An update that fixes one vulnerability is now available.
July 30, 2020
Tobias Stoeckmann found an integer overflow issue in JSON-C, a C library to manipulate JSON objects, when reading maliciously crafted large files. The issue could be exploited to cause denial of service or possibly execute arbitrary code.
July 30, 2020
chromium-browser: Use after free in ANGLE (CVE-2020-6463) * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514) * Mozilla: Potential leak of redirect targets when loading scripts in a worker (CVE-2020-15652) * Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11 (CVE-2020-15659) SL6 x86_64 firefox-68.11.0-1.el6_10.x86_64.rpm firefox-debuginfo [More…]
July 30, 2020
The updated packages fix security vulnerabilities: A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file. (CVE-2018-12983)
July 30, 2020
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each
July 30, 2020
It was discovered that there was an issue where kdepim-runtime would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use.
July 30, 2020
Critical Magento Flaws Allow Code Execution
July 29, 2020
Billions of Devices Impacted by Secure Boot Bypass
July 29, 2020
FBI warns of disruptive DDoS amplification attacks
The Bureau expects cybercriminals to increasingly abuse new threat vectors for large-scale DDoS attacks The post FBI warns of disruptive DDoS amplification attacks appeared first on WeLiveSecurity
July 29, 2020
Critical Security Flaw in WordPress Plugin Allows RCE
July 29, 2020
Several vulnerabilities have been discovered in the GRUB2 bootloader. CVE-2020-10713
July 29, 2020
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.
July 29, 2020
An update of the Red Hat OpenShift Container Platform 3.11 and 4.4/4.5 container images is now available for Red Hat AMQ Online. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 29, 2020
An update that fixes one vulnerability is now available.
July 29, 2020
An update that fixes one vulnerability is now available.
July 29, 2020
Top 8 File and Disk Encryption Tools for Linux>
July 29, 2020
An update that fixes one vulnerability is now available.
July 29, 2020
The Case Against Full-Disk Encryption>
July 29, 2020
OkCupid Security Flaw Threatens Intimate Dater Details
July 29, 2020
Japan starts work on global quantum crypto network
July 29, 2020
security update
July 29, 2020
Lazarus Group Brings APT Tactics to Ransomware
July 28, 2020
security update
July 28, 2020
Almost 4,000 databases now wiped in ‘Meow’ attacks
The attackers and their motivations remain unknown; however, the incidents yet again highlight the risks of careless data security The post Almost 4,000 databases now wiped in ‘Meow’ attacks appeared first on WeLiveSecurity
July 28, 2020
An update that fixes 5 vulnerabilities is now available.
July 28, 2020
The Ultimate Guide to Using Data Encryption on Linux>
July 28, 2020
A minor version update (from 7.6 to 7.7) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact
July 28, 2020
Linux malware could soon be a thing of the past>
July 28, 2020
Several security issues were fixed in MySQL.
July 28, 2020
# July 2020 OpenJDK security update for OpenJDK 11 Full release notes: https://bitly.com/openjdk1108 ## Security fixes – JDK-8230613: Better ASCII conversions – JDK-8231800: Better listing of arrays – JDK-8232014: Expand DTD support – JDK-8233234: Better Zip Naming – JDK-8233239, CVE-2020-14562: Enhance TIFF support – JDK-8233255: Better Swing Buttons –
July 28, 2020
# July 2020 OpenJDK security update for OpenJDK 8. Full release notes: https://bitly.com/oj8u262 ## New features * [JDK-8223147](https://bugs.openjdk.java.net/browse/JDK-8223147): JFR Backport ## Security fixes – JDK-8028431, CVE-2020-14579: NullPointerException in DerValue.equals(DerValue) – JDK-8028591, CVE-2020-14578:
July 28, 2020
ClamAV 0.102.4 is a bug patch release to address the following issues: CVE-2020-3350 Fixed a vulnerability a malicious user could exploit to replace a scan target’s directory with a symlink to another path to trick clamscan, clamdscan, or clamonacc into removing or moving a different file (such as a critical system
July 28, 2020
Garmin staggers back online after ransomware attack
July 27, 2020
An update that solves two vulnerabilities and has three fixes is now available.
July 27, 2020
Several vulnerabilities were fixed in MilkyTracker, a music tracker for composing music in the MOD and XM module file formats. CVE-2019-14464
July 27, 2020
Several security issues were fixed in ClamAV.
July 27, 2020
SQLite could be made to crash or run programs if it processed a specially crafted query.
July 27, 2020
libslirp could be made to crash if it received specially crafted network traffic.
July 27, 2020
librsvg could be made to crash if it opened a specially crafted file.
July 27, 2020
An update that fixes 8 vulnerabilities is now available.
July 26, 2020
An update that fixes one vulnerability is now available.
July 26, 2020
An update that fixes one vulnerability is now available.
July 26, 2020
An update that solves two vulnerabilities and has 55 fixes is now available.
July 26, 2020
An update that solves four vulnerabilities and has 7 fixes is now available.
July 26, 2020
The following CVE(s) were reported against src:qemu: CVE-2017-9503
July 26, 2020
security update
July 25, 2020
0.9.24 release
July 24, 2020
Reading Time: ~ 2 min. ATM Jackpotting Attacks on the Rise ATM manufacturer Diebold Nixdorf has identified a malicious campaign that uses proprietary software to “jackpot” the machines. The attack requires malicious actors to breach the ATM manually and then use the software to force the machine to dispense cash at a rapid rate, known […]
July 24, 2020
Google adds security enhancements to Gmail, Meet and Chat
The tech giant introduces its own version of verified accounts in Gmail, rolls out increased moderation controls in Meet, and enhances phishing protection in Chat The post Google adds security enhancements to Gmail, Meet and Chat appeared first on WeLiveSecurity
July 24, 2020
An update that fixes two vulnerabilities is now available.
July 24, 2020
An update that fixes 10 vulnerabilities is now available.
July 24, 2020
An update that solves one vulnerability and has two fixes is now available.
July 24, 2020
An update that fixes two vulnerabilities is now available.
July 24, 2020
An update that fixes one vulnerability is now available.
July 24, 2020
An update that solves one vulnerability and has four fixes is now available.
July 24, 2020