March 2, 2021
Security fix for CVE-2021-27803
March 2, 2021
Update to CVE release 3002.5-1 for Python 3 Fixed on this release: CVE-2021-25283 Fixed in 3002.3: CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-3148 CVE-2021-3144 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283 CVE-2021-25284 CVE-2021-25284 CVE-2021-3197
March 2, 2021
Update to CVE release 3001.6-1 for Python 3 Fixed in 3001.5: CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-3148 CVE-2021-3144 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283 CVE-2021-25284 CVE-2021-3197
March 2, 2021
* Bring back the WebKitPluginProcess that was removed by mistake. (It will disappear again soon.) * Fix RunLoop objects leaked in worker threads. * Use Internet Explorer quirk for Google Docs. (Yes, even this new quirk is broken already.) * Security fixes: CVE-2020-13558
March 2, 2021
security update
March 2, 2021
Firewall Vendor Patches Critical Auth Bypass Flaw
March 1, 2021
Update to security and bugfix release 2.9.18.
March 1, 2021
bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation (CVE-2020-8625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 bind-debuginfo-9.11.4-26.P2.el7_9.4.i686.rpm bind-debuginfo-9.11.4-26.P2.el7_9.4.x86_64.rpm bind-export-libs-9 [More…]
March 1, 2021
Update to security and bugfix release 2.9.18.
March 1, 2021
Gizmodo gives poor password advice
March 1, 2021
An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 1, 2021
An update for bind is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 1, 2021
An update for podman is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 1, 2021
security update
February 28, 2021
– New upstream version (86.0)
February 28, 2021
Update to 88.0.4324.182. Fixes CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157
February 28, 2021
Get started with CrowdSec v.1.0.X>
February 28, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
February 28, 2021
An update that fixes two vulnerabilities is now available.
February 27, 2021
An update that fixes three vulnerabilities is now available.
February 27, 2021
An update that solves 5 vulnerabilities and has one errata is now available.
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0661
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0656
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0024
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2020:5408
February 27, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2020:5402
February 27, 2021
Beast Glatisant and Jelmer Vernooij reported that python-aiohttp, a async HTTP client/server framework, is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website.
February 27, 2021
security update
February 27, 2021
Stalkerware Volumes Remain Concerningly High, Despite Bans
February 26, 2021
Lazarus Targets Defense Companies with ThreatNeedle Malware
February 26, 2021
Yeezy Fans Face Sneaker-Bot Armies for Boost ‘Sun’ Release
February 26, 2021
Malware Gangs Partner Up in Double-Punch Security Threat
February 26, 2021
Podcast: Ransomware Attacks Exploded in Q4 2020
February 26, 2021
Protecting Sensitive Cardholder Data in Today’s Hyper-Connected World
February 26, 2021
An update that fixes one vulnerability is now available.
February 26, 2021
Championing worthy causes: How ESET gives a helping hand
A snapshot of some of the ways ESET makes an impact supporting the well-being of people, communities and the environment The post Championing worthy causes: How ESET gives a helping hand appeared first on WeLiveSecurity
February 26, 2021
Half a million stolen French medical records, drowned in feeble excuses
February 26, 2021
Several issues have been found in python-pysaml2, a pure python implementation of SAML Version 2 Standard. CVE-2017-1000433
February 26, 2021
The container suse/sles12sp5 was updated. The following patches have been included in this update:
February 26, 2021
security update
February 25, 2021
security update
February 25, 2021
Update postgresql and libpq to the new upstream release.
February 25, 2021
Update postgresql and libpq to the new upstream release.
February 25, 2021
Linux: display frontend “be-alloc” mode is unsupported (comment only) [XSA-363, CVE-2021-26934] (#1929549) arm: The cache may not be cleaned for newly allocated scrubbed pages [XSA-364, CVE-2021-26933] (#1929547)
February 25, 2021
Cyberattacks Launch Against Vietnamese Human-Rights Activists
February 25, 2021
Facebook ramps up fight against child abuse content
Two new tools will warn users about the risks of searching for and sharing content that exploits children, including the potential legal consequences of doing so The post Facebook ramps up fight against child abuse content appeared first on WeLiveSecurity
February 25, 2021
Health Website Leaks 8 Million COVID-19 Test Results
February 25, 2021
Malicious Mozilla Firefox Extension Allows Gmail Takeover
February 25, 2021
Google’s Password Checkup tool rolling out to Android devices
People who use devices running Android 9 or newer will be alerted if their login credentials have been stolen The post Google’s Password Checkup tool rolling out to Android devices appeared first on WeLiveSecurity
February 25, 2021
Cisco Warns of Critical Auth-Bypass Security Flaw
February 25, 2021
Defense in depth with Red Hat Insights
February 25, 2021
An update that fixes one vulnerability is now available.
February 25, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or information disclosure.
February 25, 2021
The package mumble before version 1.3.4-1 is vulnerable to arbitrary code execution.
February 25, 2021
The package postgresql before version 13.2-1 is vulnerable to information disclosure.
February 25, 2021
The package ansible-base before version 2.10.6-1 is vulnerable to information disclosure.
February 25, 2021
The package keycloak before version 12.0.3-1 is vulnerable to cross- site scripting.
February 25, 2021
Tax Season Ushers in Quickbooks Data-Theft Spike
February 24, 2021
Mozilla Patches Bugs in Firefox, Now Blocks Cross-Site Cookie Tracking
February 24, 2021
VMWare Patches Critical RCE Flaw in vCenter Server
February 24, 2021
Nvidia’s Anti-Cryptomining GPU Chip May Not Discourage Attacks
February 24, 2021
Microsoft Lures Populate Half of Credential-Swiping Phishing Emails
February 24, 2021
An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 24, 2021
An update for ansible is now available for Ansible Engine 2.9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 24, 2021
Red Hat OpenShift Container Platform release 4.7.0 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 24, 2021
Introducing Red Hat Vulnerability Scanner Certification
February 24, 2021
The history of open source risk reporting
February 24, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 24, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 24, 2021
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 24, 2021