Page 14 of 31 FirstFirst ... 410111213141516171824 ... LastLast
Results 131 to 140 of 306

Thread: Alerts

  1. #131
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation WordPress 4.0 released

    FYI...

    WordPress 4.0 released
    - https://wordpress.org/download/
    Sep 4, 2014 - "The latest stable release of WordPress (Version 4.0) is available..."

    Release notes
    - http://codex.wordpress.org/Version_4.0

    Changelog
    - http://codex.wordpress.org/Changelog/4.0

    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  2. #132
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Adblock Plus 1.8.5 for Chrome, Opera and Safari released

    FYI...

    Adblock Plus 1.8.5 for Chrome, Opera and Safari released
    - https://adblockplus.org/releases/adb...afari-released
    2014-09-08
    Adblock Plus 1.8.5 for Chrome:
    - https://chrome.google.com/webstore/d...ibdccddilifddb
    Adblock Plus 1.8.5 for Opera (Opera 17 or higher required):
    - https://addons.opera.com/extensions/...opera-adblock/
    Adblock Plus 1.8.5 for Safari (Safari 6 or higher required):
    - https://adblockplus.org/en/safari
    Changes:
    Fixed: “Block Element” dialog was sometimes covered up by other page elements (issue 703).
    Fixed: Checkbox labels on the options page should be clickable (issue 1226).
    Chrome/Opera-only changes
    Adapted for changes in Chrome 36, Opera 23 and higher. Removed side-effects of element hiding on affected websites (e.g. Outlook 365) again (issue 1290).

    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  3. #133
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Post Adobe Reader / Acrobat update delayed ...

    FYI...

    Prenotification Security Advisory for Adobe Reader and Acrobat
    - https://helpx.adobe.com/security/pro...apsb14-20.html
    Sep 5, 2014: Clarified the affected versions of Reader and Acrobat for the Windows and Macintosh platforms.
    Sep 8, 2014: Updated the expected release date from September 9, 2014 to the week of September 15, 2014. The release was -delayed- to address issues identified during regression testing.

    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  4. #134
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation iOS 8 released

    FYI...

    iOS 8 released
    - http://www.securitytracker.com/id/1030866
    CVE Reference: CVE-2014-4352, CVE-2014-4353, CVE-2014-4354, CVE-2014-4356, CVE-2014-4357, CVE-2014-4361, CVE-2014-4362, CVE-2014-4363, CVE-2014-4364, CVE-2014-4366, CVE-2014-4367, CVE-2014-4368, CVE-2014-4369, CVE-2014-4371, CVE-2014-4372, CVE-2014-4373, CVE-2014-4374, CVE-2014-4375, CVE-2014-4377, CVE-2014-4378, CVE-2014-4379, CVE-2014-4380, CVE-2014-4381, CVE-2014-4383, CVE-2014-4384, CVE-2014-4386, CVE-2014-4388, CVE-2014-4389, CVE-2014-4404, CVE-2014-4405, CVE-2014-4407, CVE-2014-4408, CVE-2014-4409, CVE-2014-4410, CVE-2014-4411, CVE-2014-4412, CVE-2014-4413, CVE-2014-4414, CVE-2014-4415, CVE-2014-4418, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-4422, CVE-2014-4423
    Sep 18 2014
    Impact: Denial of service via local system, Disclosure of system information, Disclosure of user information, Execution of arbitrary code via local system, Execution of arbitrary code via network, Root access via local system, User access via local system, User access via network
    Fix Available: Yes Vendor Confirmed: Yes
    Version(s): prior to 8.0 ...
    Solution: The vendor has issued a fix (8.0).
    The vendor's advisory is available at:
    - http://support.apple.com/kb/HT6441
    Sep 17, 2014

    - http://support.apple.com/kb/HT1222
    17 Sept 2014
    iOS 8 - iPhone 4s and later, iPod touch (5th generation) and later, iPad 2 and later
    ___

    Safari 6.2 and 7.1
    - http://support.apple.com/kb/HT6440
    Sep 18, 2014

    OS X Mavericks v10.9.5 and Security Update 2014-004
    - http://support.apple.com/kb/HT6443
    Sep 18, 2014

