LinuxSecurity.com: An update that fixes 12 vulnerabilities is now available.
February 26, 2018
LinuxSecurity.com: An update that fixes 12 vulnerabilities is now available.
February 26, 2018
LinuxSecurity.com: New upstream version Security fix for upstream issue 35 https://github.com/milkytracker/MilkyTracker/issues/35
February 25, 2018
LinuxSecurity.com: This update updates QtWebEngine to the 5.10.1 bugfix and security release. QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine component is included in this update. This update includes: * Security fixes from Chromium up to version 64.0.3282.140. Including: CVE-2017-15407, CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15415, CVE-2017-15416,
February 25, 2018
LinuxSecurity.com: New upstream version Security fix for upstream issue 35 https://github.com/milkytracker/MilkyTracker/issues/35
February 25, 2018
LinuxSecurity.com: CVE-2017-13194 Fix for a flaw in libvpx related to odd frame width, which may lead to a denial of service.
February 25, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 25, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2018-001
February 25, 2018
LinuxSecurity.com: It was discovered that there was a remote denial of service vulnerability in the imagemagick graphics library via a specially- crafted TIFF file.
February 25, 2018
LinuxSecurity.com: This update includes the changes in tzdata 2018c for the Perl bindings. For the list of changes, see DLA-1291-1. For Debian 7 “Wheezy”, these problems have been fixed in version
February 24, 2018
LinuxSecurity.com: This update includes the changes in tzdata 2018c. Notable changes are: – S?o Tom? and Pr?ncipe switched from +00 to +01. – Brazil’s DST will now start on November’s first Sunday.
February 24, 2018
LinuxSecurity.com: The package unixodbc before version 2.3.5-1 is vulnerable to arbitrary code execution.
February 24, 2018
LinuxSecurity.com: The package lib32-wavpack before version 5.1.0-2 is vulnerable to arbitrary code execution.
February 24, 2018
LinuxSecurity.com: The package wavpack before version 5.1.0-2 is vulnerable to arbitrary code execution.
February 24, 2018
LinuxSecurity.com: The package phpmyadmin before version 4.7.8-1 is vulnerable to cross- site scripting.
February 24, 2018
security update
February 24, 2018
security update
February 23, 2018
security update
February 23, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-5715
February 23, 2018
LinuxSecurity.com: It was discovered that there was an issue in the CUPS printer framework where remote attackers could execute arbitrary commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding.
February 23, 2018
LinuxSecurity.com: Several security issues were fixed in WavPack.
February 23, 2018
LinuxSecurity.com: This update doesn’t fix a vulnerability in GCC itself, but instead provides support for building retpoline-enabled Linux kernel updates. For the stable distribution (stretch), this problem has been fixed in
February 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 23, 2018
LinuxSecurity.com: On February 22, fixes for CVE-2017-5715 were released into the Ubuntu Xenialkernel version 4.4.0-116.140. This CVE, also known as “Spectre,” is caused by flaws in the design of speculative execution hardware in the computer’sCPU, and could be used to access sensitive information in kernel memory. [More…]
February 23, 2018
LinuxSecurity.com: An update that solves 6 vulnerabilities and has one errata is now available.
February 23, 2018
security update
February 23, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Squid3, a fully featured web proxy cache. The Common Vulnerabilities and Exposures project identifies the following issues:
February 22, 2018
LinuxSecurity.com: It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client: – CVE-2018-7050: Null pointer dereference for an “empty” nick.
February 22, 2018
LinuxSecurity.com: An update that solves 8 vulnerabilities and has 19 fixes is now available.
February 22, 2018
LinuxSecurity.com: The package libmspack before version 1:0.6alpha-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: An update for rh-maven35-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 22, 2018
LinuxSecurity.com: The package strongswan before version 5.6.2-1 is vulnerable to denial of service.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: Security fix for CVE-2018-6942.
February 21, 2018
LinuxSecurity.com: New upstream release, including security fixes for CVE-2016-10713, CVE-2018-6951, CVE-2018-6952.
