Danny Grander discovered a directory traversal flaw in plexus-archiver,an Archiver plugin for the Plexus compiler system, allowing an attackerto overwrite any file writable by the extracting user via a speciallycrafted Zip archive.
More info:
https://www.debian.org/security/2018/dsa-4227
Jakub Wilk discovered a directory traversal flaw in the Archive::Tarmodule, allowing an attacker to overwrite any file writable by theextracting user via a specially crafted tar archive.
More info:
https://www.debian.org/security/2018/dsa-4226
Type: Vulnerability. Microsoft Office is prone to a privilege-escalation vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=104405&om_rssid=sr-advisories
https://blogvault.net/wp-security-audit-log-review/ Regular scan and backups are core security measures. So pat on the back for doing a good job but you should also set up monitoring your website. Keeping a vigilant eye on everything that is happening on your WordPress website … The post WP Security Audit Log: Plugin That Helps
More info:
https://blogvault.net/wp-security-audit-log-review/
Red Hat Enterprise Linux: An update for chromium-browser is now available for Red Hat Enterprise Linux 6Supplementary.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-6148
More info:
http://rhn.redhat.com/errata/RHSA-2018-1825.html
https://www.wordfence.com/blog/2018/06/babayaga-wordpress-malware/Recently, Defiant’s analysts have been tracking a particularly sophisticated malware infection responsible for generating spam links and redirection, while still remaining relatively difficult for victims to detect. This post is Copyright 2018 Defiant, Inc. and was published on the wordfence.com official blog. Republication of this post without permission is prohibited. You can find this post […]
More info:
https://www.wordfence.com/blog/2018/06/babayaga-wordpress-malware/
Ivan Fratric discovered a buffer overflow in the Skia graphics libraryused by Firefox, which could result in the execution of arbitrary code.
More info:
https://www.debian.org/security/2018/dsa-4220
Today VMware has released the following new and updated security advisories: VMSA-2018-0015 – https://www.vmware.com/security/advisories/VMSA-2018-0015.html Please sign up to the Security-Announce mailing list to receive new and updated VMware Security Advisories. Customers should review the security advisories and direct any questions to VMware Support.The post VMSA-2018-0015 appeared first on VMware Security & Compliance Blog.
More info:
https://blogs.vmware.com/security/2018/06/vmsa-2018-0015.html
Red Hat Enterprise Linux: An update for flash-plugin is now available for Red Hat Enterprise Linux 6Supplementary.Red Hat Product Security has rated this update as having a security impact ofCritical. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-4945, CVE-2018-5000, CVE-2018-5001, CVE-2018-5002
More info:
http://rhn.redhat.com/errata/RHSA-2018-1827.html
Several vulnerabilities have been discovered in OpenJDK, animplementation of the Oracle Java platform, resulting in denial ofservice, sandbox bypass, execution of arbitrary code or bypass of JARsignature validation.
More info:
https://www.debian.org/security/2018/dsa-4225
