July 13, 2020
Digicert revokes a raft of web security certificates
July 13, 2020
An update is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 13, 2020
The Enemy Within: How Insider Threats Are Changing
July 13, 2020
An update for machine-config-daemon and openshift is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 13, 2020
dbus: denial of service via file descriptor leak (CVE-2020-12049) SL7 x86_64 dbus-1.10.24-14.el7_8.x86_64.rpm dbus-debuginfo-1.10.24-14.el7_8.i686.rpm dbus-debuginfo-1.10.24-14.el7_8.x86_64.rpm dbus-libs-1.10.24-14.el7_8.i686.rpm dbus-libs-1.10.24-14.el7_8.x86_64.rpm dbus-x11-1.10.24-14.el7_8.x86_64.rpm dbus-devel-1.10.24-14.el7_8.i686.rpm dbus-devel-1.10.24- [More…]
July 13, 2020
Monday review – the hot stories of the week
July 13, 2020
An update that fixes four vulnerabilities is now available.
July 13, 2020
An update that fixes one vulnerability is now available.
July 13, 2020
The previous update for chromium released as DSA 4714-2 contained a flaw in the service worker implementation. This problem causes the browser to crash when a connection error occurs. Updated chromium packages are now available that correct this issue.
July 13, 2020
LiveAuctioneers security breach puts users at risk
July 11, 2020
Update to 2.28.3: * Fix kinetic scrolling with async scrolling. * Fix web process hangs on large GitHub pages. * Bubblewrap sandbox should not attempt to bind empty paths. * Fix threading issues in the media player. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
July 11, 2020
The 5.7.8 stable kernel update contains a number of important fixes across the tree.
July 11, 2020
Update to 2.53.3 The database format of the stored passwords and certificates in the user profile are now changed. SeaMonkey should perform the changes hiddenly at the first run, just asking for the master password (if used). To avoid a hypothetical data loss, it is recommended to backup user profile before the update, or even […]
July 11, 2020
This update applies a proposed fix for CVE-2018-12983.
July 10, 2020
This update applies a proposed fix for CVE-2018-12983.
July 10, 2020
Backport patches for CVE-2020-15306, CVE-2020-15305, CVE-2020-15304
July 10, 2020
Security fix
July 10, 2020
This update applies a proposed fix for CVE-2018-12983.
July 10, 2020
This update applies a proposed fix for CVE-2018-12983.
July 10, 2020
Google Bans Stalkerware Ads – With a Loophole
July 10, 2020
Reading Time: ~ 2 min. Ragnar locker Attacks Portuguese Energy Producer It was recently confirmed that Energias de Portugal (EDP), one of the largest energy producers in the world, has fallen victim to the Ragnar Locker ransomware variant. The original attack took place in April but was only discovered in May after nearly three weeks […]
July 10, 2020
Billions of stolen passwords for sale on the dark web
While logins to music and video streaming services sell for less than ten dollars each, domain admin access is being offered for US$120,000 The post Billions of stolen passwords for sale on the dark web appeared first on WeLiveSecurity
July 10, 2020
More evil: A deep look at Evilnum and its toolset
ESET research gives a detailed picture of the operations of the Evilnum group and its toolkit deployed in attacks against carefully chosen targets in the fintech sector The post More evil: A deep look at Evilnum and its toolset appeared first on WeLiveSecurity
July 10, 2020
Updated mbedtls packages fix security vulnerabilities Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave.
July 10, 2020
Updated mediawiki packages fix security vulnerability: In MediaWiki before 1.31.8, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This
July 10, 2020
Advisory text to describe the update. Wrap lines at ~75 chars. A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool.
July 10, 2020
Updated ffmpeg packages fix security vulnerabilities: This update provides ffmpeg version 4.1.6, which fixes several security vulnerabilities and other bugs which were corrected upstream.
July 10, 2020
Report: Most Popular Home Routers Have ‘Critical’ Flaws
July 10, 2020
An update that fixes one vulnerability is now available.
July 10, 2020
An update that fixes one vulnerability is now available.
July 10, 2020
security update
July 9, 2020
security update
July 9, 2020
Proxy or VPN for Netflix – Which is Best?
July 9, 2020
Popular home routers plagued by critical security flaws
A study paints a dim picture of router security, as none of the 127 devices tested was free of severe vulnerabilities The post Popular home routers plagued by critical security flaws appeared first on WeLiveSecurity
July 9, 2020
Zoom Zero-Day Allows RCE, Patch on the Way
July 9, 2020
BlueLeaks Server Seized By German Police: Report
July 9, 2020
Several security issues were fixed in OpenSSL.
July 9, 2020
FIx CVE-2019-20454
July 8, 2020
This is a security fix release that includes fixes for the following local buffer overflow vulnerability. – CVE-2022-4044: Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it This update is recommended for all xrdp users.
July 8, 2020
Remmina 1.4.7 and FreeRDP 2.1.2 to fix many bugs and CVEs
July 8, 2020
Remmina 1.4.7 and FreeRDP 2.1.2 to fix many bugs and CVEs
July 8, 2020
Security update for CVE-2020-12695 (CallStranger)
July 8, 2020
security update
July 8, 2020
Attackers target critical flaw in popular networking gear
The vulnerability, which received the highest possible severity score, leaves thousands of devices at risk of being taken over by remote attackers. A patch is available. The post Attackers target critical flaw in popular networking gear appeared first on WeLiveSecurity
July 8, 2020
Raising children in the social media limelight? Pause before you post
How (over)sharing your children’s triumphs and antics with the world may impact their immediate and distant future – and how to reduce the risks of ‘sharenting’ The post Raising children in the social media limelight? Pause before you post appeared first on WeLiveSecurity
July 8, 2020
Several security issues were fixed in Thunderbird.
July 8, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2824
July 8, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2827
July 8, 2020
Several vulnerabilities have been discovered in the interpreter for the Ruby language. CVE-2020-10663
July 8, 2020
An update that fixes four vulnerabilities is now available.
July 8, 2020
An update that fixes two vulnerabilities is now available.
July 8, 2020
security update
July 8, 2020