June 1, 2020
In httplib2, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts
June 1, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2344
June 1, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2337
June 1, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2334
June 1, 2020
Flask could be made to consume a large amount of memory if it received a specially crafted input.
June 1, 2020
Joomla suffers security breach exposing user records
June 1, 2020
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 1, 2020
The json-c shared library had an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
May 31, 2020
Gollem, as used in Horde Groupware Webmail Edition and other products, had been affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET dir parameter in the browser functionality, affecting
May 31, 2020
The json-c shared library had an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
May 31, 2020
An update that solves one vulnerability and has one errata is now available.
May 31, 2020
New upstream release with bug and security fixes. Also, consolidates duplicate pakages marked and nodejs-marked. I tested upgrades from both, but may have missed some wonky situation.
May 30, 2020
New version 3.2.4, enabled build with androiddump.
May 30, 2020
Two memory management issues were found in the asfdemux element of the GStreamer “ugly” plugin collection, which can be triggered via a maliciously crafted file.
May 30, 2020
Two memory handling issues were found in gst-plugins-good0.10, a collection of GStreamer plugins from the “good” set:
May 30, 2020
It was discovered that there was both an invalid memory and heap overflow vulnerability in dosfstools, a collection of utilities for making and checking MS-DOS FAT filesystems.
May 30, 2020
Several vulnerabilities were discovered in package salt, a configuration management and infrastructure automation software.
May 30, 2020
New version 3.2.4, enabled build with androiddump.
May 29, 2020
An update that fixes one vulnerability is now available.
May 29, 2020
People know reusing passwords is risky – then do it anyway
And most people don’t change their password even after hearing about a breach, a survey finds The post People know reusing passwords is risky – then do it anyway appeared first on WeLiveSecurity
May 29, 2020
An update that solves one vulnerability and has two fixes is now available.
May 29, 2020
git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak (CVE-2020-11008) SL7 x86_64 git-1.8.3.1-23.el7_8.x86_64.rpm git-daemon-1.8.3.1-23.el7_8.x86_64.rpm git-debuginfo-1.8.3.1-23.el7_8.x86_64.rpm git-gnome-keyring-1.8.3.1-23.el7_8.x86_64.rpm git-svn-1.8.3.1-23.el7_8.x86_64.rpm noarch emacs-git-1.8.3.1-23.el7_8.noarch.rpm [More…]
May 29, 2020
## Python 3.8.3 This is the third maintenance release of Python 3.8. See [the c hangelog](https://docs.python.org/release/3.8.3/whatsnew/changelog.html#changelo g) for details. Contains the security fix for CVE-2020-8492.
May 28, 2020
Hackers Compromise Cisco Servers Via SaltStack Flaws
May 28, 2020
An update that fixes three vulnerabilities is now available.
May 28, 2020
USN-4369-1 introduced a regression in the Linux kernel.
May 28, 2020
USN-4367-1 introduced a regression in the Linux kernel.
May 28, 2020
Critical Android flaw lets attackers hijack almost any app, steal data
Left unpatched, the vulnerability could expose almost all Android users to the risk of having their personal data intercepted by attackers The post Critical Android flaw lets attackers hijack almost any app, steal data appeared first on WeLiveSecurity
May 28, 2020
Microsoft warns of PonyFinal ransomware attacks
May 28, 2020
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine.
May 28, 2020
Inside a ransomware gang’s attack toolbox
May 28, 2020
NetWalker ransomware – what you need to know
May 28, 2020
An update for freerdp is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 28, 2020
An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 28, 2020
Various minor vulnerabilities have been addredd in libexif, a library to parse EXIF metadata files.
May 28, 2020
This is a security update for JBoss EAP Continuous Delivery 19. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 28, 2020
An update that fixes 5 vulnerabilities is now available.
May 28, 2020
Smashing Security podcast #180: Taking care of Clare
May 28, 2020
security update
May 27, 2020
security update
May 27, 2020
From Agent.BTZ to ComRAT v4: A ten‑year journey
Turla has updated its ComRAT backdoor and now uses the Gmail web interface for Command and Control The post From Agent.BTZ to ComRAT v4: A ten‑year journey appeared first on WeLiveSecurity
May 27, 2020
An update that fixes three vulnerabilities is now available.
May 27, 2020
Several security issues were fixed in Unbound.
May 27, 2020
Google may soon add end-to-end encryption for RCS
May 27, 2020
Updated transmission packages fix security vulnerability: Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent
May 27, 2020
Updated sleuthkit packages fix security vulnerabilities: An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table (CVE-2019-14532).
May 27, 2020