Dirty Sock Snapd Local Privilege Escalation Vulnerability

A local privilege escalation in snapd versions 2.28 through 2.37 that could allow the creation of root level accounts – may give you a Dirty Sock ! Chris Moberly discovered that snapd versions 2.28 through 2.37 incorrectly validated and parsed the remote socket address when performing access controls on its UNIX socket. A local attacker could use this to access privileged socket APIs and obtain administrator privileges. On Ubuntu systems with snaps installed, snapd typically

Read more

PhpMyAdmin Releases Security Update 4.8.5 Patches SQL Injection and Arbitrary File Read

PhpMyAdmin security fix v4.8.5 will patch an SQL Injection and arbitrary file read vulnerability. Security is a daily ongoing endeavor and discipline in today’s online world. In a security blog post the developers of phpMyAdmin announced version 4.8.5 of its software to address a few security related issues. The security fixes involve: Arbitrary file read vulnerability (https://www.phpmyadmin.net/security/PMASA-2019-1) SQL injection in the Designer interface (https://www.phpmyadmin.net/security/PMASA-2019-2) The arbitrary file read vulnerability could also be exploited to delete

Read more

Linux APT Package Manager Remote Code Execution Bug Patched

Original Source: BleepingComputer Independent consultant and security contractor Max Justicz discovered a remote code execution issue in the APT high level package manager used by Debian, Ubuntu, and other related Linux distributions. As described by Justicz, the APT vulnerability present in the package manager starting with version 0.8.15 “allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a machine installing any package. The bug has been fixed in

Read more

HealthEquity Security Breach Email Hacked Again

HealthEquity Email Hack Breaches Data of Users… Again ! An email hack security breach on their mail has again potentially exposed personal data of HealthEquity customers. This is not the first time however, in June, an unauthorized user hacked into an employee’s email account and breached the data of 16,000 customers according to HealthEquity Email Hack. The most recent breach is similar according to this site notification to customers: On October 5, 2018, HealthEquity’s information

Read more

Linux Mint 19.1 “Tessa” Cinnamon Released !

The team is proud to announce the release of Linux Mint 19.1 “Tessa” Cinnamon Edition. Linux Mint 19.1 is a long term support release which will be supported until 2023. It comes with updated software and brings refinements and many new features to make your desktop even more comfortable to use. New features: This new version of Linux Mint contains many improvements. For an overview of the new features please visit: “What’s new in Linux

Read more

Roku OS 9 Update with Spotify

Roku OS 9 Update Spotify It’s no secret I’m a big ROKU appliance fan on my TVs, been using them for years & love them. Roku has been in the process of rolling out their big Roku OS version 9 to supported devices, and yes I’ve been anxiously awaiting. Why ? Spotify is back, that’s why ! Well, after anxiously manually checking, refreshing and more manual checking… this morning I was finally greeted to the

Read more