An update that fixes 5 vulnerabilities is now available.
May 28, 2020
Smashing Security podcast #180: Taking care of Clare
May 28, 2020
security update
May 27, 2020
security update
May 27, 2020
From Agent.BTZ to ComRAT v4: A ten‑year journey
Turla has updated its ComRAT backdoor and now uses the Gmail web interface for Command and Control The post From Agent.BTZ to ComRAT v4: A ten‑year journey appeared first on WeLiveSecurity
May 27, 2020
An update that fixes three vulnerabilities is now available.
May 27, 2020
Several security issues were fixed in Unbound.
May 27, 2020
Google may soon add end-to-end encryption for RCS
May 27, 2020
Updated transmission packages fix security vulnerability: Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent
May 27, 2020
Updated sleuthkit packages fix security vulnerabilities: An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table (CVE-2019-14532).
May 27, 2020
Updated log4net packages fix security vulnerability This patch fixes a security vulnerabiliy reported by Karthik Balasundaram. The security vulnerability was found in the way how log4net parses xml configuration files where it allowed to process XML External Entity Processing. An attacker could use
May 27, 2020
Advisory text to describe the update. Wrap lines at ~75 chars. Updated dojo package fixes security vulnerabilities: In affected versions of dojo, the deepCopy method is vulnerable to
May 27, 2020
Crooks threaten to leak customer data stolen from e‑commerce sites
A hack-and-extort campaign takes aim at poorly secured databases replete with customer information that can be exploited for further attacks The post Crooks threaten to leak customer data stolen from e‑commerce sites appeared first on WeLiveSecurity
May 26, 2020
Two years later, has GDPR fulfilled its promise?
Has the landmark law helped build a culture of privacy in organizations and have consumers become more wary of sharing their personal data? The post Two years later, has GDPR fulfilled its promise? appeared first on WeLiveSecurity
May 26, 2020
New iPhone jailbreak released
May 26, 2020
Turla APT Revamps One of Its Go-To Spy Tools
May 26, 2020
Docker Desktop danger discovered, patch now
May 26, 2020
An update that fixes one vulnerability is now available.
May 26, 2020
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 26, 2020
Reading Time: ~ 2 min. Our 2020 Threat Report shows increasing risks for businesses and consumers still running Windows 7, which ceased updates, support and patches earlier this year. This creates security gaps that hackers are all too eager to exploit. In fact, according to the report, malware targeting Windows 7 increased by 125%. And […]
May 26, 2020
Several security issues were fixed in Thunderbird.
May 26, 2020
An update for rh-maven35-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 26, 2020
An update that fixes one vulnerability is now available.
May 26, 2020
An update that fixes one vulnerability is now available.
May 26, 2020
This microcode updates provides new microcode versions for the following Intel Ice Lake and Sandy Bride family processors: Processor Stepping Model Update Name – ICL-U/Y D1 6-7e-5/80 00000046->00000078 Core Gen10 Mobile
May 25, 2020
An update that contains security fixes can now be installed.
May 25, 2020
### python-markdown2 2.3.9 ### – [pull #335] Added header support for wiki tables – [pull #336] Reset _toc when convert is run – [pull #353] XSS fix – [pull #350] XSS fix
May 24, 2020
An update that fixes one vulnerability is now available.
May 24, 2020
The 5.6.14 stable kernel update contains a number of important fixes across the tree
May 24, 2020
### python-markdown2 2.3.9 ### – [pull #335] Added header support for wiki tables – [pull #336] Reset _toc when convert is run – [pull #353] XSS fix – [pull #350] XSS fix
May 24, 2020
An update that fixes two vulnerabilities is now available.
May 24, 2020
Georgi Guninski and the Qualys Research Labs discovered multiple vulnerabilities in qmail (shipped in Debian as netqmail with additional patches) which could result in the execution of arbitrary code, bypass of mail address verification and a local information leak whether a file
May 24, 2020
Security fix for CVE-2018-1285
May 24, 2020
Update to 8.10 release (CVE-2020-12823)
May 24, 2020
security update
May 24, 2020
Security fix for CVE-2020-12662 and CVE-2020-12663
May 23, 2020
– CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn’t start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to crash the submission service without authentication. – CVE-2020-10958: lmtp/submission:
May 23, 2020
An update that fixes three vulnerabilities is now available.
May 23, 2020
An update that fixes three vulnerabilities is now available.
May 23, 2020
The package chromium before version 83.0.4103.61-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, content spoofing and insufficient validation.
May 23, 2020
The package openconnect before version 1:8.10-1 is vulnerable to arbitrary code execution.
May 23, 2020
The package powerdns-recursor before version 4.2.2-1 is vulnerable to multiple issues including denial of service and insufficient validation.
May 23, 2020
The package dovecot before version 2.3.10.1-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
May 23, 2020
security update
May 22, 2020
Chrome 83 arrives with enhanced security and privacy controls
New features include DNS over HTTPS, a Safety Check section and simpler cookie management The post Chrome 83 arrives with enhanced security and privacy controls appeared first on WeLiveSecurity
May 22, 2020
No “Game over” for the Winnti Group
The notorious APT group continues to play the video game industry with yet another backdoor The post No “Game over” for the Winnti Group appeared first on WeLiveSecurity
May 22, 2020
Apple and Google launch COVID-19 contact tracing API
May 22, 2020
An update that fixes one vulnerability is now available.
May 22, 2020
An update that fixes one vulnerability is now available.
May 22, 2020
An update that fixes two vulnerabilities is now available.
May 22, 2020
An update that fixes three vulnerabilities is now available.
May 22, 2020