Critical Bug Impacts Live555 Media Streaming Libraries
A critical streaming bug impacts Live Networks LIVE555 RTSPServer, but not the popular VLC and MPLayer client-side software.
Vulnerabilities
Two Critical RCE Bugs Patched in Drupal 7 and 8
Drupal’s advisory also included three patches for “moderately critical” bugs.
AWS FreeRTOS Bugs Allow Compromise of IoT Devices
The bugs let hackers crash IoT devices, leak their information, and completely take them over.
Simple technique enables attackers to leverage Windows OS component to maintain stealth and persistence post system compromise.
The update includes one critical flaw in Oracle GoldenGate with a CVSS 3.0 score of 10.0.
The flaw affects thousands of servers; but GitHub, a major libssh user, is unaffected.
The vendor only plans to patch two of the eight impacted devices, according to a researcher.
The update also features 23 security fixes.
The flaw impacted patients with pacemakers, implantable defibrillators, cardiac resynchronization devices and insertable cardiac monitors.
Support for PHP 5.6 drops on December 31 – but a recent report found that almost 62 percent of websites are still using version 5.
