An update for apb, containernetworking-plugins, and golang-github-prometheus-promu is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact
October 29, 2019
A micro version update (from 7.4 to 7.4.1) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact
October 29, 2019
Country of Georgia Suffers Widespread Cyberattack
October 29, 2019
ThreatList: Most Retail Hardware Bug Bounty Flaws Are Critical
October 29, 2019
Several security issues were fixed in Samba.
October 29, 2019
An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 3.10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 29, 2019
An update for mediawiki is now available for Red Hat OpenShift Container Platform 3.10. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score,
October 29, 2019
Reading Time: ~ 4 min. In my previous blog post, Why Healthcare Organizations are Easy Targets for Cybercrime, I discussed various reasons that hospitals and healthcare organizations make desirable and lucrative targets for hackers. In this second installment, I’ll go over how criminals are attacking these organizations, the methods they use, and also what needs to be done […]
October 29, 2019
Updated file packages fix security vulnerability: A buffer overflow was found in file which may result in denial of service or potentially the execution of arbitrary code if a malformed CDF (Composite Document File) file is processed (CVE-2019-18218).
October 29, 2019
Updated php and pcre2 packages fix security vulnerabilities: – FPM (#78599) env_path_info underflow in fpm_main.c can lead to RCE. (CVE-2019-11043) – MBString (#78633) Heap buffer overflow (read) in mb_eregi.
October 29, 2019
This kernel update is based on the upstream 5.3.7 and fixes several issues: * various security issues in the usb subsystem * rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow (CVE-2019-17666)
October 29, 2019
The updated packages fix a security vulnerability: The agroot() function in cgraphobj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv. (CVE-2019-11023)
October 29, 2019
What you may be getting wrong about cybersecurity
Attention-grabbing cyberattacks that use fiendish exploits are probably not the kind of threat that should be your main concern – here’s what your organization should focus on instead The post What you may be getting wrong about cybersecurity appeared first on WeLiveSecurity
October 29, 2019
Type: Vulnerability. IBM Cloud Orchestrator is prone to an information-disclosure vulnerability; fixes are available.
October 28, 2019
Type: Vulnerability. QEMU is prone to a denial-of-service vulnerability; fixes are available.
October 28, 2019
Type: Vulnerability. Multiple IBM Products are prone to a directory-traversal vulnerability; fixes are available.
October 28, 2019
Type: Vulnerability. IBM Cloud Orchestrator is prone to local information-disclosure vulnerability; fixes are available.
October 28, 2019
Type: Vulnerability. Multiple IBM Products are prone to a cross-site scripting vulnerability; fixes are available.
October 28, 2019
Type: Vulnerability. IBM API Connect is prone to an information-disclosure vulnerability; fixes are available.
October 28, 2019
Pwn2Own Expands Into Industrial Control Systems Hacking
October 28, 2019
PHP Bug Allows Remote Code-Execution on NGINX Servers
October 28, 2019
Magecart Gang Targets Skin Care Site Visitors For 5+ Months
October 28, 2019
An update that fixes one vulnerability is now available.
October 28, 2019
An update that fixes one vulnerability is now available.
October 28, 2019
An update that solves one vulnerability and has one errata is now available.
October 28, 2019
An update that solves one vulnerability and has one errata is now available.
October 28, 2019
The package chromium before version 78.0.3904.70-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, access restriction bypass, authentication bypass, denial of service, information disclosure, privilege escalation and cross-site scripting.
October 28, 2019
The package firefox before version 70.0-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, denial of service, insufficient validation and same-origin policy bypass.
October 28, 2019
The package thunderbird before version 68.2.0-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, denial of service, insufficient validation and same-origin policy bypass.
October 28, 2019
The package php before version 7.3.11-1 is vulnerable to arbitrary code execution.
October 28, 2019
This is a cumulative bug-fix update from upstream, including a fix for a pre- authentication remote denial of service issue.
October 27, 2019
New version 4.9.3, Security fix for CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14465, CVE-2018-14881, CVE-2018-14464, CVE-2018-14463, CVE-2018-14467, CVE-2018-10103, CVE-2018-10105, CVE-2018-14880, CVE-2018-16451, CVE-2018-14882, CVE-2018-16227, CVE-2018-16229, CVE-2018-16301, CVE-2018-16230, CVE-2018-16452,
October 27, 2019
An update that solves 5 vulnerabilities and has 98 fixes is now available.
