No Image

USN-5349-1: GNU binutils vulnerability

2022-03-28 KENNETH 0

USN-5349-1: GNU binutils vulnerability It was discovered that GNU binutils gold incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Source: USN-5349-1: GNU binutils vulnerability

No Image

USN-5350-1: Chromium vulnerability

2022-03-28 KENNETH 0

USN-5350-1: Chromium vulnerability It was discovered that Chromium incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. Source: USN-5350-1: Chromium vulnerability

No Image

USN-5348-1: Smarty vulnerabilities

2022-03-28 KENNETH 0

USN-5348-1: Smarty vulnerabilities David Gnedt and Thomas Konrad discovered that Smarty was incorrectly sanitizing the paths present in the templates. An attacker could possibly use this use to read arbitrary files when controlling the executed template. (CVE-2018-13982) It was discovered that Smarty was incorrectly sanitizing the paths present in the templates. An attacker could possibly use this use to read arbitrary files when controlling the executed template. (CVE-2018-16831) It was discovered that Smarty was incorrectly validating security policy data, allowing the execution of static classes even when not permitted by the security settings. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-21408) It was discovered that Smarty was incorrectly managing access control to template objects, which allowed users to perform a sandbox escape. An attacker could possibly use this issue to send specially crafted input to applications [ more… ]

No Image

USN-5342-1: Python vulnerabilities

2022-03-28 KENNETH 0

USN-5342-1: Python vulnerabilities David Schwörer discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2021-3426) It was discovered that Python incorrectly handled certain FTP requests. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS. (CVE-2021-4189) It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-0391) Source: USN-5342-1: Python vulnerabilities

No Image

Get Creative with the All-New Pattern Creator

2022-03-26 KENNETH 0

Get Creative with the All-New Pattern Creator It’s been less than a year since the WordPress Pattern Directory was launched, and we already have more exciting news to share. The Pattern Creator is live! You can now build, edit, and submit your best block patterns to the Pattern Directory—submissions are open to all with a WordPress.org user account! Pattern Directory — List of patterns, and a single pattern detail. The WordPress Pattern Directory includes attractive, handy patterns created by designers that can make your experience building a stunning site much easier. Patterns can save you a significant amount of time and also give you greater freedom when you’re building your site. With patterns, you can make or replicate complex layouts with just a few clicks, and using them is as simple as copy and paste. Create Your Own Bold, Beautiful [ more… ]