Update to 4.9.0
May 16, 2020
Update to latest upstream 8.8.8
May 16, 2020
Are you ready, kids? I said, are you ready? Whoooooo has another update for you to see? Google Chromium! For browsing and tweeting (but not FTP) Google Chromium! If improved security be something you wish Google Chromium! Then run dnf while you flop like a fish! Google Chromium! Google Chromium! Google Chromium! Google Chromium! Ahem. […]
May 16, 2020
It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authentication driver is not enabled by default.
May 16, 2020
OpenConnect, a VPN software, had a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.
May 16, 2020
Version update + security fix
May 16, 2020
security update
May 16, 2020
security update
May 16, 2020
Version update + security fix
May 15, 2020
Update to OpenEXR-2.4.1, see https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 for details.
May 15, 2020
Update to OpenEXR-2.4.1, see https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 for details.
May 15, 2020
Mikroceen: Spying backdoor leveraged in high‑profile networks in Central Asia
ESET researchers dissect a backdoor deployed in attacks against multiple government agencies and major organizations operating in two critical infrastructure sectors in Asia The post Mikroceen: Spying backdoor leveraged in high‑profile networks in Central Asia appeared first on WeLiveSecurity
May 15, 2020
An outbreak of Coronavirus trojans and scams
May 15, 2020
Updated libreswan packages fix security vulnerability: An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange
May 15, 2020
Updated suricata packages fix security vulnerabilities: The suricata package has been updated to version 4.1.8, which fixes security issues and other bugs. See the upstream announcements for details.
May 15, 2020
Updated jbig2dec packages fix security vulnerability: jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow (CVE-2020-12268).
May 15, 2020
The updated packages fix security vulnerabilities including: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled
May 15, 2020
Updated netkit-telnetd packages fix security vulnerability: A vulnerability was found where incorrect bounds checks in the telnet server’s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated
May 15, 2020
8 best dark web search engines for 2020
May 15, 2020
Security flaws mitigated by compiler optimizations
May 15, 2020
An update that fixes one vulnerability is now available.
May 15, 2020
security update
May 14, 2020
Ramsay: A cyber‑espionage toolkit tailored for air‑gapped networks
ESET researchers uncover several instances of malware that uses various attack vectors to target systems isolated by an air gap The post Ramsay: A cyber‑espionage toolkit tailored for air‑gapped networks appeared first on WeLiveSecurity
May 14, 2020
An update that solves two vulnerabilities and has four fixes is now available.
May 14, 2020
An update that fixes one vulnerability is now available.
May 14, 2020
Login with Facebook Bug Earns $20K Bounty
May 14, 2020
An update that solves 35 vulnerabilities and has 21 fixes is now available.
May 14, 2020
NOTE: This DLA was intially sent on 2020-04-14 but for reasons unknown failed to reach the mailing list. It is being re-sent now to ensure that it appears in the mailing list archive. No new version of
May 14, 2020
An update that fixes one vulnerability is now available.
May 14, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 14, 2020
security update
May 14, 2020
Texas Courts Won’t Pay Up in Ransomware Attack
May 13, 2020
WannaCryptor remains a global threat three years on
WannaCryptor is still alive and kicking, so much so that it sits atop the list of the most commonly detected ransomware families The post WannaCryptor remains a global threat three years on appeared first on WeLiveSecurity
May 13, 2020
Lukas Stefanko: How we fought off a DDoS attack from a mobile botnet
Hot on the heels of his research into an attack that attempted to take down ESET’s website, Lukas Stefanko sheds more light on threats posed by mobile botnets The post Lukas Stefanko: How we fought off a DDoS attack from a mobile botnet appeared first on WeLiveSecurity
May 13, 2020
Ramsay Malware Targets Air-Gapped Networks
May 13, 2020
Feds Reveal Hidden Cobra’s Trove of Espionage Tools
May 13, 2020
Reading Time: ~ 3 min. If you’ve been working in the technology space for any length of time, you’ve undoubtedly heard about the rising importance of artificial intelligence (AI) and machine learning (ML). But what can these tools really do for you? More specifically, what kinds of benefits do they offer for cybersecurity and business […]
May 13, 2020
An update for .NET Core is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 13, 2020
An update that solves one vulnerability and has one errata is now available.
May 13, 2020
Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711) SL6 x86_64 kernel-2.6.32-754.29.2.el6.x86_64.rpm kernel-debug-2.6.32-754.29.2.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-754.29.2.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.29.2.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.29.2.el6.i686 [More…]
May 13, 2020
USN-3911-1 introduced a regression in file.
May 13, 2020
Several security issues were fixed in Squid.
May 13, 2020
IPRoute could be made to execute arbitrary code if it received a specially crafted input.
May 13, 2020
Thunderbolt flaws open millions of PCs to physical hacking
A new attack method enables bad actors to access data on a locked computer via an evil maid attack within 5 minutes The post Thunderbolt flaws open millions of PCs to physical hacking appeared first on WeLiveSecurity
May 12, 2020
REvil Ransomware Attack Hits A-List Celeb Law Firm
May 12, 2020
Microsoft Addresses 111 Bugs for May Patch Tuesday
May 12, 2020
Reading Time: ~ 2 min. Adult Website Leaks Trove of Sensitive Data An recently discovered unsecured database belonging to the adult streaming site Cam4 was found to contain nearly 11 billion unique records amounting to seven terabytes of data. For a site with billions of visitors each year, the exposed data could affect millions who […]
May 12, 2020
Over 160 million user records put up for sale on the dark web
Eleven companies, ranging from online marketplaces to news websites, have had their user databases poached The post Over 160 million user records put up for sale on the dark web appeared first on WeLiveSecurity
May 12, 2020
Breaking news? App promises news feeds, brings DDoS attacks instead
After being targeted by an Android DDoS app, ESET seized the opportunity to analyze the attack and to help put an end to it The post Breaking news? App promises news feeds, brings DDoS attacks instead appeared first on WeLiveSecurity
May 12, 2020
An update that solves 53 vulnerabilities and has 32 fixes is now available.
May 12, 2020
An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 12, 2020
An update that fixes one vulnerability is now available.
May 12, 2020
An update for libreswan is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 12, 2020
An update for libreswan is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 12, 2020