Articles about security
A Russian man has been sentenced to five years in prison for helping develop the Citadel malware, which was used to steal personal financial information. It cost more than $5 million in losses. The post Citadel “mechanic” receives five year prison sentence appeared first on WeLiveSecurity
LinuxSecurity.com: An update that solves one vulnerability and has 11 fixes is An update that solves one vulnerability and has 11 fixes is An update that solves one vulnerability and has 11 fixes is now available. now available.
LinuxSecurity.com: An update that solves one vulnerability and has 10 fixes is An update that solves one vulnerability and has 10 fixes is An update that solves one vulnerability and has 10 fixes is now available. now available.
LinuxSecurity.com: New upstream release: 2.4.5
LinuxSecurity.com: build experimental command line interface “kresc”
We are halfway through the year and it is a good opportunity to analyze the extent to which the ideas we gathered in the Trends 2017: Security Held Ransom report have come true. The post Mid-year review: Have our security trends for 2017 become reality? appeared first on WeLiveSecurity
LinuxSecurity.com: It was discovered that ruby-mixlib-archive, a Chef Software’s library used to handle various archive formats, was vulnerable to a directory traversal attack. This allowed attackers to overwrite arbitrary files by using a malicious tar archive containing “..” in its entries.
LinuxSecurity.com: An update that solves one vulnerability and has 8 fixes is An update that solves one vulnerability and has 8 fixes is An update that solves one vulnerability and has 8 fixes is now available. now available.
LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now available. now available.
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.
Risk Level: Very Low. Type: Trojan.
Risk Level: Very Low. Type: Trojan.
security update
security update
Type: Vulnerability. Cisco WebEx Browser Extension is prone to a remote code-execution vulnerability; fixes are available.
LinuxSecurity.com: LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file.
LinuxSecurity.com: OpenLDAP could be made to crash if it received specially crafted network traffic.
LinuxSecurity.com: This is an update fixing CVE-2017-10965 and CVE-2017-10966.
LinuxSecurity.com: An update that solves one vulnerability and has 8 fixes is An update that solves one vulnerability and has 8 fixes is An update that solves one vulnerability and has 8 fixes is now available. now available.
Businesses leave themselves open to potential data breaches through their ex-employees, according to a new study by OneLogin. The post OneLogin: Businesses vulnerable to data breaches by ex-employees appeared first on WeLiveSecurity
Risk Level: Very Low. Type: Trojan.
Risk Level: Very Low. Type: Trojan.
Risk Level: Very Low. Type: Trojan.
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
LinuxSecurity.com: Several security issues were fixed in ICU.
Lloyd’s of London have reported that a serious cyberattack could cost the global economy as much as a devastating natural disaster. The post A major cyberattack could cost the global economy $53 billion appeared first on WeLiveSecurity
LinuxSecurity.com: * various flaws: CVE-2017-7515 CVE-2017-9775 CVE-2017-9776 CVE-2017-9865 —- * CVE-2017-9406 CVE-2017-9408 various memory leak flaws
LinuxSecurity.com: Security fix for CVE-2017-10989: Heap-buffer overflow in the getNodeSize function Additionally sqlite has been updated to version 3.19.3, and spatialite-tools rebuilt for the update.
LinuxSecurity.com: Security fix for CVE-2017-10989: Heap-buffer overflow in the getNodeSize function Additionally sqlite has been updated to version 3.19.3, and spatialite-tools rebuilt for the update.
LinuxSecurity.com: The 4.11.10 update contains a number of important fixes across the tree
LinuxSecurity.com: Security fix for CVE-2017-10989: Heap-buffer overflow in the getNodeSize function
LinuxSecurity.com: CVE-2017-1000381: c-ares NAPTR parser out of bounds access
LinuxSecurity.com: – CVE-2017-1000083: Evince command injection vulnerability in CBT handler (#1468488)
LinuxSecurity.com: File /etc/sysconfig/httpd is ghosted now —- Version update —- Security fix for CVE-2017-3167 CVE-2017-3169 CVE-2017-7659 CVE-2017-7668 CVE-2017-7679
LinuxSecurity.com: This update updates QtWebEngine to the 5.9.1 release, a security and bugfix release from the 5.9 branch. QtWebEngine 5.9.1 is part of the Qt 5.9.1 release, but only the QtWebEngine component is included in this update. The update fixes the following security issues in QtWebEngine 5.9.0: CVE-2017-5070, CVE-2017-5071, CVE-2017-5075, CVE-2017-5076, CVE-2017-5077, CVE-2017-5078,
LinuxSecurity.com: New stable upstream release, primarily includes security fixes for CVE-2017-10794, CVE-2017-10799, CVE-2017-10800 See also http://www.graphicsmagick.org/NEWS.html#july-4-2017
LinuxSecurity.com: Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams reported that Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos, trusts metadata taken from the unauthenticated plaintext (Ticket), rather than the authenticated and encrypted KDC response. A
security update
security update
security update
security update
LinuxSecurity.com: Samba could allow unintended access to network services.
LinuxSecurity.com: Heimdal could allow unintended access to network services.
LinuxSecurity.com: Clément Berthaux from Synaktiv discovered a signature forgery vulnerability in knot, an authoritative-only DNS server. This vulnerability allows an attacker to bypass TSIG authentication by sending crafted DNS packets to a server.
LinuxSecurity.com: Felix Wilhelm discovered that the Evince document viewer made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
LinuxSecurity.com: Security fix for CVE-2017-10989: Heap-buffer overflow in the getNodeSize function
LinuxSecurity.com: – Update to 1.1.12 – Fix Cross-site Scripting (XSS) issue with link.php (CVE-2017-10970) Release notes: https://www.cacti.net/release_notes.php?version=1.1.11 Release notes: https://www.cacti.net/release_notes.php?version=1.1.12
Risk Level: Very Low. Type: Trojan.
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.