Page 80 - Source Software News Today

Microsoft patches three zero-days in May 2021 Patch Tuesday update Events About If you already have an account please use the link below to sign in. If you have any problems with your access or would like to request an individual access account please contact our customer service team. Microsoft patches three zero-days in May 2021 Patch Tuesday update Security update includes patches for Windows, Internet Explorer, Exchange Server, Office, .NET Core, Visual Studio, SharePoint Server, Hyper-V, S...

Microsoft’s May 2021 Patch Tuesday updates include fixes for four critical security vulnerabilities. Microsoft’s May Patch Tuesday release addressed a modest 55 cybersecurity vulnerabilities, including just four critical bugs. It’s the smallest monthly update from the computing giant since 2020, but it does contain a patch for a concerning wormable vulnerability found in the Windows OS. The good news is that none of the vulnerabilities are being actively exploited in the wild, according t...

This month brought patches for 55 CVEs in Microsoft Windows, Microsoft Office, .NET Core and Visual Studio, Internet Explorer, SharePoint Server, Hyper-V, Skype for Business and Microsoft Lync, Open Source Software, and Exchange Server. Fifty of these vulnerabilities are classified as Important in severity, one as Moderate. One concerning CVE to prioritize is CVE-2021-31166, a critical remote code execution flaw in the HTTP protocol stack with a CVSS score of 9.8. An attack using this would b...

In-The-Wild & Disclosed CVEs Up first in the list this month, we have a vulnerability that impacts .NET and Visual Studio and could allow a successful attacker to elevate their permissions. We see patches for Microsoft Visual Studio 2019 for Windows and macOS as well as .NET 5.0 and .NET Core 3.1. Microsoft indicates that while this has been publicly disclosed, it has not been exploited in the wild. There are additional details regarding this vulnerability available on the dotnet github page. M...

To view Schedule 2, go to http://itunesconnect.apple.com/ and log in. Then click on the Agreements, Tax, and Banking link. If you have accepted Schedule 2, one of your contracts will be under... | May 5, 2021

The University of Minnesota Banned by Linux – Why Open Source is Problematic Recently, two researchers from the University of Minnesota and fellow graduates could upload intentionally buggy code and junk code into the Linux Kernel and accepted by the community. Why did the researchers do this, how did the Linux community react, and what does this demonstrate about open source software? Researchers Upload Buggy Code to Demonstrate Security Flaws Recently, a paper was released by the University...

When the Linux maintainers found out about this, they quickly banned the entire university from Linux development, before the Linux Foundationsent the university a list of demands, to which it would seem the university quickly acceded, pulling its paper from an IEEE conference to which it was accepted and agreeing to provide “all information necessary to identify all proposals of known-vulnerable code from any U of MN experiment.” Linux kernel developers do not like being experimented on, w...

How a university got itself banned from the Linux kernel The University of Minnesota’s path to banishment was long, turbulent, and full of emotion On the evening of April 6th, a student emailed a patch to a list of developers. Fifteen days later, the University of Minnesota was banned from contributing to the Linux kernel. “I suggest you find a different community to do experiments on,” wrote Linux Foundation fellow Greg Kroah-Hartman in a livid email. “You are not welcome here.” Ho...

Apr 29, 2021 14:22 EDT with 2 comments VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. Targeted at server, desktop and embedded use, it is now the only professional-quality virtualization solution that is also Open Source Software. Some of the features of VirtualBox are: Modularity. VirtualBox has an extremely modular design with well-defined internal programming interfaces and a client/server design. This mak...

Until recently, small or non-traditional defense companies had very few opportunities to win lucrative Department of Defense (DoD) contracts. However, through a change in their contract award approach and the embrace of Open Source Software (OSS) as a strategic accelerator for new and innovative solutions, the DoD has opened the door to many smaller and midsize companies to actively contribute. OSS opens the door for any development company to create unique and valuable applications in a relati...