A Global Challenge The steady stream of cyberattacks seen throughout 2019 turned into a torrent over the last year – ransomware, phishing scams and data breaches are now at an all-time high. Of course, the growing cybersecurity threat isn’t contained to just one country. The effects are being felt the world over. The National Cybersecurity […]
Drowning in spam? A study presented at Black Hat USA 2021 examines if sharing your personal information with major companies contributes to the deluge of nuisance emails, texts and phone calls. The post Is your personal information being abused? appeared first on WeLiveSecurity
How can companies and employees who start to adapt to hybrid working practices protect themselves against cloud security threats? The post Why cloud security is the key to unlocking value from hybrid working appeared first on WeLiveSecurity
An update that fixes two vulnerabilities is now available.
Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service (DOS) via crafted metadata (CVE-2021-31291).
Updated bluez packages fix security vulnerability: Adapter incorrectly restores Discoverable state after powered down (CVE-2021-3658).
Updated nodejs packages fix security vulnerability: Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior (CVE-2021-22930)
Updated php-pear packages fix security vulnerability: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive (CVE-2021-32610).
Updated libsndfile packages fix security vulnerability: A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file (CVE-2021-3246).
Webroot put forward another strong performance in its latest round of independent third-party testing, besting all competitors and taking home the highest overall score. In taking the highest score in the category for 2021, Webroot beat out competitors including BitDefender, McAfee® and ESET® endpoint security solutions. In the report, the company conducted objective testing of […]
In March of 2020 schools throughout the United Kingdom closed their doors to try to stem the spread of the coronavirus. In addition to disruptions to the lives of students and their families, the pandemic put unprecedented pressure on IT departments across the UK and wider world. Notoriously strapped for resources, many schools’ IT departments […]
security update
How is Black Hat USA 2021 different from the past editions of the conference and what kinds of themes may steal the show this year? The post Black Hat 2021 – non‑virtual edition appeared first on WeLiveSecurity
An update that fixes four vulnerabilities is now available.
This update provides a new upstream version.
An update that fixes one vulnerability is now available.
An update that solves four vulnerabilities and has one errata is now available.
An update that fixes 6 vulnerabilities is now available.
An update that solves four vulnerabilities and has two fixes is now available.
openCryptoki could be made to allow invalid curve attacks if it received a specially crafted key.
PEAR could be made to overwrite files as the administrator.
Several security issues were fixed in Perl DBI module.
An update that fixes four vulnerabilities is now available.
Security fix for CVE-2021-34558
Security fix for CVE-2021-34558
A story of how easily hackers could hit a hole-in-one with the computer network of a premier golf club in the UK. The post On course for a good hacking appeared first on WeLiveSecurity
The package chromium before version 92.0.4515.131-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and content spoofing.
The package nodejs-lts-erbium before version 12.22.4-1 is vulnerable to arbitrary code execution.
The package nodejs-lts-fermium before version 14.17.4-1 is vulnerable to arbitrary code execution.
The package nodejs before version 16.6.0-1 is vulnerable to arbitrary code execution.
lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 – lasso-2.5.1-8.el7_9.i686.rpm – lasso-2.5.1-8.el7_9.x86_64.rpm – lasso-debuginfo-2.5.1-8.el7_9.i686.rpm – lasso-debuginfo-2.5.1-8.el7_9 [More…]
An update for glibc is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
security update
An update for lasso is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
An update for the varnish:6 module is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Extended Update Support, and Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact
Several security issues were fixed in QPDF.
The container sles-15-sp3-chost-byos-v20210729 was updated. The following patches have been included in this update:
The container suse-sles-15-sp3-chost-byos-v20210729-gen2 was updated. The following patches have been included in this update:
The 5.13.6 stable kernel update contains a number of important fixes across the tree.
The container suse-sles-15-sp3-chost-byos-v20210729-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
# New in release OpenJDK 11.0.12 (2021-07-20): Live versions of these release notes can be found at: * https://bitly.com/openjdk11012 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt ## Security fixes – JDK-8256157: Improve bytecode assembly – JDK-8256491: Better HTTP transport – JDK-8258432, CVE-2021-2341: Improve file transfers –
# New in release OpenJDK 8u302 (2021-07-20) Live versions of these release notes can be found at: * https://bitly.com/openjdk8u302 * https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u302.txt ## Security fixes * JDK-8256157: Improve bytecode assembly * JDK-8256491: Better HTTP transport * JDK-8258432, CVE-2021-2341: Improve file transfers *
Upstream 6.2.5 release (RHBZ #1984631). Fix CVE-2021-32761: 32-bit systems BITFIELD command integer overflow.
# New in release OpenJDK 8u302 (2021-07-20) Live versions of these release notes can be found at: * https://bitly.com/openjdk8u302 * https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u302.txt ## Security fixes * JDK-8256157: Improve bytecode assembly * JDK-8256491: Better HTTP transport * JDK-8258432, CVE-2021-2341: Improve file transfers *
# New in release OpenJDK 11.0.12 (2021-07-20): Live versions of these release notes can be found at: * https://bitly.com/openjdk11012 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt ## Security fixes – JDK-8256157: Improve bytecode assembly – JDK-8256491: Better HTTP transport – JDK-8258432, CVE-2021-2341: Improve file transfers –
security update
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
The package vivaldi before version 4.1.2369.11-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, content spoofing, incorrect calculation, information disclosure and insufficient validation.
The package powerdns before version 4.5.1-1 is vulnerable to denial of service.