    OS X Server v3.2.1
    - http://support.apple.com/kb/HT6448
    Sep 18, 2014
    ___

    - http://atlas.arbor.net/briefs/index#2074331089
    High Severity
    Sep 26, 2014

    Last edited by AplusWebMaster; 2014-09-28 at 14:43.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  5. #135
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation iOS 8.0.1 revoked - iPhone 6, 6+

    FYI...

    iOS 8.0.1 revoked - iPhone 6, 6+
    - http://www.theinquirer.net/inquirer/...ivity-touch-id
    Sep 25, 2014 - "... iPhone 6 and iPhone 6 Plus users that downloaded the iOS 8.0.1 update and found that it somewhat ruined their days to roll back the update*. Apple released iOS 8.0.1 to iPhones on Wednesday, but all didn't go to plan. While speculation had suggested that the update would arrive with a slew of bug fixes, the update appears to have created more issues. Apple has accepted that some iPhone users have experienced loss of connectivity and breakage in Touch ID sign-in..."
    * http://support.apple.com/kb/HT6487
    Sep 25, 2014
    ___

    - http://support.apple.com/kb/HT6487
    Last Modified: Sep 26, 2014 - "iOS 8.0.2 is available now. It fixes the loss of cellular service and use of Touch ID that may have affected you if you have an iPhone 6 or iPhone 6 Plus and you downloaded iOS 8.0.1. It includes improvements and bug fixes originally in iOS 8.0.1. We apologize for inconveniencing you if you were affected by the bug in iOS 8.0.1. To resolve this issue, update your device to iOS 8.0.2* or later."
    * http://support.apple.com/kb/HT4623

    - https://discussions.apple.com/search...0.2%20problems
    ___

    APPLE-SA-2014-09-23-1 OS X: Flash Player plug-in blocked
    - https://lists.apple.com/archives/sec.../msg00000.html
    Sep 23, 2014
    Due to security issues in older versions, Apple has updated the
    web plug-in blocking mechanism to disable all versions prior to
    Flash Player 15.0.0.152 and 13.0.0.244.

    Information on blocked web plug-ins will be posted to:
    - http://support.apple.com/kb/HT5655
    Last Modified: Sep 24, 2014

    Last edited by AplusWebMaster; 2014-09-30 at 15:00.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  6. #136
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Bash Command Injection Vulnerability

    FYI...

    Advisory (ICSA-14-269-01)
    Bash Command Injection Vulnerability
    - https://ics-cert.us-cert.gov//advisories/ICSA-14-269-01
    Sep 26, 2014 - "... A command injection vulnerability has been reported in the Bourne again shell (bash). Bash is the common command-line used in most Linux/Unix-based operating systems and Apple’s Mac OS X. The flaw could allow an attacker to remotely execute shell commands by attaching malicious code in environment variables used by the operating system... Exploits that target this vulnerability are publicly available...
    ICS-CERT recommends that -users- take the following measures to protect themselves from social engineering attacks:
    1. Do not click web links or open unsolicited attachments in email messages.
    2. Refer to Recognizing and Avoiding Email Scams* for more information on avoiding email scams.
    3. Refer to Avoiding Social Engineering and Phishing Attacks**. for more information on social engineering attacks..."

    * http://www.us-cert.gov/reading_room/emailscams_0905.pdf

    ** https://www.us-cert.gov/ncas/tips/st04-014

    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  7. #137
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation OS X bash Updates ...

    FYI...

    OS X bash Updates ...
    - http://support.apple.com/kb/HT6495
    Sep 29, 2014 - Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5
    Impact: In certain configurations, a remote attacker may be able to execute arbitrary shell commands
    Description: An issue existed in Bash's parsing of environment variables. This issue was addressed through improved environment variable parsing by better detecting the end of the function statement...

