– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
The update for openssl released as DSA 4539-1 introduced a regression where AES-CBC-HMAC-SHA ciphers were not enabled. Updated openssl packages are now available to correct this issue.
Update to latest upstream version.
Type: Vulnerability. Intel Active System Console is prone to a local privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Intel Smart Connect Technology is prone to a local privilege-escalation vulnerability.
Type: Vulnerability. Multiple Intel NUC Products are prone to multiple unspecified local security vulnerabilities; fixes are available
Type: Vulnerability. Juniper SBR Carrier is prone to an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
A security vulnerability was discovered in lucene-solr, an enterprise search server. The DataImportHandler, an optional but popular module to pull in data
An update that fixes one vulnerability is now available.
Reading Time: ~ 2 min. E-Scooter Security Vulnerability A security researcher recently found an API vulnerability within the software of Voi e-scooters that allowed him to add over $100,000 in ride credits to his account. The vulnerability stems from a lack of authentication after creating an account which allows users to enter an unlimited number […]
ruby-openid performed discovery first, and then verification. This allowed an attacker to change the URL used for discovery and trick the server into connecting to the URL. This server in turn could be a private server not publicly accessible.
Type: Vulnerability. Oracle has released an advance notification regarding the October 2019 Critical Patch Update that addresses 240 new vulnerabilities.
Reading Time: ~ 4 min. Online games aren’t new. Consumers have been playing them since as early as 1960. However, the market is evolving—games that used to require the computing power of dedicated desktops can now be powered by smartphones, and online gaming participation has skyrocketed. This unfortunately means that the dangers of online gaming […]
Risk Level: Very Low.
Fix KDC crash when logging PKINIT enctypes (CVE-2019-14844) This is a purely denial-of-service issue, though it is unauthenticated, and is unlikely to trigger by accident.
Update to 2.0.10 to fix security issues.
An update for ovirt-web-ui is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
An update for ovirt-engine-ui-extensions is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
Several security issues were fixed in Python.
Octavia could allow unintended access to network services.
ESET researchers discover a previously unreported cyberespionage platform used in targeted attacks against diplomatic missions and governmental institutions, and privacy-concerned users The post ESET discovers Attor, a spy platform with curious GSM fingerprinting appeared first on WeLiveSecurity
It was discovered that clamav, the open source antivirus engine, is affected by the following security vulnerabilities: CVE-2019-12625
An update is now available for Red Hat Fuse Integration Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
Red Hat A-MQ Broker 7.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
Risk Level: Very Low.
It was discovered that there were two vulnerabilities in the rsyslog system/kernel logging daemon in the parsers for AIX and Cisco log messages respectfully.
Type: Vulnerability. TIBCO MDM is prone to multiple unspecified cross-site scripting vulnerabilities; fixes are available.
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Citrix Application Delivery Management is prone to an unauthorized-access vulnerability; fixes are available.
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. CA Network Flow Analysis is prone to a security-bypass vulnerability; fixes are available.
Type: Vulnerability. GE Mark VIe Controller is prone to an authorization-bypass vulnerability.
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Microsoft Windows Update Assistant is prone to a local privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Bootstrap 3 Typeahead is prone to a cross-site scripting vulnerability.
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. SMA Solar Technology AG Sunny WebBox is prone to a cross-site request-forgery vulnerability.
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
An ESET survey of thousands of people in North America provides a peek into how they perceive the privacy and security of their smart home connected devices The post How concerned are you about the privacy challenges of your IoT devices? appeared first on WeLiveSecurity
Reading Time: ~ 3 min. First and foremost, endpoint protection must be effective. Short of that, MSPs won’t succeed in protecting their clients and, more than likely, won’t remain in business for very long. But beyond the general ability to stop threats and protect users, which characteristics of an endpoint solution best set its administrators […]
We sat down with internet pioneer and Farsight Security CEO Dr. Paul Vixie, who co-invented some of the services that are central to the ‘Net’s fabric, to discuss a range of issues affecting security and privacy The post Internet pioneer Dr. Paul Vixie on global internet security appeared first on WeLiveSecurity