The 5.16.5 stable kernel rebase contains new features, additional hardware support, and a number of important fixes across the tree.
February 4, 2022
Security bugs in libmount, CVE-2021-3996 and CVE-2021-3995.
February 4, 2022
‘Long Live Log4Shell’: CVE-2021-44228 Not Dead Yet
February 4, 2022
Argo CD Security Bug Opens Kubernetes Cloud Apps to Attackers
February 4, 2022
Attackers Target Intuit Users by Threatening to Cancel Tax Accounts
February 4, 2022
An update that solves three vulnerabilities, contains one feature and has one errata is now available.
February 4, 2022
Several vulnerabilities have been discovered in apng2gif, a tool for converting APNG images to animated GIF format. Improper sanitization of user input can result in denial of service (application crash) or possible execution of arbitrary code if a malformed image file is processed.
February 4, 2022
An update that fixes three vulnerabilities is now available.
February 4, 2022
An update that fixes 5 vulnerabilities is now available.
February 4, 2022
Kronos Still Dragging Itself Back From Ransomware Hell
February 3, 2022
Low-Detection Phishing Kits Increasingly Bypass MFA
February 3, 2022
This update addresses a bugs in the handling of timestamps in the `recvmsg` and `recvmmsg` on armhpf and i686 ([swbz#28349](https://sourceware.org/bugzilla/show_bug.cgi?id=28349), [swbz#28350](https://sourceware.org/bugzilla/show_bug.cgi?id=28350)). A bug in some optimized versions of `wcsncmp` on x86_64 is fixed
February 3, 2022
Bump version to 2.0.14-1 —- Security fix for CVE-2021-45720
February 3, 2022
Critical Cisco Bugs Open VPN Routers to Cyberattacks
February 3, 2022
Wormhole Crypto Platform: ‘Funds Are Safe’ After $314M Heist
February 3, 2022
BlackCat ransomware – what you need to know
February 3, 2022
Shoulder surfing: Watch out for eagle‑eyed snoopers peeking at your phone
Some fraudsters may use low-tech tactics to steal your sensitive information – peering over your shoulder as you enter that data is one of them The post Shoulder surfing: Watch out for eagle‑eyed snoopers peeking at your phone appeared first on WeLiveSecurity
February 3, 2022
Thousands of Malicious npm Packages Threaten Web Apps
February 3, 2022
PowerPoint Files Abused to Take Over Computers
February 3, 2022
An update for the varnish:6 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 3, 2022
An update for the varnish:6 module is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 3, 2022
An update for the varnish:6 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 3, 2022
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 3, 2022
Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes a bug fixes, security patches and new feature enhancements. Red Hat Product Security has rated this update as having a security impact
February 3, 2022
Release of OpenShift Serverless Client kn 1.20.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 3, 2022
Crunch! Ransomware hits KP Nuts, Hula Hoops, and McCoys crisps
February 3, 2022
KP Snacks Left with Crumbs After Ransomware Attack
February 2, 2022
Threat actors are becoming more sophisticated, agile and relentless in their pursuit of stealing personal information for financial gain. Rapid and evolving shifts in the threat landscape require the knowledge and solutions to prepare and prevent threats that could spell disaster for organizations’ reputations and operations. Organizations of all sizes remain at risk. Small to […]
February 2, 2022
Supply-Chain Security Is Not a Problem…It’s a Predicament
February 2, 2022
Charming Kitten Sharpens Its Claws with PowerShell Backdoor
February 2, 2022
A security update is now available for Red Hat Single Sign-On 7.5 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2022
A new image is available for Red Hat Single Sign-On 7.4.10 on OpenJDK, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. 2. Description: Red Hat Single Sign-On is an integrated sign-on solution, available as a
February 2, 2022
A new image is available for Red Hat Single Sign-On 7.4.10 on OpenJ9, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. 2. Description: Red Hat Single Sign-On is an integrated sign-on solution, available as a
February 2, 2022
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2022
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2022
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2022
What are real organisations doing with zero trust?