October 27, 2019
An update that fixes three vulnerabilities is now available.
October 27, 2019
An update that fixes 5 vulnerabilities is now available.
October 27, 2019
– Updated to latest upstream version (70.0)
October 27, 2019
Update to OpenJDK October CPU (security update). See: https://openjdk.java.net/groups/vulnerability/advisories/2019-10-15 http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2019-October/002025.html
October 27, 2019
OpenJDK October CPU security update. See: https://openjdk.java.net/groups/vulnerability/advisories/2019-10-15 http://mail.openjdk.java.net/pipermail/jdk8u-dev/2019-October/010452.html
October 27, 2019
xpdf 4.02. Lots of security fixes here.
October 27, 2019
An update that fixes one vulnerability is now available.
October 27, 2019
Security fix for CVE-2018-16301, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
October 26, 2019
Security fix for CVE-2018-16301, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
October 26, 2019
Security fix for CVE-2018-16301, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
October 26, 2019
security update
October 26, 2019
security update
October 26, 2019
An update that fixes 5 vulnerabilities is now available.
October 26, 2019
Several issues have been found in mosquitto, a MQTT version 3.1/3.1.1 compatible message broker.
October 26, 2019
An issue has been found in libarchive, a multi-format archive and compression library.
October 26, 2019
An update that fixes one vulnerability is now available.
October 26, 2019
An update that fixes one vulnerability is now available.
October 26, 2019
Daniel Mandragona discovered that invalid DSA public keys can cause a panic in dsa.Verify(), resulting in denial of service. For the stable distribution (buster), this problem has been fixed in
October 26, 2019
A buffer overflow was found in file, a file type classification tool, which may result in denial of service or potentially the execution of arbitrary code if a malformed CDF (Composite Document File) file is processed.
October 26, 2019
An update that fixes one vulnerability is now available.
October 26, 2019
An update that fixes 10 vulnerabilities is now available.
October 26, 2019
An update that fixes 11 vulnerabilities is now available.
October 26, 2019
An update that fixes 12 vulnerabilities is now available.
October 26, 2019
An update that fixes one vulnerability is now available.
October 26, 2019
An update that fixes 28 vulnerabilities is now available.
October 26, 2019
Backport security fixes from [PR#145](https://github.com/libming/libming/pull/145) Fixes: CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132
October 26, 2019
Emil Lerner, beched and d90pwn found a buffer underflow in php5-fpm, a Fast Process Manager for the PHP language, which can lead to remote code execution.
October 26, 2019
security update
October 25, 2019
Is AWS Liable in Capital One Breach?
October 25, 2019
Type: Vulnerability. NixOS Nix is prone to a local privilege-escalation vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. GNU Guix is prone to a local privilege-escalation vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Elasticsearch is prone to an information-disclosure vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Multiple VMware products are prone to a denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Cloud Foundry UAA is prone to an information-disclosure vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Istio is prone to a remote denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Qt QtBase module is prone to a denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. PHP is prone to a remote code-execution vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Cloud Foundry SMB Volume is prone to an information disclosure vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. OpenSSH is prone to an integer overflow vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. SLUB Event Registration Extension is prone to an arbitrary-file-upload vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. vBulletin is prone to a remote code-execution vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. PHP is prone to a heap-based buffer-overflow vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Nessus is prone to a denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Adobe Creative Cloud Desktop Application is prone to an unspecified security-bypass vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. vBulletin is prone to multiple SQL-injection vulnerabilities.
October 25, 2019
Type: Vulnerability. Dnsmasq is prone to a remote denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to a security-bypass vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to information-disclosure vulnerability; fixes are available.
October 25, 2019
U.N., UNICEF, Red Cross Under Ongoing Mobile Attack
October 25, 2019
News Wrap: Hotel Robot Hacks, FTC Stalkerware Crackdown
October 25, 2019
Ransomware, Mobile Malware Attacks to Surge in 2020
October 25, 2019
Reading Time: ~ 2 min. MedusaLocker Ransomware Spotted Worldwide While it’s still unclear how MedusaLocker is spreading, the victims have been confirmed around the world in just the last month. By starting with a preparation phase, this variant can ensure that local networking functionality is active and maintain access to network drives. After shutting down […]
October 25, 2019