Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. (CVE-2022-0561)
March 6, 2022
An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity. (CVE-2021-36370)
March 6, 2022
An update that fixes one vulnerability is now available.
March 5, 2022
An update that fixes 15 vulnerabilities is now available.
March 5, 2022
An update that fixes two vulnerabilities is now available.
March 5, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
March 5, 2022
Leaked stolen Nvidia cert can sign Windows malware
March 5, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
March 5, 2022
Massive Meris Botnet Embeds Ransomware Notes from REvil
March 4, 2022
security update
March 4, 2022
Facebook is vile, but banning it in Russia is wrong
March 4, 2022
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
March 4, 2022
ESET Research Podcast: Ukraine’s past and present cyberwar
Press play to hear Aryeh Goretsky, Jean-Ian Boutin and Robert Lipovsky discuss how recent malware attacks in Ukraine tie into years of cyberattacks against the country The post ESET Research Podcast: Ukraine’s past and present cyberwar appeared first on WeLiveSecurity
March 4, 2022
Free HermeticRansom Ransomware Decryptor Released
March 4, 2022
BBC points Russians to the Tor version of itself
March 4, 2022
TikTok under investigation in US over harms to children
March 4, 2022
An update that solves two vulnerabilities, contains two features and has two fixes is now available.
March 4, 2022
An update that fixes two vulnerabilities is now available.
March 4, 2022
An update that fixes 5 vulnerabilities is now available.
March 4, 2022
Update to 2.53.11 Default version of Firefox for the User-Agent string has now been changed to 68.0 . This should provide better compatibility with modern sites. The value can be changed in Preferences–>Advanced–>HTTP Networking . Besides that, an alternate site-specific override machanism is now activated. (The idea comes from Waterfox-Classic project). The file ua-update.json in […]
March 4, 2022
Update to 2.34.6: * Fix accessibility not working when the Bubblewrap sandbox is enabled. * Fix rendering of scrollbars when overlay scrollbars are disabled. * Fix several crashes and rendering issues. * Security fixes: CVE-2022-22620 —- Update to 2.34.5: * Improve VP8 codec selection when using GStreamer 1.20. * Fix connecting to the accessiblity bus […]
March 4, 2022
An update that fixes 12 vulnerabilities is now available.
March 4, 2022
Phishing Campaign Targeted Those Aiding Ukraine Refugees
March 3, 2022
Russia Leaks Data From a Thousand Cuts–Podcast
March 3, 2022
Securing Data With a Frenzied Remote Workforce–Podcast
March 3, 2022
Zero trust? Not yet a must for most IT departments
March 3, 2022
– Upstream update to 2.4.0 – Fixed CVE-2021-42072 (RHBZ 2022094) – BuildDepends added: gmock-devel, gulrak-filesystem-devel – Address the issue from pull request #1, thanks aekoroglu.
March 3, 2022
– Upstream update to 2.4.0 – Fixed CVE-2021-42072 (RHBZ 2022094) – BuildDepends added: gmock-devel, gulrak-filesystem-devel – Address the issue from pull request #1, thanks aekoroglu.
March 3, 2022
Security fix for CVE-2021-4115
March 3, 2022
containerd would allow unintended access to files over the network.
March 3, 2022
Several security issues were fixed in PHP.
March 3, 2022
HAProxy could be made to stop responding if it received specially crafted network traffic.
March 3, 2022
Who deleted the database? Find out with Teleport
March 2, 2022
TeaBot Trojan Haunts Google Play Store, Again
March 2, 2022
security update
March 2, 2022
Conti Ransomware Decryptor, TrickBot Source Code Leaked
March 2, 2022
Conti ransomware group’s source code leaked
March 2, 2022
EU, US close to replacing defunct Privacy Shield II
March 2, 2022
The zero-password future can’t come soon enough
March 2, 2022
Security update for php. See changelog for details. References: – https://bugs.mageia.org/show_bug.cgi?id=30056 – https://www.php.net/ChangeLog-8.php#8.0.16
March 2, 2022
OpenShift Logging bug fix and security update (5.2.8) Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 2, 2022
An update for cyrus-sasl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 2, 2022
An update for cyrus-sasl is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 2, 2022
Update to 6.0.2
March 2, 2022
Innovation and the Roots of Progress
If you look back at the long arc of history, it’s clear that one of the most crucial drivers of real progress in society is innovation The post Innovation and the Roots of Progress appeared first on WeLiveSecurity
March 2, 2022
An update that fixes one vulnerability, contains one feature is now available.
