Fabian Vogt and Dominik Penner discovered that the Ark archive manager did not sanitize extraction paths, which could result in maliciously crafted archives with symlinks writing outside the extraction directory.
May 20, 2022
An update that contains security fixes can now be installed.
May 20, 2022
An update that solves one vulnerability and has one errata is now available.
May 20, 2022
Protecting data now as the quantum era approaches
May 20, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
May 20, 2022
The container bci/ruby was updated. The following patches have been included in this update:
May 20, 2022
The container bci/openjdk was updated. The following patches have been included in this update:
May 20, 2022
US recovers a record $15m from the 3ve ad-fraud crew
May 19, 2022
Webroot Console 6.5 is here To help get us closer to retiring the Endpoint Protection Console, we’ve introduced three new functionality features with Webroot Console 6.5. Friendly name support To help get us closer to retiring the Endpoint Protection Console, we’ve introduced three new functionality features with Webroot Console 6.5. Friendly name support To improve […]
May 19, 2022
OpenLDAP could be made to perform arbitrary modifications to the database.
May 19, 2022
An update that fixes one vulnerability is now available.
May 19, 2022
An update that solves one vulnerability and has one errata is now available.
May 19, 2022
An update that fixes 6 vulnerabilities is now available.
May 19, 2022
An update that solves one vulnerability and has one errata is now available.
May 19, 2022
Upstream details at : https://access.redhat.com/errata/RHSA-2022:4642
May 19, 2022
The flip side of the coin: Why crypto is catnip for criminals
Cybercriminals continue to mine for opportunities in the crypto space – here’s what you should know about coin-mining hacks and crypto theft The post The flip side of the coin: Why crypto is catnip for criminals appeared first on WeLiveSecurity
May 19, 2022
security update
May 18, 2022
security update
May 18, 2022
security update
May 18, 2022
DOJ Says Doctor is Malware Mastermind
May 18, 2022
Add security to Azure applications with Azure WAF
May 18, 2022
Fake news – why do people believe it?
In the age of the perpetual news cycle and digital media, the risks that stem from the fake news problem are all too real The post Fake news – why do people believe it? appeared first on WeLiveSecurity
May 18, 2022
Sysrv-K Botnet Targets Windows, Linux
May 17, 2022
Several security issues were fixed in PCRE.
May 17, 2022
Several security issues were fixed in Apport.
May 17, 2022
iPhones Vulnerable to Attack Even When Turned Off
May 17, 2022
needrestart could be made to run programs.
May 17, 2022
zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 zlib-1.2.7-20.el7_9.i686.rpm zlib-1.2.7-20.el7_9.x86_64.rpm zlib-debuginfo-1.2.7-20.el7_9.i686.rpm zlib-debuginfo-1.2.7-20 [More…]
May 17, 2022
Jakub Wilk discovered a local privilege escalation in needrestart, a utility to check which daemons need to be restarted after library upgrades. Regular expressions to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate
May 17, 2022
Only DevSecOps can save the metaverse
May 17, 2022
OpenLDAP could be made to perform arbitrary modifications to the database.
May 17, 2022
The State of Kubernetes Security in 2022
May 17, 2022
China reveals its top five sources of online fraud
May 17, 2022
The ffmpeg project released the new version 3.2.18 with fixes for various issues found by the OSS-Fuzz project. For Debian 9 stretch, this release is packaged in version 7:3.2.18-0+deb9u1.
May 16, 2022
An update that contains security fixes can now be installed.
May 16, 2022
An update that fixes one vulnerability is now available.
May 16, 2022
An update that fixes 8 vulnerabilities is now available.
May 16, 2022
An update that fixes one vulnerability is now available.
May 16, 2022
An update that fixes two vulnerabilities is now available.
May 16, 2022
More money for open source security won’t work
May 16, 2022
The downside of ‘debugging’ ransomware
The decision to release a ransomware decryptor involves a delicate balancing act between helping victims recover their data and alerting criminals to errors in their code The post The downside of ‘debugging’ ransomware appeared first on WeLiveSecurity
May 16, 2022
Infinite loop vulnerability in the CHM file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions. (CVE-2022-20770) Infinite loop vulnerability in the TIFF file parser. Issue affects versions
May 15, 2022
cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call. (CVE-2017-9814) References:
May 15, 2022
CERTINFO never-ending busy-loop. (CVE-2022-27781) TLS and SSH connection too eager reuse. (CVE-2022-27782) References: – https://bugs.mageia.org/show_bug.cgi?id=30410
May 15, 2022
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. (CVE-2022-27404) FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to
May 15, 2022
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. (CVE-2022-25235) References:
May 15, 2022
When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disagree on where one request starts and where it ends. This would allow requests to be smuggled via the front-end proxy to waitress and later behavior. […]
May 15, 2022
CVE-2021-3596 A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in
May 14, 2022
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in information disclosure or denial of service. For Debian 9 stretch, these problems have been fixed in version
May 14, 2022
The container trento/trento-runner was updated. The following patches have been included in this update:
May 14, 2022
The container bci/openjdk-devel was updated. The following patches have been included in this update:
May 14, 2022
The container bci/nodejs was updated. The following patches have been included in this update:
May 14, 2022
The container bci/nodejs was updated. The following patches have been included in this update:
May 14, 2022
security update
May 13, 2022
security update
May 13, 2022
security update
May 13, 2022