-15670) * glibc: Buffer overflow during unescaping of user names with the ~ operator (CVE-2017-15804) SL6 x86_64 glibc-2.12-1.212.el6.i686.rpm glibc-2.12-1.212.el6.x86_64.rpm glibc-common-2.12-1.212.el6.x86_64.rpm glibc-debuginfo-2.12-1.212.el6.i686.rpm glibc-debuginfo-2.12-1.212.el6.x86_64.rpm glibc-debuginfo- [More…]
July 2, 2018
LinuxSecurity.com: libvirt: Resource exhaustion via qemuMonitorIORead() method (CVE-2018-5748) * libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent (CVE-2018-1064) SL6 x86_64 libvirt-0.10.2-64.el6.x86_64.rpm libvirt-client-0.10.2-64.el6.i686.rpm libvirt-client-0.10.2-64.el6.x86_64.rpm libvirt-debuginfo-0.10.2-64.el6.i686.rpm libvirt-debuginfo-0.10.2-64.el6.x86_64.rpm [More…]
July 2, 2018
LinuxSecurity.com: samba: Null pointer indirection in printer server process (CVE-2018-1050) SL6 x86_64 libsmbclient-3.6.23-51.el6.i686.rpm libsmbclient-3.6.23-51.el6.x86_64.rpm samba-client-3.6.23-51.el6.x86_64.rpm samba-common-3.6.23-51.el6.i686.rpm samba-common-3.6.23-51.el6.x86_64.rpm samba-debuginfo-3.6.23-51.el6.i686.rpm samba-debuginfo-3.6.23-51.el6.x86_64.rpm samba-winb [More…]
July 2, 2018
LinuxSecurity.com: zsh: Stack-based buffer overflow in gen_matches_files() at compctl.c (CVE-2018-1083) * zsh: buffer overflow when scanning very long directory paths for symbolic links (CVE-2014-10072) * zsh: buffer overrun in symlinks (CVE-2017-18206) * zsh: buffer overflow in utils.c:checkmailpath() can lead to local arbitrary code execution (CVE-2018-1100) SL6 x86_64 zsh-4.3.11-8.el6.x86_64.rpm [More…]
July 2, 2018
Risk Level: Very Low.
July 2, 2018