Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs).
3cf5b4fea2491cbfefa1077bf1b2855e169052d381bd920cd57aa9bfaff6b3a5
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.
84e026655152247de7237184ee13003701c40be030dd68e0316111049f58a59f
Ubuntu Security Notice 3706-1 - It was discovered that libjpeg-turbo incorrectly handled certain malformed JPEG images. If a user or automated system were tricked into opening a specially crafted JPEG image, a remote attacker could cause libjpeg-turbo to crash, resulting in a denial of service, or possibly execute arbitrary code.
f27b8a04356e10727ac2ec1e0b92231403216fda5df8b6be02c7364c151507e8
Ubuntu Security Notice 3708-1 - It was discovered that OpenSLP incorrectly handled certain memory operations. A remote attacker could use this issue to cause OpenSLP to crash, resulting in a denial of service, or possibly execute arbitrary code.
8eeb9a1857bb39b336c39b16b34f8ebcba2e1e04abfe77577f175782d6767fdd
Ubuntu Security Notice 3707-1 - Yihan Lian discovered that NTP incorrectly handled certain malformed mode 6 packets. A remote attacker could possibly use this issue to cause ntpd to crash, resulting in a denial of service. This issue only affected Ubuntu 17.10 and Ubuntu 18.04 LTS. Michael Macnair discovered that NTP incorrectly handled certain responses. A remote attacker could possibly use this issue to execute arbitrary code. Various other issues were also addressed.
32ce831d1f1118924cb8bef066769217952aeaceb8886b1b83365b1d33fda1a3
Apple Security Advisory 2018-7-9-6 - iCloud for Windows 7.6 is now available and addresses code execution and denial of service vulnerabilities.
1530ea6f10bc5a9dda3c5b48fd9186e237e688985975f0abef9729e30698e15f
Apple Security Advisory 2018-7-9-5 - Safari 11.1.2 is now available and addresses code execution and denial of service vulnerabilities.
d27beb008aaab9001ac3e4184d14b13b25e0d97af6cd2b020af74ba88924d842
Apple Security Advisory 2018-7-9-4 - macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, and Security Update 2018-004 El Capitan are now available and address information leakage vulnerabilities.
49ac8c28e452226cd454f927987f600bfbb0a024762057d3093a15b9219c1db2
Apple Security Advisory 2018-7-9-3 - tvOS 11.4.1 is now available and addresses code execution and denial of service vulnerabilities.
819f557bcb1fe92eeb393b9358fc53454230a9fd639aef3f31fb214aebaa7c7a
Tor Browser versions 0.3.2.x before 0.3.2.10 suffer from a use-after-free vulnerability that can result in a denial of service condition.
00d2316870f92dcf1fa407e64a5f3768feca854ec005ecbad71e9caec5f84da0
Grundig Smart Inter@ctive version 3.0 suffers from an insecure direct object reference vulnerability.
e6a894919421dc2603167ef46eba1bba259d4560c2e150753fa0a552e215ee4b
20 bytes small Linux/x86 kill process shellcode.
f9d25919bee6b7d6787cc45fa61f824745ce4d0fa23309b75a4ea458c2436aba
Apple Security Advisory 2018-7-9-2 - watchOS 4.3.2 is now available and addresses code execution and denial of service vulnerabilities.
7d26453510d437bea1f697fff0c98308e5dfb2e88971d5e57bae26d4288b3487
Oracle WebLogic version 12.1.2.0 RMI registry UnicastRef object java deserialization remote code execution exploit.
987b367f18145d131cb109d237d5319193f94dea35e470a2462b8e9d1fd9c000
Apple Security Advisory 2018-7-9-1 - iOS 11.4.1 is now available and addresses code execution and denial of service vulnerabilities.
330261e5d69c36b100acca558de9c3f8ed059502a72a2ea02c2fbc09dc42e68b
Debian Linux Security Advisory 4242-1 - Orange Tsai discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker can take advantage of this flaw to read arbitrary files outside an application's root directory via specially crafted requests, when the Sprockets server is used in production.
8113507f333d2773f5bd81b6dafb4c30f4cddb7957bfdda816d5a1909ec87d6f