Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [updates]

The tag has no usage guidance.

-1
votes
0answers
9 views

Update the glibc package Error [migrated]

I was asked to fix the vulnerabilities for RHEL 7: GLIBC(RHSA-2018:3092). Based on the output given by Nessus. Remote package installed : glibc-2.17-222.el7 Should be : glibc-2.17-260....
2
votes
1answer
433 views

Is there a multi-layered DoS protection which can be tightly integrated with cloud hosting services?

I know that one can deny services (DoS) in any of the 7 layers of the OSI model and that in principle, a denial can be done by a single entity (human or machine) or from 2 or more such entities ("...
0
votes
2answers
120 views

What consequences could there be to the continued use of an operating system without updating?

As it is well known, the extended support of Windows 7 (Service Pack 1) ends on January 14, 2020. Due to the short time that remains, I raise this question. What consequences could an outdated ...
90
votes
5answers
19k views

How do services with high uptime apply patches without rebooting?

How are critical security updates installed on systems which you cannot afford to reboot but the update requires a reboot. For example, services/businesses that are required to run 24x7 with zero ...
0
votes
0answers
35 views

Why would IPS vendor provider refuse to publish SLAs to fix the published highly ranked CVEs?

One of the biggest IPS providers (top of Gartner graph for its category) is not providing SLAs for all the 7+ ranking CVEs published last year. I don't really understand why would they refuse to ...
1
vote
2answers
90 views

Is it OK to not update devdependencies?

When checking third party libraries used in package.json and build.gradle files with tools such as Snyk, they allow the option to check for devdependencies. A lot of the time there is vulnerabilities ...
0
votes
2answers
85 views

Risk of infecting the host OS if the guest OS is out of date [duplicate]

I'd like to know how much the risk changes if I don't update the software on the guest OS in a VM (applications and the guest operating system itself), compared to the risk in case it's all kept up-to-...
-4
votes
1answer
58 views

About router vulnerabilities that could lead to MITM attacks [duplicate]

I recently read an answer on this stackexchange that informed me that, if a person knows my IP, it can try to hack into my router and change the DNS in order to perform a MITM attack. Now, this is ...
0
votes
1answer
188 views

Can I trust a ubuntu repo mirror in a less 'free' country?

For example, if I install Ubuntu in Dubai or in Saudi Arabia, I'll probably get a local mirror. Is there a way I can make sure that the ubuntu packages I get when I do apt-get update are the 'real' ...
5
votes
4answers
265 views

If I want a more secure and up-to-date Linux, in what cases should I avoid the official repositories?

The problem is this: Linux repositories (depending on the distribution) provide software and updates, but usually that software is not the latest official version, but it's an old version or branch ...
0
votes
0answers
12 views

Collating security update information for different software

In a scenario where you have a few dozen pieces of software to routinely check for updates and asses them for use, it becomes a big manual job. Obviously, you enable auto-updating where possible but ...
9
votes
1answer
785 views

Does Windows Update modify Hosts file?

I have Avira installed with Hosts file protection enabled. I've noticed a pattern where Avira warns me of an attempted modification of the Hosts file (but alas doesn't tell me which process did the ...
0
votes
0answers
21 views

Linux aarch64 security update provision, Raspberry Pi

Do any of the major Linux distributions (Fedora, Debian, Arch, Ubuntu, etc.) provide timely security updates for the aarch64 architecture for kernel and other standard system components present in a ...
2
votes
2answers
645 views

Is there a microcode or other hardware fix for Meltdown?

Linked to my question here, the MS support page states In addition to installing the January security update, a processor microcode update is required. But previous articles I've read said ...
-1
votes
1answer
148 views

Debian 9 opted out of data collection, doing it anyway?

I've noticed when I log in to my Debian 9 account, it informs me that there are updates. I update and upgrade in terminal and it informs me that 0 bytes have been downloaded but requests to upload ...
3
votes
1answer
90 views

Why are downloads of Mac updates redirected to plain HTTP? [duplicate]

I am downloading an inbetween version of MacOS necessary to update to High Sierra from an older version of El Capitan from here. Funny thing is, when I right click and get the download link from ...
5
votes
1answer
971 views

Has Ubuntu been patched for KRACKs?

