An update that fixes one vulnerability is now available.
September 25, 2019
An update that contains security fixes can now be installed.
September 25, 2019
File Roller could be made to overwrite sensitive files if it received a specially crafted TAR file.
September 25, 2019
An update for kernel is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions.
September 25, 2019
An update for kernel is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions.
September 25, 2019
An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 25, 2019
An update that solves 7 vulnerabilities and has one errata is now available.
September 25, 2019
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
September 25, 2019
It was discovered that SPIP, a website engine for publishing, would allow unauthenticated users to modify published content and write to the database, perform cross-site request forgeries, and enumerate registered users.
September 25, 2019
security update
September 25, 2019
security update
September 25, 2019
GandCrab Operators Resurface with REvile Malware
September 24, 2019
An illegal prostitution ring took Kazakhstan offline
September 24, 2019
Adobe Unscheduled Update Fixes Critical ColdFusion Flaws
September 24, 2019
CafePress finally warns customers that it was hacked
September 24, 2019
Dtrack RAT is Behind Virulent ATM-Espionage Campaign
September 24, 2019
Zebrocy Retools for New Political Attacks
September 24, 2019
Do companies take cybersecurity seriously enough?
Many companies are ranking cybersecurity as a top 5 priority but their actions do not measure up to the claim, a survey finds The post Do companies take cybersecurity seriously enough? appeared first on WeLiveSecurity
September 24, 2019
Malicious Ad Blockers for Chrome Caught in Ad Fraud Scheme
September 24, 2019
No summer vacations for Zebrocy
ESET researchers describe the latest components used in a recent Sednit campaign The post No summer vacations for Zebrocy appeared first on WeLiveSecurity
September 24, 2019
World of Warcraft’s suspected DDoS attacker has been arrested
September 24, 2019
How to Protect Your Online Store from Cyber Threats
September 23, 2019
4 Helpful Tips to Make Your WiFi Fast and Efficient
September 23, 2019
How to Increase Your Business’s Online Brand Awareness
September 23, 2019
Type: Vulnerability. Microsoft .NET Core is prone to a remote denial-of-service vulnerability; fixes are available.
September 23, 2019
The Benefits of Using a VPN at Home
September 23, 2019
More U.S. Utility Firms Targeted in Evolving LookBack Spearphishing Campaign
September 23, 2019
I’m keynoting about cybercrime at the CRN MSP conference in London next week
September 23, 2019
Google Assistant Audio Privacy Controls Updated After Outcry
September 23, 2019
An update that solves 8 vulnerabilities and has one errata is now available.
September 23, 2019
USN 4134-1 introduced a regression in IBus.
September 23, 2019
200K Sign Petition Against Equifax Data Breach Settlement
September 23, 2019
Reading Time: ~ 3 min. When you’re running a business, it’s important to stay connected, whether you’re in the office or not. Modern technology has made this easier than ever, ensuring you can answer emails and stay on top of tasks in hotels, coffee shops, wherever. Social media influencer and serial entrepreneur Gary Vaynerchuk has even […]
September 23, 2019
An update that fixes 24 vulnerabilities is now available.
September 23, 2019
An update that fixes one vulnerability is now available.
September 23, 2019
A buffer overflow flaw was found in the way Linux kernel’s vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. (CVE-2019-14835) […]
September 23, 2019
An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
September 23, 2019
An update for kernel is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 23, 2019
An update for dbus is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 23, 2019
An update for dbus is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 23, 2019
An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 23, 2019
An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 23, 2019
An update for kpatch-patch is now available for RHEL-7.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 23, 2019
It was discovered that Expat, an XML parsing C library, did not properly handled internal entities closing the doctype, potentially resulting in denial of service or information disclosure if a malformed XML file is processed.
September 22, 2019
security update
September 22, 2019
– Update jackson-databind to version 2.9.9.3. – Update jackson-core to version 2.9.9. – Update jackson-annotations to version 2.9.9. – Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.
September 21, 2019
– Update jackson-databind to version 2.9.9.3. – Update jackson-core to version 2.9.9. – Update jackson-annotations to version 2.9.9. – Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.
September 21, 2019
– Update jackson-databind to version 2.9.9.3. – Update jackson-core to version 2.9.9. – Update jackson-annotations to version 2.9.9. – Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.
September 21, 2019
– Update jackson-databind to version 2.9.9.3. – Update jackson-core to version 2.9.9. – Update jackson-annotations to version 2.9.9. – Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.
September 21, 2019
Bug fixes and security fixes. Better threading compile time option set. See: https://src.fedoraproject.org/rpms/ImageMagick/pull-request/2 Additional formats enabled.
