CVE-2019-7336

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view monitorfilters.php contains takes in input from the user and saves it into the session, and retrieves it later insecurely. The values of the MonitorName and Source parameters are being displayed without any...

Vulnerability Life Cycle and Vulnerability Disclosures

Vulnerability Life Cycle diagram shows possible states of the vulnerability. In a previous post I suggested to treat vulnerabilities as bugs. Every known vulnerability, as same as every bug, was implemented by some software developer at some moment of time and was fixed at some moment of time...

NetScaler ADC Firmware Release Cycle

NetScaler has announced the following updates to the ADC firmware release cycle. NetScaler ADC Firmware Release Cycle 7 yearwill fall on all versions starting with 14.1 and all subsequent releases. Year 1, Year 2, and Year 3 will have feature releases approximately every 8 weeks. Year 4, Year 5,...

(RHSA-2019:0095) Low: Red Hat Enterprise Linux 6.7 EUS Final Retirement Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support EUS for Red Hat Enterprise Linux 6.7 was retired as of December 31, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical...

(RHSA-2019:0031) Low: Red Hat Enterprise Linux 6.6 Telco Update Support Final Retirement Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Telco Update Service TUS for Red Hat Enterprise Linux 6.6 was retired as of December 31, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical...

(RHSA-2018:3804) Low: Red Hat Enterprise Linux 7.3 Extended Update Support Retirement Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support EUS for Red Hat Enterprise Linux 7.3 will be retired as of November 30, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including...

Stable Channel Update for Desktop

The stable channel has been updated to 70.0.3538.110 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

(RHSA-2018:3404) Low: Red Hat Enterprise Linux 7.3 Extended Update Support One-Month Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support for Red Hat Enterprise Linux 7.3 will be retired as of November 30, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical...

CVE-2018-18444

makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact...

CVE-2018-0475

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

(RHSA-2018:2572) Low: Red Hat Enterprise Linux 6.4 Advanced Mission Critical (AMC) Six-Month Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Advanced Mission Critical for Red Hat Enterprise Linux 6.4 will be retired as of February 28, 2019, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critica...

Mozilla Firefox ESR < 52.7 Multiple Vulnerabilities

Binary data 700335.prm...

Our Analysis: Gartner’s Hype Cycle for Risk Management, 2018

For those of us charged with managing cyber risk as well as planning and budgeting for cybersecurity, the Gartner "Hype Cycle for Risk Management, 2018" provides some helpful perspectives that are useful in setting both priorities and expectations...

(RHSA-2018:2224) Low: Red Hat Enterprise Linux 6.7 Extended Update Support Six-Month Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support for Red Hat Enterprise Linux 6.7 will be retired as of December 31, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical...

(RHSA-2018:2114) Low: Red Hat Enterprise Linux 6.6 TUS Six-Month Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Telecommunications Update Service for Red Hat Enterprise Linux 6.6 will be retired as of December 31, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including...

Security Bulletin: Vulnerability in Open Source GNU glibc affects IBM OS Images for Red Hat Linux Systems. (CVE-2015-5277)

Summary A vulnerability in Open Source GNU glibc affects IBM OS Images for Red Hat Linux Systems. Vulnerability Details CVEID: CVE-2015-5277 DESCRIPTION: GNU C Library glibc could allow a local attacker to gain elevated privileges on the system, caused by a heap corruption error in the nssfiles...

CVE-2017-5379

Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing. This vulnerability affects Firefox 51...

CVE-2017-5379

CVE-2017-5379 is a use-after-free vulnerability in Web Animations when interacting with cycle collection, affecting Mozilla Firefox versions earlier than 51. It stems from memory safety issues in the Web Animations code path and is associated with the Firefox

Six years since World IPv6 Launch: entering the majority phases

As reported in an ISOC report last year, IPv6 adoption is now solidly in the "early majority phase" of the technology adoption life cycle by many metrics well past "innovators" and "early adopters", with progress beyond that in some areas. Akamai continues to see solid growth in IPv6, including...

(RHSA-2018:1770) Low: Red Hat Enterprise Linux 7.3 Extended Update Support Six-Month Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support for Red Hat Enterprise Linux 7.3 will be retired as of November 30, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical...