May 5, 2022
– New upstream version (100.0) – Fix mozbz#1759137 (ffmpeg crash)
May 4, 2022
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 4, 2022
Several security issues were fixed in OpenSSL.
May 4, 2022
Several security issues were fixed in DPDK.
May 4, 2022
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 4, 2022
Red Hat OpenShift Container Platform release 4.6.57 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6.
May 4, 2022
Passwords have become a common way to access and manage our digital lives. Think of all the accounts you have with different providers. Having a password allows you to securely access your information, pay bills or connect with friends and family on various platforms. However, having a password alone is not enough. Your password for […]
May 3, 2022
security update
May 3, 2022
100 Chromium releases! Of course, at the rate they release now, we’ll probably be at 150 before the end of the year. Anyway, here’s the update. Fixes: CVE-2022-1232 CVE-2022-1305 CVE-2022-1306 CVE-2022-1307 CVE-2022-1308 CVE-2022-1309 CVE-2022-1310 CVE-2022-1311 CVE-2022-1312 CVE-2022-1313 CVE-2022-1314 CVE-2022-1364
May 3, 2022
100 Chromium releases! Of course, at the rate they release now, we’ll probably be at 150 before the end of the year. Anyway, here’s the update. Fixes: CVE-2022-1232 CVE-2022-1305 CVE-2022-1306 CVE-2022-1307 CVE-2022-1308 CVE-2022-1309 CVE-2022-1310 CVE-2022-1311 CVE-2022-1312 CVE-2022-1313 CVE-2022-1314 CVE-2022-1364
May 3, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
May 3, 2022
Several issues were discovered in OpenVPN, a Virtual Private Network server and client, that could lead to authentication bypass when using deferred auth plugins.
May 3, 2022
What’s behind the record‑high number of zero days?
Organizations need to get better at mitigating threats from unknown vulnerabilities, especially as both state-backed operatives and financially-motivated cybercriminals are increasing their activity The post What’s behind the record‑high number of zero days? appeared first on WeLiveSecurity
May 3, 2022
Several security issues were fixed in MySQL.
May 3, 2022
An update that fixes three vulnerabilities is now available.
May 3, 2022
security update
May 2, 2022
SSE kicks the ‘A’ out of SASE
May 2, 2022
Several security issues were fixed in libvirt.
May 2, 2022
libinput could be made to crash or expose sensitive information.
May 2, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
May 2, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
May 2, 2022
Bad Actors Are Maximizing Remote Everything
May 2, 2022
The components for Red Hat OpenShift support for Windows Containers 2.0.5 are now available. This product release includes a moderate security update for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle.
May 2, 2022
Updated Red Hat JBoss Web Server 5.6.2 packages are now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 2, 2022
New pidgin packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue.
May 1, 2022
The newest upstream commit Security fixes for CVE-2022-1381, CVE-2022-1420
May 1, 2022
Fix CVE-2022-29536
May 1, 2022
zgrep applied to a crafted file name with two or more newlines can no longer overwrite an arbitrary, attacker-selected file. reproducer: $ touch foo.gz $ echo foo | gzip > “$(printf ‘|n;e touch pwnedn#.gz’)” $ zgrep foo *.gz (the unfixed version of zgrep creates the file called pwned)
May 1, 2022
An issue has been found in tinyxml, a C++ XML parsing library. Crafted XML messages could lead to an infinite loop in
April 30, 2022
Three issues have been found in libarchive, a multi-format archive and compression library.
April 30, 2022
An update that fixes one vulnerability is now available.
April 30, 2022
An update that fixes four vulnerabilities is now available.
April 30, 2022
An update that fixes one vulnerability is now available.
April 30, 2022
An update that fixes 5 vulnerabilities is now available.
April 30, 2022
TA410 under the microscope – Week in security with Tony Anscombe
Here’s what you should know about FlowingFrog, LookingFrog and JollyFrog – the three teams making up the TA410 espionage umbrella group The post TA410 under the microscope – Week in security with Tony Anscombe appeared first on WeLiveSecurity
April 30, 2022
Call for Contributors with Knowledge of Linux Firewalls!>
April 30, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
April 30, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
April 30, 2022
This vulnerability could potentially be exploited by a local user to execute arbitrary code with root privileges.
April 29, 2022
SDL (Simple DirectMedia Layer) could be made to crash or run programs if it opened a specially crafted file.
April 29, 2022
Ransomware costs show prevention is better than the cure
April 29, 2022
Security Turbulence in the Cloud: Survey Says…
April 29, 2022
Interpol: We can’t arrest our way out of cybercrime
April 29, 2022
Cyberespionage APT Now Identified as Three Separate Actors
April 29, 2022
Elon Musk says Twitter DMs should be end-to-end encrypted
April 29, 2022
Security fixes for CVE-2022-1227, CVE-2022-21698, CVE-2022-27191, CVE-2022-27649
April 29, 2022
Security fix for CVE-2021-28021, CVE-2021-42715, CVE-2021-42716, and CVE-2022-28041
April 29, 2022
Security fix for CVE-2021-25220
April 29, 2022
Security fix for CVE-2018-25032
April 29, 2022
security update
April 28, 2022
A lookback under the TA410 umbrella: Its cyberespionage TTPs and activity
ESET researchers reveal a detailed profile of TA410: we believe this cyberespionage umbrella group consists of three different teams using different toolsets, including a new version of the FlowCloud espionage backdoor discovered by ESET. The post A lookback under the TA410 umbrella: Its cyberespionage TTPs and activity appeared first on WeLiveSecurity
April 28, 2022
Cloudflare stomps huge DDoS attack on crypto platform
April 28, 2022
This kernel-linus update is based on upstream 5.15.35 and fixes at least the following security issues: A denial of service (DOS) issue was found in the Linux kernel smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet
April 28, 2022
This kernel update is based on upstream 5.15.35 and fixes at least the following security issues: A denial of service (DOS) issue was found in the Linux kernel smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet
April 28, 2022
Several security issues were fixed in networkd-dispatcher.
April 28, 2022
Cyberattacks Rage in Ukraine, Support Military Operations
April 28, 2022
An update for zlib is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 28, 2022
An update that solves one vulnerability, contains one feature and has one errata is now available.
April 28, 2022
An update that fixes one vulnerability is now available.
April 28, 2022
Five Eyes nations reveal 2021’s fifteen most-exploited flaws
April 28, 2022
Emotet is Back From ‘Spring Break’ With New Nasty Tricks
April 27, 2022