Igor Ponomarev discovered that LAVA, a continuous integration system for deploying operating systems onto physical and virtual hardware for running tests, was susceptible to denial of service via recursive XML entity expansion.
January 19, 2023
It was discovered that the CompareTool of iText, a Java PDF library which uses the external ghostscript software to compare PDFs at a pixel level, allowed command injection when parsing a specially crafted filename.
January 19, 2023
Finally, ransomware victims are refusing to pay up
January 19, 2023
Several security issues were fixed in the Linux kernel.
January 19, 2023
Several security issues were fixed in the Linux kernel.
January 19, 2023
Several security issues were fixed in the Linux kernel.
January 19, 2023
security update
January 19, 2023
security update
January 19, 2023
LockBit ransomware – what you need to know
January 19, 2023
University of Texas latest US school to ban TikTok
January 19, 2023
Mailchimp ‘fesses up to second digital burglary in five months
January 19, 2023
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.
January 19, 2023
Ransomware attack severs 1,000 ships from their on-shore servers
January 19, 2023
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42852
January 19, 2023
– Update to 109.0
January 19, 2023
New sudo packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue.
January 19, 2023
Smashing Security podcast #305: Norton unlocked, and police leaks
January 19, 2023
It was discovered that the CompareTool of iText, a Java PDF library which uses the external ghostscript software to compare PDFs at a pixel level, allowed command injection when parsing a specially crafted filename.
January 18, 2023
Sudo could be made to possibly edit arbitrary files if it received a specially crafted input.
January 18, 2023
Top 10 Venmo scams – and how to stay safe
Don’t be the next victim – here’s what to know about some of the most common tricks that scammers use on the payment app The post Top 10 Venmo scams – and how to stay safe appeared first on WeLiveSecurity
January 18, 2023
Researchers warn of malicious Visual Studio Code extensions
January 18, 2023
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
January 18, 2023
New libXpm packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues.
January 18, 2023
New httpd packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues.
January 18, 2023
New git packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues.
January 18, 2023
Security fix for CVE-2022-46391
January 18, 2023
Security fix for CVE-2022-46391
January 18, 2023
security update
January 17, 2023
Serious Security: Unravelling the LifeLock “hacked passwords” story
January 17, 2023
Hybrid commerce: Blurring the lines between business and pleasure
It is now acceptable to find a job on a dating app! The post Hybrid commerce: Blurring the lines between business and pleasure appeared first on WeLiveSecurity
January 17, 2023
Microsoft locks door to default guest authentication in Windows Pro
January 17, 2023
The container bci/python was updated. The following patches have been included in this update:
January 17, 2023
The container bci/python was updated. The following patches have been included in this update:
January 17, 2023
The container suse/389-ds was updated. The following patches have been included in this update:
January 17, 2023
An update that contains security fixes can now be installed.
January 17, 2023
The container sles-15-sp4-chost-byos-v20230111-arm64 was updated. The following patches have been included in this update:
January 17, 2023
Tencent fired 100 people for corruption during 2022
January 17, 2023
A logic error was discovered in the implementation of the “SafeSocks” option of Tor, a connection-based low-latency anonymous communication system, which did result in allowing unsafe SOCKS4 traffic to pass.
January 16, 2023
Ugh! Norton LifeLock password manager accounts accessed by hackers
January 16, 2023
Hackers disrupt 24 Hours of Le Mans Virtual esports event
January 16, 2023
For password protection, dump LastPass for open source Bitwarden
January 16, 2023
An update for libxml2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
January 16, 2023
An update for dpdk is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 16, 2023
An update for dpdk is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 16, 2023
An update for dpdk is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 16, 2023
An update for dpdk is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
January 16, 2023
An update for dpdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 16, 2023
menglong2234 discovered NULL pointer exceptions in net-snmp, a suite of Simple Network Management Protocol applications, which could could result in debian of service.
January 15, 2023
The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
January 15, 2023
The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
January 15, 2023
The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
January 15, 2023
The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
January 15, 2023
The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
January 15, 2023
security update
January 14, 2023
security update
January 14, 2023
security update
January 14, 2023
APT group trojanizes Telegram app – Week in security with Tony Anscombe
StrongPity’s backdoor is fitted with various spying features and can record phone calls, collect texts, and gather call logs and contact lists The post APT group trojanizes Telegram app – Week in security with Tony Anscombe appeared first on WeLiveSecurity
January 14, 2023
Russians say they can grab software from Intel again
January 14, 2023
v1.5.1 – fix logging to stdout when –stdout is used *thanks to Eta – update –treshold option accept decimal numbers as parameter – fix crashes when processing certain broken JPEG images – fix memory leaks – fix (logging) output in parallel processing mode
January 14, 2023
Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
January 14, 2023
New netatalk packages are available for Slackware 14.1, 14.2, 15.0, and -current to fix a security issue.
January 13, 2023
Several security issues were fixed in the Linux kernel.
January 13, 2023
Two vulnerabilities were discovered in the LLPD implementation of Open vSwitch, software-based Ethernet virtual switch, which could result in denial of service.
January 13, 2023
Igor Ponomarev discovered that LAVA, a continuous integration system for deploying operating systems onto physical and virtual hardware for running tests, was suspectible to denial of service via recursive XML entity expansion.
January 13, 2023
Introducing IPyIDA: A Python plugin for your reverse‑engineering toolkit
ESET Research announces IPyIDA 2.0, a Python plugin integrating IPython and Jupyter Notebook into IDA The post Introducing IPyIDA: A Python plugin for your reverse‑engineering toolkit appeared first on WeLiveSecurity
January 13, 2023
Long data privacy notices aren’t foolproof, Euro watchdog tells Meta
January 13, 2023
A Brief History of Cryptography
January 13, 2023
OpenSSL: From FIPS 140-2 upstream to 140-3 downstream
January 13, 2023
This can’t be a real bomb threat: you’ve called a modem, not a phone
January 13, 2023
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
January 13, 2023
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
January 13, 2023
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
January 13, 2023
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
January 13, 2023
Microsoft fumbles zero trust upgrade for some Asian customers
January 13, 2023
Several security issues were fixed in the Linux kernel.
January 13, 2023
Several security issues were fixed in the Linux kernel.
January 13, 2023
security update
January 12, 2023
security update
January 12, 2023
security update
January 12, 2023