February 21, 2018
JDK approach to address deserialization Vulnerability
February 21, 2018
LinuxSecurity.com: It was discovered that there was a uncontrolled memory allocation issue in zziplib, a ZIP archive library. Remote attackers could leverage this vulnerability to cause a denial of service via a specially-crafted file.
February 20, 2018
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 20, 2018
security update
February 20, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
February 20, 2018
LinuxSecurity.com: An update that solves 10 vulnerabilities and has two fixes is now available.
February 20, 2018
Oracle open-sources DTrace under the GPL
February 20, 2018
LinuxSecurity.com: A vulnerability has been found in Ruby which may allow for arbitrary command execution.
February 20, 2018
LinuxSecurity.com: A vulnerability in LibreOffice might allow remote attackers to read arbitrary files.
February 20, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.
February 20, 2018
LinuxSecurity.com: Multiple vulnerabilities were found in MySQL, the worst of which may allow remote execution of arbitrary code.
February 20, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 44 fixes is now available.
February 20, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.
February 19, 2018
LinuxSecurity.com: Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at https://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v11.12
February 19, 2018
LinuxSecurity.com: Bind could be made to crash if it received specially crafted network traffic.
February 19, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 19, 2018
security update
February 17, 2018
New EU Privacy Law May Weaken Security
February 17, 2018
Meltdown-Spectre flaws: We’ve found new attack variants, say researchers
February 17, 2018
security update
February 17, 2018
security update
February 17, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following issues:
February 16, 2018
LinuxSecurity.com: Krzysztof Sieluzycki discovered that the notifier for removable devices in the KDE Plasma workspace performed insufficient sanitisation of FAT/VFAT volume labels, which could result in the execution of arbitrary shell commands if a removable device with a malformed disk label is
February 16, 2018
LinuxSecurity.com: BIND, a DNS server implementation, was found to be vulnerable to a denial of service flaw was found in the handling of DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an
February 16, 2018
security update
February 16, 2018
LinuxSecurity.com: The package irssi before version 1.1.1-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.
February 16, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
February 16, 2018
LinuxSecurity.com: Talosintelligence discovered a command injection vulnerability in the gplotMakeOutput function of leptonlib. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary
February 16, 2018
LinuxSecurity.com: An update that solves 10 vulnerabilities and has three fixes is now available.
February 16, 2018
LinuxSecurity.com: An update that solves 16 vulnerabilities and has 12 fixes is now available.
February 16, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
February 16, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
February 16, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
February 16, 2018
LinuxSecurity.com: New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
February 16, 2018
LinuxSecurity.com: Several security issues were fixed in Quagga.
February 16, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following issues:
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
security update
February 15, 2018
security update
February 15, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
February 15, 2018
LinuxSecurity.com: – CVE-2018-1055 Remote arbitrary file disclosure vulnerability via WEBSERVICE formula
February 15, 2018
LinuxSecurity.com: Updated AppStream metadata
February 15, 2018
LinuxSecurity.com: This is an update to Mozilla’s CA certificates list version 2.22, which has been published as part of Mozilla NSS 3.35. For additional details, please refer to the NSS 3.35 release notes: https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
February 15, 2018
Unsecured server exposed thousands of FedEx customer records
February 15, 2018
Hack the Air Force 2.0 uncovers over 100 vulnerabilities
February 15, 2018
Adding Encryption To printk()
February 15, 2018
Managing open-source mobile security and privacy for activists worldwide
February 15, 2018
LinuxSecurity.com: It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deserialization. This allowed an attacker to perform code execution by providing maliciously crafted input.
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
security update
February 15, 2018
LinuxSecurity.com: Two vulnerabilities were discovered in the libraries of the Vorbis audio compression codec, which could result in denial of service or the execution of arbitrary code if a malformed media file is processed.
February 14, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in the Xen hypervisor: CVE-2017-17563
February 14, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Fuse and Red Hat JBoss A-MQ. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 14, 2018
LinuxSecurity.com: FreeType could be made to crash if it opened a specially crafted file.
February 14, 2018