March 2, 2022
RCE Bugs in Hugely Popular VoIP Apps: Patch Now!
March 1, 2022
Second data-wiping malware found in Ukraine, says ESET
March 1, 2022
Daxin Espionage Backdoor Ups the Ante on Chinese Malware
March 1, 2022
This JavaScript scanner hunts down malware in libraries
March 1, 2022
Insurance Aon confirms it has suffered ‘cyber incident’
March 1, 2022
IsaacWiper and HermeticWizard: New wiper and worm targeting Ukraine
ESET researchers uncover a new wiper that attacks Ukrainian organizations and a worm component that spreads HermeticWiper in local networks The post IsaacWiper and HermeticWizard: New wiper and worm targeting Ukraine appeared first on WeLiveSecurity
March 1, 2022
Several security issues were fixed in GNU C Library.
March 1, 2022
An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions.
March 1, 2022
An update is now available for Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 1, 2022
OpenShift Logging bug fix and security update (5.3.5) Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 1, 2022
An update for rh-maven36-httpcomponents-client is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 1, 2022
The truth about VDI and cloud computing
March 1, 2022
Update to 2.53.11 Default version of Firefox for the User-Agent string has now been changed to 68.0 . This should provide better compatibility with modern sites. The value can be changed in Preferences–>Advanced–>HTTP Networking . Besides that, an alternate site-specific override machanism is now activated. (The idea comes from Waterfox-Classic project). The file ua-update.json in […]
March 1, 2022
Toyota shutters 14 plants after probable cyberattack
March 1, 2022
Quarter of a million lawyer disciplinary records leak
February 28, 2022
Ukraine-Russia Cyber Warzone Splits Cyber Underground
February 28, 2022
Conti ransomware gang leak: 60,000 messages online
February 28, 2022
Toyota to Close Japan Plants After Suspected Cyberattack
February 28, 2022
Beware of charity scams exploiting war in Ukraine
Looking to help people in Ukraine? Donate wisely – do your research first so you give without getting scammed The post Beware of charity scams exploiting war in Ukraine appeared first on WeLiveSecurity
February 28, 2022
#ShieldsUp – Now is the time to double‑check cybersecurity processes and operations
As the conflict in Ukraine heightens the risk of cyberattacks globally, what can organizations do to improve their resiliency? The post #ShieldsUp – Now is the time to double‑check cybersecurity processes and operations appeared first on WeLiveSecurity
February 28, 2022
Kremlin and Russia’s TASS news agency websites offline following attacks
February 28, 2022
Play for Ukraine game aims to knock Russian websites offline
February 28, 2022
The container trento/trento-db was updated. The following patches have been included in this update:
February 28, 2022
The container suse-sles-15-sp3-chost-byos-v20220222-gen2 was updated. The following patches have been included in this update:
February 28, 2022
Nmap Basics: What Is Nmap & How Is It Used?>
February 28, 2022
Russia is the advanced persistent threat that just triggered. Ready?
February 28, 2022
Several security issues were fixed in QEMU.
February 28, 2022
Several security issues were fixed in WebKitGTK.
February 28, 2022
Several security issues were fixed in MariaDB.
February 28, 2022
policykit-1 could be made to crash if it received specially crafted data.
February 28, 2022
The 5.16.11 stable kernel update contains a number of important fixes across the tree.
February 26, 2022
One issue have been discovered in ujson: ultra fast JSON encoder and decoder for Python. CVE-2021-45958
February 26, 2022