LinuxSecurity.com: Security Report Summary
September 30, 2016
LinuxSecurity.com: The system could be made unavailable under certain conditions.
September 30, 2016
security update
September 28, 2016
LinuxSecurity.com: Security Report Summary
September 28, 2016
LinuxSecurity.com: An update for kvm is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]
September 28, 2016
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact [More…]
September 28, 2016
LinuxSecurity.com: An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]
September 28, 2016
LinuxSecurity.com: An update for bind is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]
September 28, 2016
security update
September 27, 2016
LinuxSecurity.com: New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…]
September 27, 2016
LinuxSecurity.com: Security Report Summary
September 27, 2016
LinuxSecurity.com: New openssl packages are available for Slackware 14.2 and -current to fix a security issue. [More Info…]
September 27, 2016
LinuxSecurity.com: Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition.
September 27, 2016
LinuxSecurity.com: Security Report Summary
September 27, 2016
LinuxSecurity.com: Security Report Summary
September 27, 2016
LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]
September 27, 2016
LinuxSecurity.com: Security Report Summary
September 27, 2016
LinuxSecurity.com: Security Report Summary
September 27, 2016
Bug that hit Firefox and Tor browsers was hard to spot-now we know why
September 27, 2016
Google pulls Krebs on Security out of the abyss
September 27, 2016
LinuxSecurity.com: Security Report Summary
September 27, 2016
security update
September 27, 2016
security update
September 25, 2016
security update
September 25, 2016
security update
September 24, 2016
Matthew Garrett Explains How to Increase Security at Boot Time
September 24, 2016
Krebs on Security booted off Akamai network after DDoS attack proves pricey
September 24, 2016
security update
September 23, 2016
security update
September 23, 2016
LinuxSecurity.com: Security Report Summary
September 23, 2016
LinuxSecurity.com: Security Report Summary
September 23, 2016
LinuxSecurity.com: New irssi packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]
September 23, 2016
LinuxSecurity.com: New pidgin packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]
September 23, 2016
LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.1, 14.2, and -current to fix security issues. [More Info…]
September 23, 2016
LinuxSecurity.com: Security Report Summary
September 23, 2016
security update
September 22, 2016
LinuxSecurity.com: New pidgin packages are available for Slackware 13.0, 13.1, 13.37, 14.0, and 14.1 to fix security issues. [More Info…]
September 22, 2016
LinuxSecurity.com: New openssl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]
September 22, 2016
Chinese Researchers Hack Tesla S Models, Expose Bugs
September 22, 2016
Florida Man Charged With Hacking Linux Servers
September 22, 2016
security update
September 21, 2016
LinuxSecurity.com: Security Report Summary
September 21, 2016
Secure Docker on Linux or Windows platforms
September 21, 2016
Kali Linux 2016.2 Delivers New Security Testing Options
September 21, 2016
Is Debian the gold standard for Linux security?
September 21, 2016
Russia, Others Indeed Could Hack The Vote
September 21, 2016
LinuxSecurity.com: Several security issues were fixed in the kernel.
September 20, 2016
LinuxSecurity.com: Several security issues were fixed in the kernel.
September 20, 2016
LinuxSecurity.com: Several security issues were fixed in the kernel.
September 20, 2016
LinuxSecurity.com: Several security issues were fixed in the kernel.
September 20, 2016
LinuxSecurity.com: Several security issues were fixed in the kernel.
September 20, 2016
LinuxSecurity.com: The system could be made to run programs as an administrator.
September 20, 2016
LinuxSecurity.com: The system could be made to run programs as an administrator.
September 20, 2016
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…]
September 20, 2016
LinuxSecurity.com: New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…]
September 20, 2016
LinuxSecurity.com: Security Report Summary
September 20, 2016
LinuxSecurity.com: Security Report Summary
September 20, 2016
LinuxSecurity.com: Python Imaging Library could be made to crash if it received specially craftedinput or opened a specially crafted file.
September 20, 2016
Dawid Golunski of LegalHackers discovered that the Tomcat init script performed unsafe file handling, which could result in local privilege escalation. For the stable distribution (jessie), this problem has been fixed in version 8.0.14-1+deb8u3. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your tomcat8 packages.
September 16, 2016
Dawid Golunski of LegalHackers discovered that the Tomcat init script performed unsafe file handling, which could result in local privilege escalation. For the stable distribution (jessie), this problem has been fixed in version 7.0.56-3+deb8u4. We recommend that you upgrade your tomcat7 packages.
September 16, 2016
The Feds Will Soon Be Able to Legally Hack Almost Anyone
September 16, 2016
Pardon Edward Snowden
September 16, 2016
Gmail outage for business users lasted over 12 hours
September 16, 2016
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security, bug fix, and enhancement update Advisory ID: RHSA-2016:1847-01 Product: […]
September 15, 2016
Red Hat: 2016:1875-01: kernel-rt: Important Advisory Posted by Anthony Pell An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: […]
September 15, 2016
Red Hat: 2016:1883-01: kernel-rt: Important Advisory Posted by Anthony Pell An update for kernel-rt is now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: […]
September 15, 2016
Debian: 3667-1: chromium-browser: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3667-1 security@debian.org https://www.debian.org/security/ Michael Gilbert September 15, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : chromium-browser CVE ID : CVE-2016-5170 CVE-2016-5171 CVE-2016-5172 CVE-2016-5173 CVE-2016-5174 CVE-2016-5175 CVE-2016-7395 Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5170 A use-after-free issue […]
September 15, 2016
Debian: 3666-1: mysql-5.5: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3666-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 14, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : mysql-5.5 CVE ID : CVE-2016-6662 Dawid Golunski discovered that the mysqld_safe wrapper provided by the MySQL database server insufficiently restricted the load path for custom […]
September 15, 2016
Why hackers hack: Is it all about the money?
