Three vulnerabilities have been found in the MySQL Connector/J JDBC driver. For the oldstable distribution (stretch), these problems have been fixed
June 11, 2020
Multiple security issues have been found in Thunderbird which could result in the setup of a non-encrypted IMAP connection, denial of service or potentially the execution of arbitrary code.
June 11, 2020
It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language.
June 11, 2020
Bitcoin scammers take YouTube channels for a SpaceX ride
June 11, 2020
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for the Special Register Buffer Data Sampling (CVE-2020-0543), Vector Register Sampling (CVE-2020-0548) and L1D Eviction Sampling (CVE-2020-0549) hardware vulnerabilities.
June 11, 2020
An update that solves four vulnerabilities and has one errata is now available.
June 11, 2020
Microsoft squishes 129 bugs with Patch Tuesday updates
June 11, 2020
security update
June 11, 2020
Gaming Security – Valve and Riot Games
June 10, 2020
security update
June 10, 2020
security update
June 10, 2020
Helping Remote Workers Overcome Remote Attacks
June 10, 2020
Vast hack‑for‑hire scheme targeted thousands of people, organizations
An obscure Indian company operated a scheme targeting banks, non-profits, politicians and journalists all over the world, a report says The post Vast hack‑for‑hire scheme targeted thousands of people, organizations appeared first on WeLiveSecurity
June 10, 2020
An update that fixes one vulnerability is now available.
June 10, 2020
An update that fixes one vulnerability is now available.
June 10, 2020
An update for expat is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
June 10, 2020
Thanos Ransomware First to Weaponize RIPlace Tactic
June 10, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2432
June 10, 2020
hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543) * hw: L1D Cache Eviction Sampling (CVE-2020-0549) * hw: Vector Register Data Sampling (CVE-2020-0548) SL6 x86_64 microcode_ctl-1.17-33.26.el6_10.x86_64.rpm microcode_ctl-debuginfo-1.17-33.26.el6_10.x86_64.rpm i386 microcode_ctl-1.17-33.26.el6_10.i686.rpm microcode_ctl-debuginfo-1.17-33.26.el6_10.i686.rpm [More…]
June 10, 2020
kernel: NULL pointer dereference due to KEYCTL_READ on negative key (CVE-2017-12192) SL6 x86_64 kernel-2.6.32-754.30.2.el6.x86_64.rpm kernel-debug-2.6.32-754.30.2.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-754.30.2.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.30.2.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.30.2.el6.i686.rpm kernel-debug-devel-2.6.32-754.30.2.el [More…]
June 10, 2020
Billions of devices affected by UPnP vulnerability
June 10, 2020
Alarm sounded over security risks in online voting system
Bad actors could tamper with ballots cast via OmniBallot without being detected by voters, election officials or the tool’s developer, a study finds The post Alarm sounded over security risks in online voting system appeared first on WeLiveSecurity
June 9, 2020
Apple hopes to bolster password security with open source project
The tech giant wants developers of password managers to collaborate for better user experience and security The post Apple hopes to bolster password security with open source project appeared first on WeLiveSecurity
June 9, 2020
The package chromium before version 83.0.4103.97-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution and content spoofing.
June 9, 2020
The package firefox before version 77.0-1 is vulnerable to multiple issues including arbitrary code execution, denial of service, private key recovery and content spoofing.
June 9, 2020
An update that fixes four vulnerabilities is now available.
June 9, 2020
An update that fixes three vulnerabilities is now available.
June 9, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2414
June 9, 2020
An information disclosure vulnerability in GnuTLS allow remote attackers to obtain sensitive information.
June 9, 2020
Reading Time: ~ 3 min. Nestled within our chapter on malware in the 2020 Webroot Threat Report is a comparison of infection rates between business and personal devices. The finding that personal devices are about twice as likely as business devices to become infected was always significant, if not surprising. But the advent of the […]
June 9, 2020
security update
June 8, 2020
SMBGhost RCE Exploit Threatens Corporate Networks
June 8, 2020
Phishing Attack Hits German Coronavirus Task Force
June 8, 2020
An update that fixes three vulnerabilities is now available.
June 8, 2020
An update that solves three vulnerabilities and has one errata is now available.
June 8, 2020
An update that fixes two vulnerabilities is now available.
June 8, 2020
An update that fixes three vulnerabilities is now available.
June 8, 2020
An update that solves one vulnerability and has three fixes is now available.
June 8, 2020
An update that fixes one vulnerability is now available.
June 8, 2020
The following CVE(s) were reported against src:cups. CVE-2019-8842
June 7, 2020
A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images.
June 7, 2020
GnuTLS could be made to expose sensitive information.
June 6, 2020
A flaw was reported in the TLS session ticket key construction in GnuTLS, a library implementing the TLS and SSL protocols. The flaw caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a
June 6, 2020
Two vulnerabilities were discovered in Node.js, which could result in denial of service and potentially the execution of arbitrary code. For the stable distribution (buster), these problems have been fixed in
June 6, 2020
security update
June 6, 2020
Reading Time: ~ 2 min. TrickBot Silently Targets Servers Knowing that many domain controller servers are rarely shutdown or rebooted, the authors of TrickBot have made some changes to allow the infection to run from memory. While this can be detrimental to the payload, as a reboot could easily remove it, the stealth approach could […]
June 5, 2020
Mozilla fixes high‑risk Firefox flaws, bug in DoH feature
The browser maker rolls out updates on back-to-back days, including a patch to avoid unintentionally overloading DNS providers The post Mozilla fixes high‑risk Firefox flaws, bug in DoH feature appeared first on WeLiveSecurity
June 5, 2020