    APPLE-SA-2014-09-29-1 OS X bash Update 1.0
    - https://lists.apple.com/archives/sec.../msg00001.html
    29 Sep 2014

    OS X Lion
    - http://support.apple.com/kb/DL1767
    Sep 29, 2014
    File Size: 3.5 MB

    OS X Mountain Lion
    - http://support.apple.com/kb/DL1768
    Sep 29, 2014
    File Size: 3.3 MB

    OS X Mavericks
    - http://support.apple.com/kb/DL1769
    Sep 29, 2014
    File Size: 3.3 MB

    - http://arstechnica.com/apple/2014/09...10-8-and-10-7/
    Sept 29 2014

    Last edited by AplusWebMaster; 2014-09-30 at 14:30.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  8. #138
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Thunderbird v31.2 released

    FYI...

    Thunderbird v31.2 released
    - http://www.securitytracker.com/id/1031030
    CVE Reference: CVE-2014-1574, CVE-2014-1575, CVE-2014-1576, CVE-2014-1577, CVE-2014-1578, CVE-2014-1581, CVE-2014-1583, CVE-2014-1585, CVE-2014-1586
    Oct 15 2014
    Impact: Execution of arbitrary code via network, User access via network
    Fix Available: Yes Vendor Confirmed: Yes
    Version(s): prior to 31.2 ...
    Solution: The vendor has issued a fix (31.2)...

    - https://www.mozilla.org/en-US/thunderbird

    - https://www.mozilla.org/en-US/thunde.../releasenotes/
    v.31.2.0, released: Oct 14, 2014

    Security Advisories
    - https://www.mozilla.org/security/kno...hunderbird31.2
    Fixed in Thunderbird 31.2
    MFSA 2014-81 Inconsistent video sharing within iframe
    MFSA 2014-79 Use-after-free interacting with text directionality
    MFSA 2014-77 Out-of-bounds write with WebM video
    MFSA 2014-76 Web Audio memory corruption issues with custom waveforms
    MFSA 2014-75 Buffer overflow during CSS manipulation
    MFSA 2014-74 Miscellaneous memory safety hazards (rv:33.0 / rv:31.2)

    Automated Updates: https://support.mozillamessaging.com...ng-thunderbird
    Manual check: Go to >Help >About Thunderbird

    Download: https://www.mozilla.org/thunderbird/all.html

    Last edited by AplusWebMaster; 2014-10-15 at 20:05.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  9. #139
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Adblock Plus 1.8.6 for Chrome, Opera and Safari released

    FYI...

    Adblock Plus 1.8.6 for Chrome, Opera and Safari released
    - https://adblockplus.org/releases/adb...afari-released
    2014-10-15 - "Adblock Plus 1.8.6 for Chrome, Opera (Opera 17 or higher required), and Safari (Safari 6 or higher required)..."

    Links to the install files and more detail at the URL above.

    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  10. #140
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation OpenSSL patches 4 vulnerabilities

    FYI...

    OpenSSL patches 4 vulnerabilities
    - https://www.us-cert.gov/ncas/current...ulnerabilities
    Oct 16, 2014 - "OpenSSL has released updates patching four vulnerabilities, some of which may allow an attacker to cause a Denial of Service (DoS) condition or execute man-in-the-middle attacks. The following updates are available:
    OpenSSL 1.0.1 users should upgrade to 1.0.1j
    OpenSSL 1.0.0 users should upgrade to 1.0.0o
    OpenSSL 0.9.8 users should upgrade to 0.9.8zc
    US-CERT recommends users and administrators review the OpenSSL Security Advisory* for additional information and apply the necessary updates."
    * https://www.openssl.org/news/secadv_20141015.txt

    - https://cve.mitre.org/cgi-bin/cvenam...=CVE-2014-3513
    - https://web.nvd.nist.gov/view/vuln/d...=CVE-2014-3566 - 4.3
    - https://cve.mitre.org/cgi-bin/cvenam...=CVE-2014-3567
    - https://cve.mitre.org/cgi-bin/cvenam...=CVE-2014-3568
    ___

    - http://www.securitytracker.com/id/1031053
    Oct 15 2014

    - http://www.securitytracker.com/id/1031052
    Oct 15 2014

    Last edited by AplusWebMaster; 2014-10-17 at 02:25.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •