Opera Software has released an update for its desktop browser in order to address a critical vulnerability in its handling of Scalable Vector Graphics (SVG) files, disclosed a week ago. The company denies refusing to patch the flaw when it was brought to its attention earlier this year.
Today is Patch Tuesday again. The ninth of the year already. Microsoft has released five new security bulletins, and Adobe has joined the party with some security patching of its own today. With all of the vulnerabilities and updates, though, you need to take a step back to prioritize and figure out which patches are most urgent.
The company also dealt with more fallout from the June hack of DigiNotar by flipping the "kill switch" on SSL (secure socket layer) certificates issued by Dutch certificate authority, or CA.
Apple is rolling out an OS X patch to deal with the DigiNotar threat. DigiNotar will be removed from the list of trusted root certificates.
Secunia, a Danish security company that makes two tools that ensure applications have up-to-date patches, released a product on Wednesday that can deploy non-Microsoft patches using that company's widely used patching tool.
A reportedly serious security bug affecting the J2EE (Java 2 Platform Enterprise Edition) engine in SAP's NetWeaver middleware will be patched soon, SAP said Friday.
Oracle is planning to issue 78 patches covering a number of its software products on Tuesday, including 13 fixes for its flagship database, according to a statement posted to its website on Thursday.
Oracle has issued an update to Java SE that fixes a number of critical bugs in the widely used Internet software.
Adobe has released an important update to its Flash Player software that fixes critical security flaws and gives users a better way of controlling whether they are being tracked on the Web.
Skype plans to push out an important update to its Skype for Mac software next week that will fix a big that could be leveraged by hackers looking to build a self-copying worm program.
Oracle may be subtly misleading customers about the severity of some of the vulnerabilities found in its database software, according to researchers from database security software provider Application Security (AppSec).
Oracle plans to release a large number of security patches for its various software products next week, including six bug-fixes for its flagship database software.
Oracle has issued an emergency patch for a Java vulnerability that can cause systems to hang and that can be exploited by remote attackers without authentication.
Microsoft's latest round of patches released on Tuesday includes an optional update that will shut off the "autorun" capability for users of older Windows operating systems, a move the company has made to reflect the resurgence of worms carried on removable media.
Oracle is planning on Tuesday to release 66 security patches affecting hundreds of products, according to a notice posted on its website.