|
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
|
|
|
Source: Infosecurity US - Posted by Anthony Pell
|
|
Mozilla has released the latest version of its browser, Firefox 10, with fixes for nine security flaws, including five critical vulnerabilities.
|
|
|
Source: H Security - Posted by Dave Wreski
|
|
Following the release of new versions of its open source Firefox web browser, Thunderbird email client and SeaMonkey suite, Mozilla has detailed the security fixes included in each of the updates. According to the project's Security Center page for Firefox, version 10.0 closes a total of 8 security holes in the browser, 5 of which are rated as "Critical" by Mozilla. |
|
|
Source: H Security - Posted by Dave Wreski
|
|
Google has released version 16.0.912.77 of Chrome which closes several security holes in the WebKit-based web browser. The update addresses a total of four vulnerabilities, all of which are rated as "high severity". |
|
|
Source: H Security - Posted by Dave Wreski
|
|
The developers of the Apache Struts 2 Java web framework have released version 2.3.1.2. This closes a critical hole in versions of Struts from 2.0.0 to 2.3.1.1 that allowed for remote command execution. The vulnerability makes it possible for the protection around OGNL, an expression language used for getting and setting properties of Java objects, to be bypassed and arbitrary expressions be evaluated. |
|
|
Source: H Security - Posted by Dave Wreski
|
|
The Apache Tomcat developers are advising users of the 7.0.x, 6.0.x and 5.5.x branches of the Java servlet and JSP container to update to the latest released versions 7.0.23, 6.0.35 and 5.5.35. Recent investigations revealed inefficiencies in how large numbers of parameters and parameter values were handled by Tomcat. |
|
|
Source: PC World - Posted by Dave Wreski
|
|
The National Security Agency (NSA) has released SE Android, a security-enhanced version of Android, which provides and enforces stricter access-control policies than those found in the popular mobile operating system by default. |
|
|
Source: ZDNet Blogs - Posted by Dave Wreski
|
|
A new draft of Microsoft’s Windows 8 hardware certification specs confirms what we already knew: the new Secure Boot feature won’t lock out Linux on hundreds of millions of new PCs. But Linux backers are demanding the right to hack a new class of devices that doesn’t yet exist. |
|
|
Source: H Security - Posted by Dave Wreski
|
|
Versions 1.4.11 and 1.6.5 of the open source Wireshark network protocol analyser have been released, fixing bugs and closing holes found in the previous builds. The maintenance and security updates to the cross-platform tool fix several vulnerabilities that could be exploited by an attacker to cause a denial-of-service (DoS) or compromise a victim's system. |
|
|
Source: H Security - Posted by Dave Wreski
|
|
Version 3.3.1 of the open source WordPress blogging and publishing platform has been released. The maintenance and security update addresses a cross-site scripting (XSS) vulnerability affecting WordPress 3.3. According to a blog post by security researchers Aditya Modha and Samir Shah, the hole affects WordPress instances installed using an IP address; instances of WordPress installed using a domain name are reportedly not vulnerable. |
|
|
Source: Dark Reading - Posted by Dave Wreski
|
|
In the wake of a researcher's public disclosure of flaws in Siemens products that could let an attacker take over a control system without even knowing the username and password, Siemens today said it will issue security updates in January to fix product vulnerabilities.
|
|
|
<< Start < Prev 1 2 3 Next > End >>
|
| Results 21 - 30 of 1178 |
