A vulnerability was found in the svgsalamander library. If the library is being used in a web application for processing user supplied SVG files then the app is vulnerable to SSRF (CVE-2017-5617). References:
May 12, 2019
Updated mxml packages fix security vulnerabilities: An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the ”
May 12, 2019
The updated packages fix security vulnerabilities: A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS)
May 12, 2019
Updated qt4 packages fix security vulnerability: A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp (CVE-2018-19872).
May 12, 2019
Updated bash package fixes security vulnerability: A vulnerability in which shell did not prevent user BASH_CMDS, allowing the user to execute any command with the permissions of the shell (CVE-2019-9924).
May 12, 2019
pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers (CVE-2019-9923). References:
May 12, 2019
Updated openexr package fixes security vulnerabilities: It was discovered that makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact (CVE-2018-18444).
May 12, 2019
Updated python packages fix security vulnerability: A ‘file:’ blacklist bypass in URIs by using the ‘local-file:’ scheme instead (CVE-2019-9948).
May 12, 2019
Updated sysstat package fix security vulnerabilities: Out-of-bounds read during a memmove call inside the remap_struct function (CVE-2018-19416).
May 12, 2019
What is VPS Hosting? How Does it Work?
May 11, 2019
Update to April 2019 CPU. See: http://mail.openjdk.java.net/pipermail/jdk- updates-dev/2019-April/000951.html
May 10, 2019
security update
May 10, 2019
security update
May 10, 2019
The WannaCry Security Legacy and What’s to Come
May 10, 2019
Nvidia Warns Windows Gamers on GPU Driver Flaws
May 10, 2019
Students pull off below-the-belt mailing list prank
May 10, 2019
An update that contains security fixes can now be installed.
May 10, 2019
An update that solves one vulnerability and has one errata is now available.
May 10, 2019
Stay Safe: 5 Tips to Keep Fraudsters at Bay
May 10, 2019
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, information disclosure or the execution of arbitrary code.
May 10, 2019
Reading Time: ~2 min. Dharma Ransomware Employs Diversion Tactics Researchers recently discovered a new ransomware variant that displays an ESET AV removal screen once launched in order to divert the a victim’s attention from the silent encryption taking place. Initially dropped by an email spam campaign, the payload comes as a password protected zip archive, […]
May 10, 2019
FTC renews call for single federal privacy law
May 10, 2019
Multiple vulnerabilities were discovered in the Symfony PHP framework which could lead to cache bypass, authentication bypass, information disclosure, open redirect, cross-site request forgery, deletion of arbitrary files, or arbitrary code execution.
May 10, 2019
security update
May 10, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
The 5.0.13 update contains a number of important fixes across the tree. There is no kernel-headers build this time. The tools version is 5.0.12 because originally it was built with the 5.0.12 kernel version but 5.0.13 was built before 5.0.12 could be filed in bodhi.
May 9, 2019
The 5.0.13 update contains a number of important fixes across the tree. There is no kernel-headers build this time. The tools version is 5.0.12 because originally it was built with the 5.0.12 kernel version but 5.0.13 was built before 5.0.12 could be filed in bodhi.
May 9, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
Hackers Take Over IoT Devices to ‘Click’ on Ads
May 9, 2019
Metal keys beat smart locks in NYC legal battle
May 9, 2019
DeepDotWeb seized, suspected admins arrested
May 9, 2019
Reading Time: ~3 min. From recruiting top talent to daily technical leadership, a day-in-a-life of a software engineering is never boring. After chatting with Webroot Senior Manager of Software Development, Michael Balloni, it became even more obvious. Michael is working hard to build a robust and efficient team, and is undeniably enthusiastic about every stage of the process. The conversation only got […]
May 9, 2019
The Pitfalls of Keeping Your Ports Wide Open
May 9, 2019
An update that fixes 6 vulnerabilities is now available.
May 9, 2019
An update that fixes 6 vulnerabilities is now available.
May 9, 2019
An update for freeradius is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 9, 2019
An update that fixes 6 vulnerabilities is now available.
May 9, 2019
Smashing Security #127: I do love the Dutch
May 9, 2019
An update that solves 16 vulnerabilities and has 5 fixes is now available.
May 9, 2019
Hackers steal US$41 million worth of Bitcoin from cryptocurrency exchange
The thieves bade their time before running off with more than 7,000 Bitcoin ‘in one fell swoop’ The post Hackers steal US$41 million worth of Bitcoin from cryptocurrency exchange appeared first on WeLiveSecurity
May 9, 2019
* https://www.drupal.org/project/drupal/releases/7.66 * https://www.drupal.org/SA-CORE-2019-006
May 8, 2019
Fix for CVE-2019-5429
May 8, 2019
Fix for CVE-2019-5429
May 8, 2019
security update
May 8, 2019
An update that fixes two vulnerabilities is now available.
May 8, 2019
An update that fixes three vulnerabilities is now available.
May 8, 2019
An update that solves one vulnerability and has one errata is now available.
May 8, 2019
An update that fixes two vulnerabilities is now available.
May 8, 2019
An update that fixes two vulnerabilities is now available.
May 8, 2019
An update that fixes two vulnerabilities is now available.
May 8, 2019