An analysis of the workings of this new Emotet campaign, which has affected various countries in Latin America by taking advantage of Microsoft Office files to hide its malicious activity The post Analysis of the latest Emotet propagation campaign appeared first on WeLiveSecurity
LinuxSecurity.com: A flaw was found in the i18n gem before 0.8.0 for Ruby. The Hash#slice in lib/i18n/core_ext/hash.rb allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash (CVE-2014-10077).
LinuxSecurity.com: Fixed a stack-based buffer over-read in the print_prefix function (CVE-2018-19519). References: – https://bugs.mageia.org/show_bug.cgi?id=24077
LinuxSecurity.com: A possible regression was found in the recent security update for libphp-phpmailer, announced as DLA 1591-1. During backporting a new variable have accidentally introduced to a conditional statement from
LinuxSecurity.com: Security fix for CVE-2018-16737, CVE-2018-16738, CVE-2018-16758
LinuxSecurity.com: Update to new upstream version 1.5.5 (rhbz#1660413, rhbz#1660414)
LinuxSecurity.com: The Shopify Application Security Team discovered that ruby-sanitize, a whitelist-based HTML sanitizer, is prone to a HTML injection vulnerability. A specially crafted HTML fragment can cause to allow non- whitelisted attributes to be used on a whitelisted HTML element.
Disposal of old tech requires thought and effort and the need to cleanse the device of any personal data is just one of the concerns The post What should you do with your old devices appeared first on WeLiveSecurity
LinuxSecurity.com: Kaspersky Lab discovered several vulnerabilities in libvncserver, a C library to implement VNC server/client functionalities.
LinuxSecurity.com: Security fix for CVE-2018-16737, CVE-2018-16738, CVE-2018-16758
LinuxSecurity.com: Update to new upstream version 1.5.5 (rhbz#1660413, rhbz#1660414)
LinuxSecurity.com: The updated packages fix several bugs and some security issues. References: – https://bugs.mageia.org/show_bug.cgi?id=24041 – https://www.thunderbird.net/en-US/thunderbird/60.4.0/releasenotes/
LinuxSecurity.com: There is a use-after-free in monit that shows up if you run it for a while on an active system with address sanitizer enabled. References: – https://bugs.mageia.org/show_bug.cgi?id=24049
LinuxSecurity.com: A security issue fixed upstream in sqlite3 has been announced: https://www.openwall.com/lists/oss-security/2018/12/21/1 The issue is fixed in 3.25.3. References:
security update
LinuxSecurity.com: Multiple vulnerabilities have been found in libsndfile, the library for reading and writing files containing sampled sound. CVE-2017-8361
LinuxSecurity.com: This update fixes multiple security vulnerabilities: CVE-2018-5783, CVE-2018-11254, CVE-2018-11255, CVE-2018-11256, CVE-2018-12982, CVE-2018-14320, CVE-2018-19532
LinuxSecurity.com: This update fixes multiple security vulnerabilities: CVE-2018-5783, CVE-2018-11254, CVE-2018-11255, CVE-2018-11256, CVE-2018-12982, CVE-2018-14320, CVE-2018-19532
LinuxSecurity.com: – Fix double-free in CEmuopl::~CEmuopl() (#1635881, CVE-2018-17825)
LinuxSecurity.com: – Fix double-free in CEmuopl::~CEmuopl() (#1635881, CVE-2018-17825)
LinuxSecurity.com: Several issues were corrected in nagios3, a monitoring and management system for hosts, services and networks. CVE-2018-18245
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:3833
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:3831
LinuxSecurity.com: Fix low-severity CVE-2018-20217 (an authenticated user who can obtain a TGT using an older encryption type (DES, DES3, or RC4) can cause an assertion failure in the KDC by sending an S4U2Self request.)
LinuxSecurity.com: This update fixes CVE-2018-18088 and CVE-2018-6616
LinuxSecurity.com: This update fixes CVE-2018-18088 and CVE-2018-6616
LinuxSecurity.com: Version update + Security fix for CVE-2018-19131 and CVE-2018-19132
LinuxSecurity.com: An update that fixes one vulnerability is now available.
LinuxSecurity.com: An update that fixes one vulnerability is now available.
LinuxSecurity.com: An update that fixes one vulnerability is now available.
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
LinuxSecurity.com: An update that fixes one vulnerability is now available.
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
LinuxSecurity.com: An update that fixes one vulnerability is now available.
