Ubuntu: Security Advisory (USN-3715-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : dns-root-data update (USN-3715-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3715-1 advisory. This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover and refreshes the list of root hints. Tenable has...

Ubuntu 16.04 LTS : Dnsmasq update (USN-3716-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3716-1 advisory. This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover. Tenable has extracted the preceding description block...

USN-3716-1 dnsmasq update

This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover...

USN-3715-1: dns-root-data update

This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover and refreshes the list of root hints...

USN-3715-1 dns-root-data update

This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover and refreshes the list of root hints...

Malicious Software Packages Found On Arch Linux User Repository

Yet another incident that shows why you should never blindly trust packages from user-controlled software repositories. Arch Linux , one of the most popular independently developed Linux distributions, has removed three packages from its community-driven Arch User Repository AUR after they were...

In cryptoland, trust can be costly

While the legal status of cryptocurrencies and laws to regulate them continue to be hammered out, scammers are busy exploiting the digital gold rush. Besides hacking cryptocurrency exchanges, exploiting smart-contract vulnerabilities, and deploying malicious miners, cybercriminals are also...

Debian DLA-1417-1 : ca-certificates security update

There have been a number of updates to the set of Certificate Authority CA certificates that are considered 'valid' or otherwise should be trusted. For Debian 8 'Jessie', these issues have been fixed in ca-certificates version 20141019+deb8u4. We recommend that you upgrade your ca-certificates...

Keeping False Positives in Check

In 2017, seven out of ten organizations said their security risks increased significantly, according to a Ponemon Institute study. This is no surprise given that last year organizations suffered the largest ransomware outbreak in history WannaCry and vulnerabilities such as Meltdown and Spectre...

No Apps Left Behind on Your Zero Trust Journey

Complexity kills productivity. When it comes to enabling application access, enterprises should not have to choose between user experience and complex techniques that ensure application security. Traditionally, perimeter security is built on an assumption that whatever is inside the perimeter is...

CVE-2018-13176

The mintToken function of a smart contract implementation for Trust Zen Token ZEN, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Trust Zen Token ZEN, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13176

The CVE-2018-13176 entry concerns the Trust Zen Token (ZEN) Ethereum smart contract. It states that the mintToken function has an integer overflow, allowing the contract owner to set an arbitrary user’s balance to any value. The connected documents confirm the vulnerability, but do not provide sp...

CVE-2018-13176

The mintToken function of a smart contract implementation for Trust Zen Token ZEN, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Error: "Your logon has expired. Please log on again to continue" When one XML broker does not work correctly, users are unable to see apps and desktops from other working XML brokers.

When one XML broker does not work correctly, users are unable to see apps and desktops from other working XML brokers if StoreFront . The following error is displayed. "Your logon has expired. Please log on again to continue." This problem happens if the store has been configured with multiple...

trust-i.net XSS vulnerability

Open Bug Bounty ID: OBB-638578 Description| Value ---|--- Affected Website:| trust-i.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GDPR Is Here: How GDPR Readiness Can Boost Your Business

Most discussions about the EU’s General Data Protection Regulation GDPR have naturally focused on best practices for achieving compliance and avoiding penalties. With GDPR now a reality for all companies that store and process personal data of EU residents, an often overlooked aspect has been the...

openSUSE Security Update : python-python-gnupg (openSUSE-2018-646)

This update for python-python-gnupg to version 0.4.3 fixes the following issues : The following security vulnerabilities were addressed : - Sanitize diagnostic output of the original file name in verbose mode CVE-2018-12020 boo1096745 The following other changes were made : - Add --no-verbose to...

Security Bulletin: Privilege Escalation Vulnerability identified in Websphere Application Server shipped with Jazz for Service Management (CVE-2017-1151)

Summary Websphere Application Server WAS Full profile is shipped as a component of Jazz for Service Management JazzSM and WAS has been affected by privilege escalation vulnerability Vulnerability Details CVEID: CVE-2017-1151 DESCRIPTION: IBM WebSphere Application Server configured with OpenID...