An update that fixes four vulnerabilities is now available.
August 5, 2021
This update provides a new upstream version.
August 5, 2021
An update that fixes one vulnerability is now available.
August 5, 2021
An update that solves four vulnerabilities and has one errata is now available.
August 5, 2021
An update that fixes 6 vulnerabilities is now available.
August 5, 2021
An update that solves four vulnerabilities and has two fixes is now available.
August 5, 2021
‘I’m Calling About Your Car Warranty’, aka PII Hijinx
August 4, 2021
Black Hat: Let’s All Help Cyber-Immunize Each Other
August 4, 2021
Phishing Campaign Dangles SharePoint File-Shares
August 4, 2021
openCryptoki could be made to allow invalid curve attacks if it received a specially crafted key.
August 4, 2021
Best File & Disk Encryption Tools for Linux>
August 4, 2021
PEAR could be made to overwrite files as the administrator.
August 4, 2021
Several security issues were fixed in Perl DBI module.
August 4, 2021
Legacy EDR. Yes, it’s a thing
August 4, 2021
We COVID-Clicked on Garbage, Report Finds: Podcast
August 4, 2021
An update that fixes four vulnerabilities is now available.
August 4, 2021
Security fix for CVE-2021-34558
August 3, 2021
Security fix for CVE-2021-34558
August 3, 2021
Ransomware Volumes Hit Record Highs as 2021 Wears On
August 3, 2021
On course for a good hacking
A story of how easily hackers could hit a hole-in-one with the computer network of a premier golf club in the UK. The post On course for a good hacking appeared first on WeLiveSecurity
August 3, 2021
Raccoon Stealer Bundles Malware, Propagates Via Google SEO
August 3, 2021
‘DeadRinger’ Targeted Exchange Servers Long Before Discovery
August 3, 2021
The package chromium before version 92.0.4515.131-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and content spoofing.
August 3, 2021
The package nodejs-lts-erbium before version 12.22.4-1 is vulnerable to arbitrary code execution.
August 3, 2021
The package nodejs-lts-fermium before version 14.17.4-1 is vulnerable to arbitrary code execution.
August 3, 2021
The package nodejs before version 16.6.0-1 is vulnerable to arbitrary code execution.
August 3, 2021
lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 – lasso-2.5.1-8.el7_9.i686.rpm – lasso-2.5.1-8.el7_9.x86_64.rpm – lasso-debuginfo-2.5.1-8.el7_9.i686.rpm – lasso-debuginfo-2.5.1-8.el7_9 [More…]
August 3, 2021
An update for glibc is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 3, 2021
security update
August 2, 2021
Chipotle Emails Serve Up Phishing Lures
August 2, 2021
An update for lasso is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 2, 2021
An update for the varnish:6 module is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Extended Update Support, and Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact
August 2, 2021
Several security issues were fixed in QPDF.
August 2, 2021
The container sles-15-sp3-chost-byos-v20210729 was updated. The following patches have been included in this update:
August 2, 2021
The container suse-sles-15-sp3-chost-byos-v20210729-gen2 was updated. The following patches have been included in this update:
August 2, 2021
The 5.13.6 stable kernel update contains a number of important fixes across the tree.
August 1, 2021
The container suse-sles-15-sp3-chost-byos-v20210729-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
August 1, 2021
# New in release OpenJDK 11.0.12 (2021-07-20): Live versions of these release notes can be found at: * https://bitly.com/openjdk11012 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt ## Security fixes – JDK-8256157: Improve bytecode assembly – JDK-8256491: Better HTTP transport – JDK-8258432, CVE-2021-2341: Improve file transfers –
August 1, 2021
# New in release OpenJDK 8u302 (2021-07-20) Live versions of these release notes can be found at: * https://bitly.com/openjdk8u302 * https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u302.txt ## Security fixes * JDK-8256157: Improve bytecode assembly * JDK-8256491: Better HTTP transport * JDK-8258432, CVE-2021-2341: Improve file transfers *
August 1, 2021
Upstream 6.2.5 release (RHBZ #1984631). Fix CVE-2021-32761: 32-bit systems BITFIELD command integer overflow.