September 21, 2019
Bug fixes and security fixes. Better threading compile time option set. See: https://src.fedoraproject.org/rpms/ImageMagick/pull-request/2 Additional formats enabled.
September 21, 2019
– Update jackson-databind to version 2.9.9.3. – Update jackson-core to version 2.9.9. – Update jackson-annotations to version 2.9.9. – Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.
September 21, 2019
– Update jackson-databind to version 2.9.9.3. – Update jackson-core to version 2.9.9. – Update jackson-annotations to version 2.9.9. – Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.
September 21, 2019
– Update jackson-databind to version 2.9.9.3. – Update jackson-core to version 2.9.9. – Update jackson-annotations to version 2.9.9. – Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.
September 21, 2019
– Update jackson-databind to version 2.9.9.3. – Update jackson-core to version 2.9.9. – Update jackson-annotations to version 2.9.9. – Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.
September 21, 2019
– rebase to latest upstream version 9.27 – security fixes added for: – CVE-2019-14811 (bug #1747908) – CVE-2019-14812 (bug #1747907) – CVE-2019-14813 (bug #1747906) – CVE-2019-14817 (bug #1747909)
September 21, 2019
This kernel update is based on the upstream 5.2.16 and fixes atleast the following security issues: There is heap-based buffer overflow in the marvell wifi chip driver that allows local users to cause a denial of service(system crash) or possibly
September 21, 2019
This kernel update is based on the upstream 4.14.145 and fixes atleast the following security issues: There is heap-based buffer overflow in the marvell wifi chip driver that allows local users to cause a denial of service(system crash) or possibly
September 21, 2019
Updated samba packages fix security vulnerabilities: A combination of parameters and permissions in smb.conf can allow user to escape from the share path definition (CVE-2019-10197).
September 21, 2019
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 21, 2019
The updated thunderbird packages fix security issues: Covert Content Attack on S/MIME encryption using a crafted multipart/ alternative message. (CVE-2019-11739)
September 21, 2019
It was discovered that any unprivileged user could monitor and send method calls to the ibus bus of another user, due to a misconfiguration during the setup of the DBus server. When ibus is in use, a local attacker, who discovers the UNIX socket used by another user connected on a graphical environment, could use […]
September 21, 2019
Multiple flaws were found in the way Chromium 73.0.3683.103 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-5805, CVE-2019-5806, CVE-2019-5807, CVE-2019-5808, CVE-2019-5809, CVE-2019-5810,
September 21, 2019
Poor security: 15,000 private webcams exposed to creeps
September 20, 2019
security update
September 20, 2019
security update
September 20, 2019
security update
September 20, 2019
An update that fixes one vulnerability is now available.
September 20, 2019
An update that fixes one vulnerability is now available.
September 20, 2019
An update that fixes two vulnerabilities is now available.
September 20, 2019
– Updated to new upstream (69.0.1) – Wayland rendering fixes —- – The update to 69.0.1 – Fix flickering issues – Fix disappearing webrtc dialogs —- – Fixed rendering artifacts on Wayland backend
September 20, 2019
Update to Samba 4.11.0 —- Update to Samba 4.11.0rc4 —- Update to Samba 4.11.0rc3 – Security fixes for CVE-2019-10197
September 20, 2019
Facebook Removed Tens of Thousands of Apps Post-Cambridge Analytica
September 20, 2019
How To Keep Your Data Safe When Traveling With A Laptop
September 20, 2019
Forcepoint VPN Client is Vulnerable to Privilege Escalation Attacks
September 20, 2019
Reading Time: ~ 2 min. TFlower Ransomware Exploiting RDP Ransomware attacks seem to be earning larger payouts by focusing on big businesses and governments, and a new variant dubbed TFlower might be no exception. TFlower has been proliferating by hacking into compromised networks through various remote desktop services. Attackers can reportedly execute the malware and begin encrypting most file types and removing all local backups. It is still unclear how much the demanded ransom is, but […]
September 20, 2019
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: Missing sanitising in the EXIF extension and the iconv_mime_decode_headers() function could result in information disclosure or denial of service.
September 20, 2019
News Wrap: Emotet’s Return, U.S. Vs. Snowden, Physical Pen Testers Arrested
September 20, 2019
An update that fixes 35 vulnerabilities is now available.
September 20, 2019
An update that fixes 35 vulnerabilities is now available.
September 20, 2019
Mattress Company Leaks Data Records of 387K Customers
September 20, 2019
dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes (CVE-2019-11500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. SL7 x86_64 dovecot-2.2.36-3.el7_7.1.i686.rpm [More…]
September 20, 2019
A buffer overflow flaw was found in the way Linux kernel’s vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. (CVE-2019-14835) […]
September 20, 2019
An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 20, 2019
An update for qpid-proton is now available for Satellite Tools 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 20, 2019