Ubuntu Security Notices دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۵:۳۱

USN-9001-2: ca-certificates update

USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs t…

آسیب‌پذیری و روز صفر

خواندن متن کامل در Ubuntu Security Notices درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Qualys Blog دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۷:۱۵

The Expanding Attack Surface Demands a New Operating Model

Why the Risk Operations Center Is Becoming the System of Record for Proactive Enterprise Risk Reduction The cybersecurity industry has spent years improving how we discover vulnerabilities. The challenge now is no longer finding risk. It is reducing risk faster than adversaries can exploit it. The PHP2Shell vulnerabilities disclosed in October are a reminder of […]

آسیب‌پذیری و روز صفر

منبع

Ubuntu Security Notices دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۶:۵۹

USN-9008-1: libnfs vulnerability

It was discovered that libnfs did not properly enforce the maximum size bound during ZDR decoding, resulting in an out-of-bounds write. An attacker could possibly use this issue to cause libnfs to crash, resulting in a denial of service, or execute arbitrary code.

آسیب‌پذیری و روز صفر بات‌نت و DDoS

منبع

Ubuntu Security Notices دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۶:۵۱

USN-9007-1: FreeRDP vulnerabilities

It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code.

آسیب‌پذیری و روز صفر بات‌نت و DDoS

منبع

SecurityWeek دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۶:۴۳

Plex2Shell Exploited Against QNAP NAS Users

Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices. The post Plex2Shell Exploited Against QNAP NAS Users appeared first on SecurityWeek.

آسیب‌پذیری و روز صفر

منبع