I updated my Ubuntu 14.04 LTS. My /var/log/apt/history.log says that linux-signed-image-3.13.0-134-generic:amd64 has been installed. The changelog page says linux (3.13.0-134.183) trusty; ...
5
votes
0answers
74 views

Update intervals of VPN client code

I recently had to find a VPN client to connect to a preconfigured Cisco IPSec VPN. Of course there's Cisco's own client implementation AnyConnect, but I wanted to stick with a free alternative if ...
0
votes
3answers
184 views

TOR exit node as CentOS mirror

Today we saw traffic going from CentOS servers to a TOR exit node. This caused some raised eyebrows and led us to investigate what was going on. In the end it turned out that this exit node also acts ...
0
votes
0answers
17 views

what is the point of integrity checking on downloaded files [duplicate]

When I check the security best practise of software update algorithms, it usually goes like this: 1)Downloads update file from remote server. 2)Downloads it's hash value 3)Calculates file's hash ...
-2
votes
2answers
117 views

How safe are encrypted file systems and how does their updates work? [closed]

Not so long ago the media widely discussed the deciphering of the encrypted iPhone of a terrorist in the United States. Apple said it was impossible to decrypt. Edit: The iPhone was encrypted, and ...
0
votes
2answers
217 views

Suspicious established network connection

So, while I casually did a netstat -a for an unrelated matter I found this connection open that seemed (at least to my untrained eye) strange: Where Name was the last name of another current employee ...
0
votes
1answer
88 views

Is the RHEL 7 version of FreeRadius not affected by RHSA-2017:1759 (or similar)?

In July 2017, multiple security issues have been found in FreeRadius 2.x.x and 3.0.x. RHEL 6 uses FreeRadius 2.x.x and Red Hat has released security advisory RHSA-2017:1759. However, for RHEL 7, no ...
55
votes
3answers
9k views

My Android phone is vulnerable, but there are no updates?

I bought brand new HTC Desire 526G with operating system 4.4.2 (Kitkat), everything is as it should be (not rooted) so it is still on factory settings. But now I didn't get for a long time any ...
0
votes
1answer
73 views

How to enforce software updates on workstations?

There are many workstations on the company network with various kind of software installed: web browsers, OpenVPN clients, remote management agents, encryption utilities and other tools. Some of the ...
4
votes
1answer
259 views

How does a botnet update?

So recently I started to study how botnets work. But recently I stumbled onto a problem. I even tried brain storming how it would do it, but I couldn't think how a bot would update its code. I also ...
4
votes
1answer
335 views

Windows 7 and missing patches and how to handle

With the ransomware scare, someone asked me to look at their computer to make sure they have the required patch. They had no patches after June 2016, with only the recent May 2017 patches installed. ...
2
votes
0answers
2k views

MS Updates for MS17-010

Anybody know what the KB numbers are for Windows 10 1607 64 bit and 64 bit for 1511? I am assuming these are them, can someone please verify this for me? Also, for the Windows 1607 there is a ...
2
votes
4answers
246 views

Patch management for avoiding issues like EternalBlue [closed]

Following the 2017 WannaCry attack against big institutions like the NHS or Telefónica did not apply the Microsoft security patches associated with EternalBlue and were forced to deal with a ...
3
votes
1answer
788 views

Do MS monthly security rollups include previous monthly rollups?

do Microsoft monthly quality security rollups include previous-monthly releases? For example, if you skip march rollup and install april's?
0
votes
1answer
62 views

Changing server side certificate during ongoing connection -> is it supported ? what are the effects on the existing connections?

I was wondering (based on the TLS RFC and its current implementation by the major vendors / platforms - i.e. Microsoft's IIS): how would an existing active SSL / TLS session behave / react if the ...
2
votes
1answer
357 views

How likely is it that the Hot Potato vulnerability can be exploited on a up-to-date Windows 2012 machine?

