CyberPulse Cybersecurity News, with Source Links
FA
Ubuntu Security Notices

USN-8952-3: Tornado regression

USN-8952-2 fixed a regression in Tornado that broke static file serving for applications that subclass Tornado's StaticFileHandler, such as Jupyter. Unfortunately, that update's incomplete fix could introduce a regression by rejecting symlinks into system directories like /usr/share, which distribution packages use for their JavaScript and fonts, causing web UIs to return 403 errors. This update fixes the problem. We…

Vulnerabilities & Zero-Day Botnet & DDoS Programming & Languages
Read the full article at Ubuntu Security Notices Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Security Affairs

Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws

Microsoft November Patch Tuesday security updates fix 1,090 flaws, including one exploited Outlook bug and 30 potentially wormable issues. Microsoft November Patch Tuesday addressed about 1,090 new vulnerabilities, which is less than the roughly 1,400 last month. Two months in a row now exceed every previous year from Microsoft, and the overall count is a […]

Vulnerabilities & Zero-Day Phishing Cloud Computing
Source
CSO Online

Why does old access outlive the job?

Old access persists beyond its intended purpose and most organizations never monitor it. New access rights arrive within a day of a request. Old rights get revoked, if they get revoked at all, only upon prompting someone. Tools that assist employees in confirming, rotating and vaulting their service accounts have taught me again and again that removing access has to be as thoughtful as granting access. Security profe…

Vulnerabilities & Zero-Day Data Breach Privacy
Source