September 15, 2016
Cybersecurity In The Obama Era
September 15, 2016
Hackers found 47 new vulnerabilities in 23 IoT devices at DEF CON
September 15, 2016
NTP reflection attacks hit record high
September 15, 2016
Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5170 A use-after-free issue was discovered in Blink/Webkit. CVE-2016-5171 Another use-after-free issue was discovered in Blink/Webkit. CVE-2016-5172 Choongwoo Han discovered an information leak in the v8 javascript library. CVE-2016-5173 A resource bypass issue was discovered in extensions. CVE-2016-5174 Andrey Kovalev discoved a way to bypass […]
September 15, 2016
It was discovered that there was a CSRF vulnerability in mailman, a web-based mailing list manager, which could allow an attacker to obtain a user’s password. For the stable distribution (jessie), this problem has been fixed in version 1:2.1.18-2+deb8u1. For the unstable distribution (sid), this problem has been fixed in version 1:2.1.23-1. We recommend that […]
September 15, 2016
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2016:1865-01 Product: Red Hat Enterprise Linux Supplementary Advisory […]
September 14, 2016
Slackware: 2016-257-01: mariadb / mysql: Security Update Posted by Anthony Pell New mariadb or mysql packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…] [slackware-security] mariadb / mysql (SSA:2016-257-01) New mariadb or mysql packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a […]
September 14, 2016
Surveillance Middlemen Make it Harder to Track Who’s Responsible For Hacks
September 14, 2016
Long-Secret Stingray Manuals Detail How Police Can Spy on Phones
September 14, 2016
Dawid Golunski discovered that the mysqld_safe wrapper provided by the MySQL database server insufficiently restricted the load path for custom malloc implementations, which could result in privilege escalation. The vulnerability was addressed by upgrading MySQL to the new upstream version 5.5.52, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly […]
September 14, 2016
Red Hat: 2016:1858-01: ruby193-rubygem-actionpack: Moderate Advisory Posted by Anthony Pell An update for ruby193-rubygem-actionpack is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ruby193-rubygem-actionpack security update Advisory ID: RHSA-2016:1858-01 Product: Red Hat Software Collections […]
September 13, 2016
Red Hat: 2016:1857-01: ror40-rubygem-actionpack: Moderate Advisory Posted by Anthony Pell An update for ror40-rubygem-actionpack is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ror40-rubygem-actionpack security update Advisory ID: RHSA-2016:1857-01 Product: Red Hat Software Collections […]
September 13, 2016
Red Hat: 2016:1855-01: rh-ror42: Moderate Advisory Posted by Anthony Pell An update for rh-ror42-rubygem-actionview, rh-ror42-rubygem-activerecord, and rh-ror42-rubygem-actionpack is now available for Red Hat Software Collections. [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-ror42 security update Advisory ID: RHSA-2016:1855-01 Product: Red Hat Software Collections Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-1855.html Issue date: 2016-09-13 CVE Names: CVE-2016-6316 CVE-2016-6317 […]
September 13, 2016
Red Hat: 2016:1856-01: rh-ror41-rubygem-actionview: Moderate Advisory Posted by Anthony Pell An update for rh-ror41-rubygem-actionview is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-ror41-rubygem-actionview security update Advisory ID: RHSA-2016:1856-01 Product: Red Hat Software Collections […]
September 13, 2016
An update for libarchive is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: libarchive security update Advisory ID: RHSA-2016:1844-01 Product: Red Hat Enterprise Linux […]
September 13, 2016
An update for libarchive is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: libarchive security update Advisory ID: RHSA-2016:1850-01 Product: Red Hat Enterprise Linux […]
September 13, 2016
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: chromium-browser security update Advisory ID: RHSA-2016:1854-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-1854.html Issue date: 2016-09-12 CVE Names: […]
September 13, 2016
Security Solved: Company says their tech renders servers hack proof
September 13, 2016
DDoS Attacks Up by 75 Percent in Q2 2016
September 13, 2016
Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed. For the stable distribution (jessie), these problems have been fixed in version 2.1.0-2+deb8u1. We recommend that you upgrade your openjpeg2 packages.
September 12, 2016
Debian: 3665-1: openjpeg2: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3665-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : openjpeg2 CVE ID : CVE-2015-6581 CVE-2015-8871 CVE-2016-1924 CVE-2016-7163 Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of […]
September 12, 2016
Slackware: 2016-254-01: gnutls: Security Update Posted by Anthony Pell New gnutls packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…] [slackware-security] gnutls (SSA:2016-254-01) New gnutls packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the […]
September 12, 2016
Debian: 3664-1: pdns: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3664-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 10, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : pdns CVE ID : CVE-2016-5426 CVE-2016-5427 CVE-2016-6172 Debian Bug : 830808 Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities […]
September 12, 2016
Debian: 3663-1: xen: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3663-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 09, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : xen CVE ID : CVE-2016-7092 CVE-2016-7094 CVE-2016-7154 Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following […]
September 12, 2016
Ubuntu: 3075-1: Imlib2 vulnerabilities Posted by Anthony Pell Several security issues were fixed in Imlib2. ========================================================================== Ubuntu Security Notice USN-3075-1 September 09, 2016 imlib2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 16.04 LTS – Ubuntu 14.04 LTS – Ubuntu 12.04 LTS Summary: Several security issues were […]
September 12, 2016
Slackware: 2016-252-01: php: Security Update Posted by Anthony Pell New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…] [slackware-security] php (SSA:2016-252-01) New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 […]
September 12, 2016
White House appoints first Federal Chief Information Security Officer
September 10, 2016
WordPress urges users to update now to fix critical security holes
September 10, 2016
This USB stick will fry your unsecured computer
September 10, 2016