Google Patches Critical Android Mediaserver Vulnerability
Google’s monthly over-the-air Nexus security updates for December included patches for a critical flaw in Mediaserver and a rooting vulnerability in the Android kernel.
Vulnerabilities
OpenSSL Patches Bring Last Update for 0.9.8 and 1.0.0 Branches
The OpenSSL Software Foundation patched four vulnerabilities on Thursday, likely the last time that two older versions of the software library will receive updates.
Flash’s Farewell Under Way
Adobe’s announcement that it has retooled—and renamed—Flash is a longterm signal that the vulnerable and fatigued platform is on its last legs.
Cisco patched its WebEx mobile app for Android, and published advisories warning of vulnerabilities in three other products.
Rapid7 disclosed that Advantech EKI industrial control gear remains vulnerable to Shellshock and Heartbleed, in addition to a host of other vulnerabilities.
Google released Chrome 47 this week and announced that it will end Chrome support for older, 32-bit Linux distributions early next year.
Thousands of embedded devices share cryptographic keys and certificates, exposing millions of connections to man-in-the-middle attacks.
Lenovo has patched two serious vulnerabilities in Lenovo System Update that can allow hackers elevate privileges and guess admin passwords.
A vulnerability reported to United Airlines that could have been exploited to manipulate flight reservations and customer data sat unpatched for almost six months before it was fixed.
Two more self-signed root certificates and corresponding private keys were found on Dell computers.