August 1, 2021
# New in release OpenJDK 11.0.12 (2021-07-20): Live versions of these release notes can be found at: * https://bitly.com/openjdk11012 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt ## Security fixes – JDK-8256157: Improve bytecode assembly – JDK-8256491: Better HTTP transport – JDK-8258432, CVE-2021-2341: Improve file transfers –
August 1, 2021
# New in release OpenJDK 8u302 (2021-07-20) Live versions of these release notes can be found at: * https://bitly.com/openjdk8u302 * https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u302.txt ## Security fixes * JDK-8256157: Improve bytecode assembly * JDK-8256491: Better HTTP transport * JDK-8258432, CVE-2021-2341: Improve file transfers *
August 1, 2021
security update
July 31, 2021
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
July 31, 2021
NSA Warns Public Networks are Hacker Hotbeds
July 30, 2021
The package vivaldi before version 4.1.2369.11-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, content spoofing, incorrect calculation, information disclosure and insufficient validation.
July 30, 2021
The package powerdns before version 4.5.1-1 is vulnerable to denial of service.
July 30, 2021
The package 389-ds-base before version 2.0.7-1 is vulnerable to multiple issues including authentication bypass and denial of service.
July 30, 2021
The package geckodriver before version 0.29.1-1 is vulnerable to cross- site request forgery.
July 30, 2021
The package containerd before version 1.5.4-1 is vulnerable to directory traversal.
July 30, 2021
security update
July 30, 2021
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 30, 2021
Tackling the insider threat to the new hybrid workplace
Now that organizations are set to evolve a hybrid blend of home and office-based work for most employees, it is more important then ever to address the risks that insider threat can – willingly or unwitingly – pose. The post Tackling the insider threat to the new hybrid workplace appeared first on WeLiveSecurity
July 30, 2021
An update that fixes one vulnerability is now available.
July 30, 2021
Update to 2.53.8.1 Includes fixes for mailnews archiving, as well as account creation after news subscribing. Show just an icon (instead of a big image etc.) when moving in drag-and-drop operations to make sure the target is visible. (You can change it back by toggling boolean preference “nglayout.enable_drag_images” in about:config).
July 29, 2021
**Archive_Tar 1.4.14** * Properly fix symbolic link path traversal (**CVE-2021-32610**)
July 29, 2021
**Archive_Tar 1.4.14** * Properly fix symbolic link path traversal (**CVE-2021-32610**)
July 29, 2021
security update
July 29, 2021
UC San Diego Health Breach Tied to Phishing Attack
July 29, 2021
CISA’s Top 30 Bugs: One’s Old Enough to Buy Beer
July 29, 2021
An issue has been found in libsndfile, a library for reading/writing audio files. A crafted WAV file can trigger a heap buffer overflow and might allow exectution of arbitrary code.
July 29, 2021
Leading cybersecurity agencies reveal list of most exploited vulnerabilities of the past 2 years
There are 30 vulnerabilities listed in total; organizations would do well to patch their systems if they haven’t done so yet The post Leading cybersecurity agencies reveal list of most exploited vulnerabilities of the past 2 years appeared first on WeLiveSecurity
July 29, 2021
Booking your next holiday? Watch out for these Airbnb scams
With vacations in full swing, cybercriminals will be looking to scam vacationers looking for that perfect accommodation. The post Booking your next holiday? Watch out for these Airbnb scams appeared first on WeLiveSecurity
July 29, 2021
Israeli Government Agencies Visit NSO Group Offices
July 29, 2021
PEAR could be made to overwrite files as the administrator.
July 29, 2021
Several security issues were fixed in QPDF.
July 29, 2021
libsndfile could be made to crash or run programs as your login if it opened a specially crafted file.
July 29, 2021