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
LinuxSecurity.com: An update that solves three vulnerabilities and has 5 fixes is now available.
LinuxSecurity.com: **MariaDB C / C++ connector** Release notes: https://mariadb.com/kb/en/library/mariadb-connector-c-307-release-notes/ Maintainer notes: Marking as a security update, beacuse of fixed resource leaks. Moving libmariadb pkgconfig file to this package from mariadb- devel. Test with MariaDB-3:10.2.19-2
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
LinuxSecurity.com: Multiple vulnerabilities have been found in Go, the worst which could lead to the execution of arbitrary code.
LinuxSecurity.com: New netatalk packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
LinuxSecurity.com: **MariaDB 10.3.11** Release notes: https://mariadb.com/kb/en/mariadb-10311-release-notes/ CVEs fixed: CVE-2018-3282 CVE-2016-9843 CVE-2018-3174 CVE-2018-3143 CVE-2018-3156 CVE-2018-3251 CVE-2018-3185 CVE-2018-3277 CVE-2018-3162 CVE-2018-3173 CVE-2018-3200 CVE-2018-3284
LinuxSecurity.com: Security experts at Tencent’s Blade security team have discovered a critical vulnerability in SQLite database software (nicknamed “Magellan”).
LinuxSecurity.com: Daniel Axtens discovered a double-free and use-after-free vulnerability in libarchive’s RAR decoder that can result in a denial-of-service (application crash) or may have other unspecified impact when a malformed RAR archive is processed.
LinuxSecurity.com: This kernel update is based on the upstream 4.14.89 and fixes atleast the following security issues: Cross-hyperthread Spectre v2 mitigation is now provided by the Single Thread Indirect Branch Predictors (STIBP) support. Note that STIBP also
security update
LinuxSecurity.com: Update to 4.2.5
LinuxSecurity.com: Security fix for fts3/4 corrupt database exploit sqlite rebased to version 3.26.0 per: https://sqlite.org/releaselog/3_26_0.html spatialite-tools rebuilt for latest sqlite version
LinuxSecurity.com: Security fix for fts3/4 corrupt database exploit sqlite rebased to version 3.26.0 per: https://sqlite.org/releaselog/3_26_0.html spatialite-tools rebuilt for latest sqlite version
LinuxSecurity.com: Upstream announcement: The phpMyAdmin team is pleased to announce the release of **phpMyAdmin version 4.8.4**. Among other bug fixes, this contains several important security fixes. The security fixes involve: * Local file inclusion (https://www.phpmyadmin.net/security/PMASA-2018-6/), * XSRF/CSRF vulnerabilities allowing a specially-crafted URL to perform harmful operations
Reading Time: ~5 min. The cybersecurity landscape is in constant flux, keeping our team busy researching the newest threats to keep our customers safe. As the new year approaches, we asked our cybersecurity experts to predict which security trends will have the most impact in 2019 and what consumers should prepare for. Continued Growth of […]
There is still some time left to pick up some last-minute shopping before it’s too late but in the rush to do so don’t forget to do it safely The post SPARE: Five tips for a safer online shopping experience appeared first on WeLiveSecurity
Reading Time: ~2 min. Facebook API Bug Reveals Photos from 6.8 Million Users Facebook announced this week that an API bug had been found that allowed third-party apps to access all user photos, rather than only those posted to their timeline. The vulnerability was only available for 12 days in mid-September, but could still impact […]
LinuxSecurity.com: An update that fixes one vulnerability is now available. Description: Description: This update for netatalk fixes the following issues: Security issue fixed:
LinuxSecurity.com: An update that fixes three vulnerabilities is now available. Description: Description: This update for keepalived to version 2.0.10 fixes the following issues: Security issues fixed (bsc#1015141): – CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats – CVE-2018-19045: Fixed mode when […]
LinuxSecurity.com: An update that fixes three vulnerabilities is now available. Description: Description: This update for keepalived to version 2.0.10 fixes the following issues: Security issues fixed (bsc#1015141): – CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats – CVE-2018-19045: Fixed mode when […]
The unfortunate implications of a well-intentioned change to Google Play Developer policies – and the negative impact it has on ESET’s Android app customers The post Google’s policy change reduces security, privacy and safety for 75% of users of ESET’s Android anti-theft service appeared first on WeLiveSecurity
LinuxSecurity.com: Two more security issues have been corrected in the libav multimedia library. This is a follow-up announcement for DLA-1611-1. CVE-2015-6823
security update