I recently found an article about the Hot Potato vulnerability and it seemed quite interesting. Using this technique, we can elevate our privilege on a Windows workstation from the lowest levels to ...
4
votes
1answer
731 views

Anniversary Update with Bitlocker Reboot without Encryption Key

I have Windows 10 Professional installed and have avoided the Anniversary Update until yesterday. The computer installed the update despite my best efforts to stop it. But that is a different ...
2
votes
3answers
1k views

Unauthenticated packages in debian

Yesterday I updated my debian server using: apt-get update && apt-get upgrade I received message that some of the packages cannot be authenticated being in a rush I hit yes to install ...
6
votes
3answers
179 views

When to change a smartphones with out-of-support OS's?

As we know it from e.g Windows OS on desktops, if the support is outdated there is a risk for security and feature bugs and unstable OS. If a smartphone can't be updated to use a newer OS because of ...
0
votes
2answers
87 views

Is there any reason to enable “Windows Update” if you do not connect your computer to the network/internet?

I am looking to have a computer that I want to keep development only, and try not to connect to the internet, or my network at all. I am curious if there is anything wrong with not updating anything ...
0
votes
1answer
341 views

Safety of packages through yum

Recently, a yum update installed an update to R1Soft's server backup management software on a Redhat 7 server I am dealing with, and rkhunter is giving me a warning about a suspicious file. I've asked ...
0
votes
1answer
53 views

Reinstalled Windows 8. Is the computer vulnerable during the wait for updates?

After re-installing Windows 8.1, during the wait for updates of an hour or more, is the computer vulnerable to being hacked (if it's running the Windows Firewall and an Anti-Virus program)?
1
vote
1answer
65 views

From when does the operating systems sign the updates?

Which was the year the linux distributions, windows have first used to sign their updates? Historical question that is hard to "google".
1
vote
0answers
357 views

Encrypting OTA software updates files for embedded devices

I need to encrypt and send update files of the order of 100K from a server, through a mobile app, to low power wireless embedded devices (32 bit). The file transfers will be infrequent. The mobile ...
0
votes
0answers
27 views

From where can I get latest security bug fixes list/details implemented by web browsers?

Every now and then a new vulnerability is discovered in web browsers, some get fixed with time, some don't (maybe because of dependencies), from where can I get the report of latest bugs fixed or ...
1
vote
1answer
75 views

How is a software update done securely?

So a secure boot process starts with a hardware based chain of trust. The root public key is baked into the ROM which is used to verify the low level boot loader which in turn boots the kernel. With ...
0
votes
3answers
120 views

If a system is updated, does that mean metasploit framework cannot penetrate the system?

I have been learning about metasploit and it is a framework of exploit and payloads. So what if the system is updated, does that mean those exploits won't work anymore? Can you explain more about it?
2
votes
1answer
3k views

What are best practices for keeping up to date Linux servers?

I recently moved from Windows Server administration to Linux administration. In Windows I get used to practice that all critical and security updates are installed ASAP on their release. On Windows ...
2
votes
3answers
178 views

Did information technology had a increase or decrease in security with the introduction of automatic update features?

For obvious reasons we teach users Always update... updates are good... never forget updates, et cetera! Apart from the danger of malicious advertisements that make use of that showing users ...
3
votes
2answers
205 views

Does a virtualised Windows machine without internet access need (security) updates?

I recently saw a Windows 7 machine (virtually running in a Xen environment) and used in a production network to perform certain automated tasks. This system was missing over a 100+ Windows update ...
4
votes
1answer
171 views

Are Ubuntu updates signed by a central authority?

When updating Ubuntu with the default setup, do updates need to be signed by multiple people, or is it a single person who controls what updates to sign? The reason I'm asking is that if a single ...
3
votes
2answers
384 views

Apple's OTA update process

When reading the iOS security doc, on page 6, it discusses the OTA update process. The OTA process, includes sending information of current version and device ID to Apple. Inside the OTA response, ...
2
votes
2answers
114 views

Security updates FOSS/upstream policies: how are they chosen?

As you might know, with PEP 476, since Python 3.5 (backported to 3.4.3 and 2.7.9) tls certificates are now checked for their validity. Lack of validation leaves software exposed to mitm, so I think ...
1
vote
0answers
80 views

Firmware security [closed]

I plan to experiment with firmware securities. What security mechanisms are there that prohibit me from plugging in my personal firmware. I do understand some devices might be powerful in terms of ...