February 3, 2020
git: arbitrary code execution via .gitmodules (CVE-2018-17456) SL6 x86_64 git-1.7.1-10.el6_10.x86_64.rpm git-daemon-1.7.1-10.el6_10.x86_64.rpm git-debuginfo-1.7.1-10.el6_10.x86_64.rpm i386 git-1.7.1-10.el6_10.i686.rpm git-daemon-1.7.1-10.el6_10.i686.rpm git-debuginfo-1.7.1-10.el6_10.i686.rpm noarch emacs-git-1.7.1-10.el6_10.noarch.rpm emacs-git-el-1.7.1- [More…]
February 3, 2020
Several security issues were fixed in the kernel.
February 3, 2020
An update for git is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 3, 2020
security update
February 2, 2020
Fixes **CVE-2017-18189**.
February 2, 2020
This update fixes CVE-2020-6851.
February 1, 2020
This update fixes CVE-2020-6851.
February 1, 2020
Fix a potential out of bounds write when checking a maliciously corrupted file system. This is probably not exploitable on 64-bit platforms, but may be exploitable on 32-bit binaries depending on how the compiler lays out the stack variables. (Addresses CVE-2019-5188) A maliciously corrupted file systems can trigger buffer overruns in the quota code used […]
February 1, 2020
security update
February 1, 2020
January 2020 CPU security update. See http://mail.openjdk.java.net/pipermail/jdk8u-dev/2020-January/010979.html https://openjdk.java.net/groups/vulnerability/advisories/2020-01-14
February 1, 2020
Update to Samba 4.11.6 —- Update to Samba 4.11.5 – Security fixes for CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344
February 1, 2020
A stack-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users, triggerable when configured with the pwfeedback option enabled. An unprivileged user
February 1, 2020
Joe Vennix discovered a stack-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users, triggerable when configured with the “pwfeedback” option enabled. An unprivileged user can take advantage of this flaw to obtain
February 1, 2020
A heap-based buffer overflow vulnerability was discovered in the idn2_to_ascii_4i() function in libidn2, the GNU library for Internationalized Domain Names (IDNs), which could result in denial of service, or the execution of arbitrary code when processing a long
February 1, 2020
An issue was found in the IonMonkey JIT compiler of the Mozilla Firefox web browser which could lead to arbitrary code execution. For Debian 8 “Jessie”, this problem has been fixed in version
February 1, 2020
security update
February 1, 2020
security update
February 1, 2020
Advanced Obfuscation Marks Widespread Info-Stealing Campaign
January 31, 2020
Evil Corp Returns With New Malware Infection Tactic
January 31, 2020
Cyber criminals using Coronavirus emergency to spread malware
January 31, 2020
In Qt5’s plugin loader code as found in qtbase-opensource-src, it was possible to (side-)load plugins from “the” local folder in addition to a system-widely defined library path.
January 31, 2020
Iranian Hackers Target U.S. Gov. Vendor With Malware
January 31, 2020
* Fix issues while trying to play a video on NextCloud. * Make sure the GL video sink uses a valid WebKit shared GL context. * Fix vertical alignment of text containing arabic diacritics. * Fix build with icu 65.1. * Fix page loading errors with websites using HSTS. * Fix web process crash when […]
January 31, 2020
Reading Time: ~ 2 min. Indonesian Magecart Hackers Arrested At least three individuals were arrested in connection to the infamous Magecart information stealing malware. Thanks to the combined efforts of several international law enforcement agencies, numerous servers issuing commands to awaiting Magecart scripts have been taken down in both Indonesia and Singapore. While these are […]
January 31, 2020
Top 10 Best Writing Tools
January 31, 2020
Several vulnerabilities were fixed in libjackson-json-java. CVE-2017-7525
January 31, 2020
Travelex hobbles back online, one month after ransomware hit it hard
January 31, 2020
Serious Security – How ‘special case’ code blew a hole in OpenSMTPD
January 31, 2020
Zero Day Initiative Bug Hunters Rake in $1.5M in 2019
January 31, 2020
$20,000 up for grabs in Xbox Live security hole hunt
January 31, 2020
€13 million Maltese bank cyber-heist – six men arrested in UK
January 31, 2020
Sodinokibi Ransomware Group Sponsors Hacking Contest
January 31, 2020
UN hacked via unpatched SharePoint server
January 31, 2020
US Interior Dept extends drone grounding over foreign hacking fears
January 31, 2020
Avast acknowledges collecting user data; shuts down Jumpshot
January 31, 2020
Facebook to pay $550m to settle face-tagging suit
January 31, 2020
An update that solves one vulnerability and has three fixes is now available.
