The package firefox before version 77.0-1 is vulnerable to multiple issues including arbitrary code execution, denial of service, private key recovery and content spoofing.
An update that fixes four vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2414
An information disclosure vulnerability in GnuTLS allow remote attackers to obtain sensitive information.
Reading Time: ~ 3 min. Nestled within our chapter on malware in the 2020 Webroot Threat Report is a comparison of infection rates between business and personal devices. The finding that personal devices are about twice as likely as business devices to become infected was always significant, if not surprising. But the advent of the […]
security update
An update that fixes three vulnerabilities is now available.
An update that solves three vulnerabilities and has one errata is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that solves one vulnerability and has three fixes is now available.
An update that fixes one vulnerability is now available.
The following CVE(s) were reported against src:cups. CVE-2019-8842
A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images.
GnuTLS could be made to expose sensitive information.
A flaw was reported in the TLS session ticket key construction in GnuTLS, a library implementing the TLS and SSL protocols. The flaw caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a
Two vulnerabilities were discovered in Node.js, which could result in denial of service and potentially the execution of arbitrary code. For the stable distribution (buster), these problems have been fixed in
security update
Reading Time: ~ 2 min. TrickBot Silently Targets Servers Knowing that many domain controller servers are rarely shutdown or rebooted, the authors of TrickBot have made some changes to allow the infection to run from memory. While this can be detrimental to the payload, as a reboot could easily remove it, the stealth approach could […]
The browser maker rolls out updates on back-to-back days, including a patch to avoid unintentionally overloading DNS providers The post Mozilla fixes high‑risk Firefox flaws, bug in DoH feature appeared first on WeLiveSecurity
An update that fixes one vulnerability is now available.
An update that fixes three vulnerabilities is now available.
– Updated to latest upstream (77.0.1) —- – New upstream version (77.0) —- – Updated VA-API patches for Wayland backend – Use dmabuf WebGL backend by default on Wayland
– Update to 1.2.12 Release notes: https://www.cacti.net/release_notes.php?version=1.2.12
– Update to 1.2.12 Release notes: https://www.cacti.net/release_notes.php?version=1.2.12
– Update to 2.16.6 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.6-and-2.7.15-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2020-04
security update
There were several CVE bugs reported against src:netqmail. CVE-2005-1513
Dealing with skeletons lurking in your Facebook closet has never been easier The post Facebook now lets you delete old posts in bulk appeared first on WeLiveSecurity
An update that fixes one vulnerability is now available.
An update that solves 7 vulnerabilities and has one errata is now available.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2383
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2378
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2381
You can now shore up your smart home security by leveraging Google’s top security offering The post Google adds Nest devices to Advanced Protection Program appeared first on WeLiveSecurity
Reading Time: ~ 2 min. Bank of America Breach Reveals PPP Information After processing over 300,000 Paycheck Protection Program applications, Bank of America has revealed that a data breach occurred within the U.S. Small Business Administration’s program that allowed all other SBA-authorized lenders to view highly sensitive data. The data includes tax information and social […]
An update that fixes one vulnerability is now available.
