May 15, 2019
An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 15, 2019
Ice Hockey World Championship: The risks of free live streaming
You think you’re watching the games for free, but are you sure that’s the case? Let’s review some of the risks that may come with free live streaming websites The post Ice Hockey World Championship: The risks of free live streaming appeared first on WeLiveSecurity
May 15, 2019
A deeper look at the MDS vulnerability
May 15, 2019
Modern IT security: Sometimes caring is NOT sharing
May 15, 2019
security update
May 15, 2019
Microsoft Patches Zero-Day Bug Under Active Attack
May 14, 2019
The update for ghostscript released as DSA 4442-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal “pdfdict” now hidden in the ghostscript update. Updated cups-filters packages are now available to correct this issue.
May 14, 2019
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 14, 2019
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 14, 2019
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 14, 2019
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 14, 2019
VCFTools could be made to crash if it received specially crafted input.
May 14, 2019
Linux Kernel Flaw Allows Remote Code-Execution
May 14, 2019
An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 14, 2019
Plead malware distributed via MitM attacks at router level, misusing ASUS WebStorage
ESET researchers have discovered that the attackers have been distributing the Plead malware via compromised routers and man-in-the-middle attacks against the legitimate ASUS WebStorage software The post Plead malware distributed via MitM attacks at router level, misusing ASUS WebStorage appeared first on WeLiveSecurity
May 14, 2019
An update is now available for Satellite Tools 6.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 14, 2019
Red Hat Satellite 6.5 for RHEL 7 is now available containing security fixes, bug fixes, and enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 14, 2019
Isaac Boukris and Andrew Bartlett discovered that the S4U2Self Kerberos extension used in Samba’s Active Directory support was susceptible to man-in-the-middle attacks caused by incomplete checksum validation.
May 14, 2019
Multiple issues have been addressed in Qt4. CVE-2018-15518
May 14, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 14, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 14, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
May 14, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 14, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Windows is prone to local information-disclosure vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft ASP.NET Core is prone to a remote denial-of-service vulnerability; fixes are available.
May 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
May 14, 2019
Risk Level: Very Low. Type: Trojan.
May 14, 2019
security update
May 13, 2019
Risk Level: Very Low. Type: Trojan.
May 13, 2019
ThreatList: Top 5 Most Dangerous Attachment Types
May 13, 2019
Verizon’s data breach report: What the numbers say
What are some of the most interesting takeaways from Verizon’s latest annual security report? The post Verizon’s data breach report: What the numbers say appeared first on WeLiveSecurity
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes two vulnerabilities is now available.
May 13, 2019
An update that fixes 16 vulnerabilities is now available.
May 13, 2019
An update that fixes three vulnerabilities is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes 7 vulnerabilities is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
May 13, 2019
An update that fixes 9 vulnerabilities is now available.
May 13, 2019
The PostgreSQL project has release a new minor release of the 9.4 branch. For Debian 8 “Jessie”, this has been uploaded as version
May 13, 2019
An update for python-jinja2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 13, 2019
Updated openssh packages fix security vulnerabilities: Due to missing character encoding in the progress display, the object name can be used to manipulate the client output, for example to employ ANSI codes to hide additional files being transferred (CVE-2019-6109).
May 12, 2019
Updated sysstat package fix security vulnerabilities: Out-of-bounds read during a memmove call inside the remap_struct function (CVE-2018-19416).
May 12, 2019
Updated python packages fix security vulnerability: A ‘file:’ blacklist bypass in URIs by using the ‘local-file:’ scheme instead (CVE-2019-9948).
May 12, 2019
Updated openexr package fixes security vulnerabilities: It was discovered that makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact (CVE-2018-18444).
May 12, 2019
pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers (CVE-2019-9923). References:
May 12, 2019
Updated bash package fixes security vulnerability: A vulnerability in which shell did not prevent user BASH_CMDS, allowing the user to execute any command with the permissions of the shell (CVE-2019-9924).
May 12, 2019
Updated qt4 packages fix security vulnerability: A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp (CVE-2018-19872).
May 12, 2019
The updated packages fix security vulnerabilities: A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS)
May 12, 2019
Updated mxml packages fix security vulnerabilities: An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the ”
May 12, 2019
A vulnerability was found in the svgsalamander library. If the library is being used in a web application for processing user supplied SVG files then the app is vulnerable to SSRF (CVE-2017-5617). References:
May 12, 2019
Updated tcpreplay package fixes security vulnerabilities: An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary.
May 12, 2019
Updated cronie packages fix security vulnerabilities: Cronie before 1.5.3 allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked (CVE-2019-9704).
May 12, 2019
What is VPS Hosting? How Does it Work?
May 11, 2019
Update to April 2019 CPU. See: http://mail.openjdk.java.net/pipermail/jdk- updates-dev/2019-April/000951.html
May 10, 2019
security update
May 10, 2019
security update
May 10, 2019
The WannaCry Security Legacy and What’s to Come
May 10, 2019
Nvidia Warns Windows Gamers on GPU Driver Flaws
May 10, 2019
Students pull off below-the-belt mailing list prank
May 10, 2019