|
Critical WinRAR Remote Code Execution Vulnerability |
|
Wednesday, 27 February 2019 11:00 |
|
A remote code execution vulnerability was disclosed in the UNACEV2.dll library of WinRAR. A maliciously-crafted ACE archive file can execute arbitrary code on a targeted system. It is advised to install the latest version of WinRAR. |
|
Linux Security Update Overview (February 20, 2019) |
|
Wednesday, 20 February 2019 12:00 |
|
The following Linux distributions have released security updates to fix vulnerabilities:
Debian: Security updates for ansible, chromium, rdesktop, systemd, thunderbird, firefox-esr, and flatpak.
SUSE: Security updates for gvfs, qemu, systemd, kernel-firmware, python-numpy, kvm, and velum.
Ubuntu: Security updates for NSS, systemd, Django, and WebKitGTK+.
Oracle Linux: Security updates for flatpak, systemd, docker-engine, firefox, oraclelinux-release-el7, oraclelinux-release-el6, and firefox.
Red Hat: Security updates for Red Hat Single Sign-On 7.2.6, firefox, flatpak, and systemd. |
|
|
Remote Code Execution Vulnerability in WordPress Version Prior to 5.0.3 |
|
Wednesday, 20 February 2019 12:00 |
|
A remote code execution vulnerability was reported in WordPress Version Prior to 5.0.3. An attacker who gains access to an account with at least author privileges on a target WordPress site can execute arbitrary PHP code on the underlying server, leading to a full remote takeover. It is advised to update to the latest version. |
|
Linux Security Update Overview (February 13, 2019) |
|
Wednesday, 13 February 2019 15:00 |
|
The following Linux distributions have released security updates to fix vulnerabilities:
Debian: Security updates for libu2f-host, mosquitto, and openssh.
SUSE: Security updates for MozillaThunderbird, runc, MozillaFirefox, LibVNCServer, nginx, php7, python-numpy, etcd, Linux Kernel, LibVNCServer, fuse, and avahi.
Ubuntu: Security updates for GVfs, snapd, poppler, Linux kernel, OpenSSH, and libarchive.
Oracle Linux: Security updates for Unbreakable Enterprise kernel and runc.
Red Hat: Security updates for kernel, CloudForms 4.6.8 , chromium-browser, docker, and runc. |
|
Early Warning System 