December 27, 2021
Global Cyberattacks from Nation-State Actors Posing Greater Threats
The 5 Most-Wanted Threatpost Stories of 2021
December 27, 2021
Several security vulnerabilities were found in Apache Log4j2, a Logging Framework for Java, which could lead to a denial of service or information disclosure.
December 27, 2021
Invalid read for malformed DVI files was fixed in GNU libextractor, a library that extracts meta-data from files of arbitrary type. For Debian 9 stretch, this problem has been fixed in version
December 27, 2021
What app developers need to do now to fight Log4j exploits
December 27, 2021
Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
December 26, 2021
Backport fix for CVE-2021-45078
December 26, 2021
Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
December 26, 2021
Backport fix for CVE-2021-45078
December 26, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 26, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 26, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 26, 2021
The 5.15.11 stable kernel update contains a number of important fixes across the tree.
December 25, 2021
Updat eto 4.6.5 to fix CVE-2021-43818.
December 25, 2021
Update to 2.53.10.1 Backport fixes to improve compatibility of some sites
December 25, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 25, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 25, 2021
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
December 25, 2021
The container ses/7/ceph/grafana was updated. The following patches have been included in this update:
December 25, 2021
The container ses/7/cephcsi/cephcsi was updated. The following patches have been included in this update:
December 25, 2021
security update
December 24, 2021
security update
December 24, 2021
https://lib.openmpt.org/libopenmpt/2021/12/23/security- update-0.5.15-releases-0.4.27-0.3.36/
December 24, 2021
The following vulnerabilities have been discovered in the wpewebkit web engine: CVE-2021-30887
December 24, 2021
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30887
December 24, 2021
OpenPGP signature status doesn’t consider additional message content. (CVE-2021-4126) Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow. (CVE-2021-44538)
December 24, 2021
security update
December 23, 2021
security update
December 23, 2021
Security fix for CVE-2021-44224, CVE-2021-44790
December 23, 2021
Rebuild 3.8.5 using golang-1.16.12
December 23, 2021
Rebuild 3.8.5 using golang-1.16.12
December 23, 2021
4-Year-Old Microsoft Azure Zero-Day Exposes Web App Source Code
December 23, 2021
This holiday season, give your children the gift of cybersecurity awareness
Don’t leave your kids to their own devices – give them a head start with staying safe online instead The post This holiday season, give your children the gift of cybersecurity awareness appeared first on WeLiveSecurity
December 23, 2021
Telegram Abused to Steal Crypto-Wallet Credentials
December 23, 2021
‘Spider-Man: No Way Home’ Download Installs Cryptominer
December 23, 2021
Time to Ditch Big-Brother Accounts for Network Scanning
December 23, 2021
An update that fixes four vulnerabilities is now available.
December 23, 2021
An update that solves two vulnerabilities and has one errata is now available.
December 23, 2021
An update that solves two vulnerabilities and has one errata is now available.
December 23, 2021
An update that fixes one vulnerability is now available.
December 23, 2021
Alibaba Cloud slapped by Chinese ministry for mishandling Log4j
December 23, 2021
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
December 22, 2021
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
December 22, 2021
security update
December 22, 2021
PYSA Emerges as Top Ransomware Actor in November
December 22, 2021
All in One SEO Plugin Bug Threatens 3M Websites with Takeovers
December 22, 2021
Critical Apache HTTPD Server Bugs Could Lead to RCE, DoS
December 22, 2021
Four Bugs in Microsoft Teams Left Platform Vulnerable Since March
December 22, 2021
An update that fixes 33 vulnerabilities is now available.
December 22, 2021
An update that solves one vulnerability and has one errata is now available.
December 22, 2021
An update that fixes one vulnerability is now available.
December 22, 2021
It was discovered that missing SAML signature validation in the SOGo groupware could result in impersonation attacks. For the oldstable distribution (buster), this problem has been fixed
December 22, 2021
An update that fixes three vulnerabilities is now available.
December 22, 2021
An update that solves one vulnerability and has one errata is now available.
December 22, 2021
Of course a Bluetooth-using home COVID test was cracked to fake results
December 22, 2021
How to tackle hybrid cloud security and DevSecOps
December 21, 2021
Half-Billion Compromised Credentials Lurking on Open Cloud Server
December 21, 2021
Why SBOM management is no longer optional
December 21, 2021
Don’t forget to unplug your devices before you leave for the holidays!
As you down tools for the holiday season, be sure to also switch off the standby lights – it’s both cost effective and better for the environment The post Don’t forget to unplug your devices before you leave for the holidays! appeared first on WeLiveSecurity
December 21, 2021
Two Active Directory Bugs Lead to Easy Windows Domain Takeover
December 21, 2021
FBI: Another Zoho ManageEngine Zero-Day Under Active Attack
December 21, 2021
An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
December 21, 2021
An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 21, 2021
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 21, 2021
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 21, 2021
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 21, 2021
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 21, 2021
Conti Ransomware Gang Has Full Log4Shell Attack Chain
December 20, 2021
security update
December 20, 2021
Robocalls More Than Doubled in 2021, Cost Victims $30B
December 20, 2021
Third Log4J Bug Can Trigger DoS; Apache Issues Patch
December 20, 2021
An update that fixes three vulnerabilities is now available.
December 20, 2021
An update that fixes three vulnerabilities is now available.
December 20, 2021
An update that fixes two vulnerabilities is now available.
December 20, 2021
An update that fixes 5 vulnerabilities is now available.
December 20, 2021
An update for log4j is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.6 Advanced Update Support, Red
December 20, 2021
How to keep on top of cloud security best practices
December 20, 2021
Bad things come in threes: Apache reveals another Log4J bug
December 19, 2021
security update
December 19, 2021
security update
December 19, 2021
An update that fixes one vulnerability is now available.
December 19, 2021
Updated olm packages fix security vulnerability: The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is
December 19, 2021
Updated privoxy packages fix security vulnerabilities: A security issue has been found in Privoxy before version 3.0.33. get_url_spec_param() did not free memory of compiled pattern spec before bailing (CVE-2021-44540).
December 19, 2021
Updated watchdog packages fixes an issue with a memory leak when verbose mode is on. References: – https://bugs.mageia.org/show_bug.cgi?id=29576
December 19, 2021
Log4j: Everything You Need to Know>
December 19, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.
December 19, 2021
Updated mediawiki packages fix security vulnerabilities: == Security fixes == * (T292763. CVE-2021-44854) REST API incorrectly publicly caches autocomplete search results from private wikis.
December 19, 2021
In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property (CVE-2021-44225).
December 19, 2021
security update
December 19, 2021
An update that fixes one vulnerability is now available.
December 18, 2021
It was discovered that modsecurity-apache, an Apache module to tighten the Web application security, does not properly handles excessively nested JSON objects, which could result in denial of service. The update introduces a new ‘SecRequestBodyJsonDepthLimit’ option to limit the
December 18, 2021