February 2, 2022
FBI: Use a Burner Phone at the Olympics
February 1, 2022
The Account Takeover Cat-and-Mouse Game
February 1, 2022
security update
February 1, 2022
security update
February 1, 2022
Samba ‘Fruit’ Bug Allows RCE, Full Root User Access
February 1, 2022
How to tell if your phone has been hacked
Think your smartphone has been compromised by malware? Here’s how to spot the signs of a hacked phone and how to remove the hacker from your phone. The post How to tell if your phone has been hacked appeared first on WeLiveSecurity
February 1, 2022
Cyberattacker hits German service station petrol terminal provider
February 1, 2022
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 1, 2022
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 1, 2022
This kernel-linus update is based on upstream 5.15.18 and fixes atleast the following security issues: A random memory access flaw was found in the Linux kernels GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
February 1, 2022
This kernel update is based on upstream 5.15.18 and fixes atleast the following security issues: A random memory access flaw was found in the Linux kernels GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
February 1, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
February 1, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
February 1, 2022
Public Exploit Released for Windows 10 Bug
January 31, 2022
Apple Pays $100.5K Bug Bounty for Mac Webcam Hack
January 31, 2022
NSO Group Pegasus Spyware Aims at Finnish Diplomats
January 31, 2022
Qubit pleads with hacker to return $80 million of stolen funds
January 31, 2022
Multiple security vulnerabilities have been discovered in Apache Log4j 1.2, a Java logging framework, when it is configured to use JMSSink, JDBCAppender, JMSAppender or Apache Chainsaw which could be exploited for remote code execution.
January 31, 2022
ldns could be made to expose sensitive information if it received a specially crafted input.
January 31, 2022
An update for the nginx:1.20 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 31, 2022
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.
January 31, 2022
– Update cargo-insta to version 1.11.0. – Update the insta crate to version 1.11.0. – Update the ron crate to version 0.7.0. – Introduce a compat package for ron versions 0.6.x. – Update the similar-asserts crate to version 1.2.0. – Update the similar crate to version 2.1.0.
January 30, 2022
– Update cargo-insta to version 1.11.0. – Update the insta crate to version 1.11.0. – Update the ron crate to version 0.7.0. – Introduce a compat package for ron versions 0.6.x. – Update the similar-asserts crate to version 1.2.0. – Update the similar crate to version 2.1.0.
January 30, 2022
A security bug has been discovered and fixed in the userhelper program.
January 30, 2022
It was discovered that missing input sanitising in python-nbxmpp, a Jabber/XMPP Python library, could result in denial of service in clients based on it (such as Gajim).
January 30, 2022
The update for prosody released as DSA 5047 introduced a memory leak. Updated prosody packages are now available to correct this issue. For the oldstable distribution (buster), this problem has been fixed
January 30, 2022
Several vulnerabilities have been discovered in libraw that may lead to the execution of arbitrary code, denial of service, or information leaks.
January 30, 2022
Security fixes for CVE-2022-0351, CVE-2022-0359 —- Security fixes for CVE-2022-0213, CVE-2022-0261
January 29, 2022
Fix for CVE-2021-32765
January 29, 2022
The container suse-sles-15-sp3-chost-byos-v20220126-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
January 29, 2022
The container sles-15-sp1-chost-byos-v20220127 was updated. The following patches have been included in this update:
January 29, 2022
The container suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
January 29, 2022
The container suse-sles-15-sp1-chost-byos-v20220127-gen2 was updated. The following patches have been included in this update:
January 29, 2022
update to version 2.10 and enable OCV CVE-2022-23303
January 29, 2022
# New in release OpenJDK 17.0.2 (2022-01-18): Live versions of these release notes can be found at: * https://bitly.com/openjdk1702 * https://builds.shipilev.net/backports-monitor/release-notes-17.0.2.txt ## Security fixes – JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named “.” inside – JDK-8264934, CVE-2022-21248: Enhance cross VM
January 29, 2022
Lazarus APT Uses Windows Update to Spew Malware
January 28, 2022
Zerodium Spikes Payout for Zero-Click Outlook Zero-Days
January 28, 2022
Beyond the tick box: What to consider before agreeing to a privacy policy
The trade-off between using a free service and giving up our personal data becomes much less palatable when we think about the wider ramifications of the collection and use of our personal data The post Beyond the tick box: What to consider before agreeing to a privacy policy appeared first on WeLiveSecurity
January 28, 2022
Conti, DeadBolt Ransomwares Target Delta, QNAP
January 28, 2022