January 31, 2020
200K WordPress Sites Vulnerable to Plugin Flaw
January 30, 2020
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanag es memory, as demonstrated by IRC DCC commands in EMU_IRC.
January 30, 2020
* Fix issues while trying to play a video on NextCloud. * Make sure the GL video sink uses a valid WebKit shared GL context. * Fix vertical alignment of text containing arabic diacritics. * Fix build with icu 65.1. * Fix page loading errors with websites using HSTS. * Fix web process crash when […]
January 30, 2020
Update to 79.0.3945.130. Fixes the following security issues: * CVE-2020-6378 * CVE-2020-6379 * CVE-2020-6380
January 30, 2020
This is January 2020 OpenJDK security update for java-latest-openjdk packages. The sources are updated to the 13.0.2+8 tag.
January 30, 2020
Update to bugfix release 2.9.3. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst
January 30, 2020
security update
January 30, 2020
security update
January 30, 2020
Coronavirus Campaigns Spread Emotet, Malware
January 30, 2020
Bezos, WhatsApp Cyberattacks Show Growing Mobile Sophistication
January 30, 2020
UN hacked, becomes target of massive state-sponsored spying op
January 30, 2020
Trello exposed! Search turns up huge trove of private data
January 30, 2020
97% of airports showing signs of weak cybersecurity
January 30, 2020
U.N. Hack Stemmed From Microsoft SharePoint Flaw
January 30, 2020
Employers can’t force you to get microchipped, Indiana reps say
January 30, 2020
An update that fixes two vulnerabilities is now available.
January 30, 2020
An update that fixes one vulnerability is now available.
January 30, 2020
An update that fixes two vulnerabilities is now available.
January 30, 2020
An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code.
January 30, 2020
Smashing Security #163: Russian heists and Ring wrongs
January 30, 2020
Government spyware company spied on hundreds of innocent people
January 30, 2020
Two vulnerabilities have recently been discovered in the stream-tcp code of the intrusion detection and prevention tool Suricata.
January 30, 2020
Dell, HP Memory-Access Bugs Open Attacker Path to Kernel Privileges
January 30, 2020
IoT laws are coming: What to expect
No more default logins on new IoT devices if UK legislators get their way The post IoT laws are coming: What to expect appeared first on WeLiveSecurity
January 30, 2020
An update that solves one vulnerability and has four fixes is now available.
January 30, 2020
Kali Linux 2020.1 released – Download now
January 29, 2020
Apple Security Updates Tackle iOS Device Tracking, RCE Flaws
January 29, 2020
Stolen card data of millions of Wawa customers sold on dark web
January 29, 2020
Google Sets Record High in Bug-Bounty Payouts
January 29, 2020
Apple patches critical bugs on iPhone and Mac – update now!
January 29, 2020
Critical Flaws in Magento e-Commerce Platform Allow Code-Execution
January 29, 2020
Intel promises fix after researchers reveal ‘CacheOut’ CPU flaws
January 29, 2020
Let’s make ransomware MORE illegal, says Maryland
January 29, 2020
Several vulnerabilities have been discovered in the otrs2 package that may lead to unauthorized access, remote code execution and spoofing.
January 29, 2020
Fraud spike prompts Chrome developer lock-out
January 29, 2020
Apache Solr could be made to run programs if it received specially crafted network traffic.
January 29, 2020
Win $1.5 million hacking an Android phone
January 29, 2020