Collaborate Disseminate
A local, race condition vulnerability in the af_packet implementation in Linux was patched this week. The bug allows a local attacker to execute code or crash a server. Continue reading Old Linux Kernel Code Execution Bug Patched
Open source webmail provider Roundcube was patched against a vulnerability that could be trivially exploited to run code on servers or access email accounts. Continue reading Critical Vulnerability Patched in Roundcube Webmail
An audit of open source file and disk encryption software VeraCrypt wrapped up and a number of critical vulnerabilities uncovered in the assessment were patched. Continue reading VeraCrypt Patches Critical Vulnerabilities Uncovered in Audit
OpenSSL patched a high-severity vulnerability in its deployment on the Online Certificate Status Protocol, and also mitigated the SWEET32 attack. Continue reading OpenSSL Patches High-Severity OCSP Bug, Mitigates SWEET32 Attack
Researchers create a self-propagating worm that can infect a Siemens’ PLC and can be programmed to bring an industrial control platform to its knees. Continue reading PLC-Blaster Worm Targets Industrial Control Systems
Libarchive was patched against three memory-related vulnerabilities, putting pressure on admins to ensure third-party software that also uses the library is patched. Continue reading Patched libarchive Vulnerabilities Have Big Reach
Last week’s OpenSSH security update warrants a close look for users who re-enable X11Forwarding in OpenSSH. Continue reading OpenSSH Implementations with X11Forwarding Enabled Should Heed Recent Security Update