FoxIt Reader(一款流行的免费PD F阅读器软件)的提供者FoxIt Soft ware公司针对在过去几周内发现的三个安全漏洞发布了安全补丁。
FoxIt Software, makers of the popular free alternative PDF reader, FoxIt reader, announced patches for three public vulnerabilities that were discovered in the past few weeks.
据该安全报告，于星期五发布，详细的指出了该漏洞会怎样被用来操控用户和控制他们的机器。
The security advisory, which was published on Friday, details how the vulnerability can be used to manipulate users and take over their machines.
本周由微软公司发布的一个新安全补丁堵住了被震网病毒用于自我传播的四个安全漏洞中的最后一个，不过，这一补丁却无法用于版本较老的系统中，而这类系统在伊朗被广泛使用。
A new security patch from Microsoft, released this week, plugs the last of the four security holes that Stuxnet USES to spread itself, but it cannot be used on older systems, widely used in Iran.
它们的源代码是对外公布的，方便你从中学习，根据自己的需要进行改造，修补存在的漏洞，并发布具有新特性的版本。
The source code is available, so that you can study the software, adapt it to your needs, fix bugs, and release versions with new features.
微软在发布安全补丁的时候，该补丁一般都是针对一个证据充分的漏洞的。
When Microsoft releases a security patch, the patch is designed to address a well-documented vulnerability.
微软已经发布了补丁来修补漏洞，然而，假如一个大型网络中的一台电脑被感染了，病毒将会在不受检查的情况下传播开来——常常使已经杀毒的电脑再次感染。
Microsoft has issued a patch to fix the bug, however if a single machine is infected in a large network, it will spread unchecked -- often reinfecting machines that have been disinfected.
他们积极寻找公司合作，一些游戏出品商需要对即将发布的游戏进行测试，以求发现漏洞，考察其可玩性和其他特征。
These gamers actively seek out companies who produce games and offer to test their upcoming release for bugs, playability and other features.
仅在过去的数周，已经有发现重大漏洞迫使微软在官方补丁发布修补工具。
Just in the past few weeks there have been major vulnerabilities discovered that forced Microsoft to issue fix-it tools in advance of official patches.
Google的三维聊天世界Lively的画面非常的华丽，但是在华丽的场景背后Lively小组还要忙着修补发布早期或大或小的漏洞。
The graphics in Google's 3d chat world Lively shine, but behind the scenes the Lively team also seems busy squashing minor and major early-release bugs.
Coverity宣布他们发布的数据使得32个开源项目在一周内修复了超过900多个漏洞-或者说，每小时修复了5个以上的漏洞。
Coverity also claim that their data caused 32 open source projects to fix over 900 flaws within a single week -or, more than five bug fixes every hour.
另外微软还发布了基因码检测（genericsignature）信息来帮助用户对付这些漏洞，它的名称是Exploit:Win32/Apptom.gen，通常这些攻击文件将阻止用户打开Windows Live OneCare或者Forefront Client Security软件。
We are also releasing today a generic signature to protect our customers against these exploits. Its name is Exploit:Win32/Apptom.gen.
在发布版本之前识别测试漏洞，填充并找到这些错误，成本会低得多。
It's much cheaper to identify testing gaps, fill them, and find the bugs before release.
HTC已发布了一份针对蓝牙漏洞的安全修复程序，此漏洞会将用户手机上的所有信息暴露于危险之中。
HTC has issued a security fix for a Bluetooth vulnerability that exposed to risk all the information on a user's handset.
苹果公司声称，他们正在做修复工作，但据“华尔街日报”称，苹果并没有说明漏洞已存在多久和修复程序何时发布。
Apple says it's working on a fix, but according to the Wall Street Journal, the company is not saying how long the vulnerability has existed, or when exactly this fix will arrive.
虽然这些漏洞会不断被系统供应商发布的补丁软件所修补，或者在新版系统中得以纠正。
Although these leak will continuously released by the system vendors, or repair of software patch on the new system be corrected.
Sun日前面向用户发布警告称，SunSolaris系统存在多个远程代码执行漏洞，并建议用户提高警惕。
Sun Microsystems is warning users about a remote code execution vulnerability in Sun Solaris and is recommending that users work around the issue.
Affero许可证去掉开发人员在GPL中发现的一个“漏洞”，即如果的应用程序是基于Web的(例如在基于Web的搜索引擎中，等等)，由于GPL要求开发人员发布源代码而带来的一个“漏洞”。
The Affero license removes one "loophole" developers see in GPL by requiring developers to publish the source code if the resulting application is Web-based (as in a Web-based search engine, etc.).
上周，CNVD整理和发布以下重要安全漏洞信息。
Last week, CNVD compiled and released the following important security vulnerability information.
任何系统自发布之日起，系统存在的漏洞会不断地暴露出来。
Any system since the date of publication, the system exist leak will constantly exposed.
安全研究人员将把软件漏洞告知销售商，只要销售商对此做出响应，安全研究人员就将在公布攻击者能够使用的解码前发布官方补丁。
Security researchers would inform vendors of vulnerabilities, and as long as the vendor was responsive, wait for the release of an official patch before publishing code that an attacker could use.
按惯例软件销售商会要求安全研究员在软件发现漏洞时第一时间向他们发出警告。这样他们就能发布修补或补丁，以保护整个公众利益。
Software vendors have traditionally asked security researchers to alert them first when they find bugs in their software, so that they could issue a fix, or patch, and protect the general public.
如果我们发布了安全性漏洞补丁的话，你应当尽快进行升级以保证其不受攻击。
In case we announce a security vulnerability patch release, you should upgrade your installation as fast as possible to ensure that it is protected from all known vulnerabilities.
瑞星说微软也应为此漏洞负责，看来由其它厂商发布的输入法软件也可能导致同一漏洞。
Rising said Microsoft also bears responsibility for the vulnerability, noting that software released by other companies could recreate the same vulnerability.
微软公司于周末迅速作出调整，准备在本周周日发布针对这个漏洞的补丁，这个漏洞微软公司早在三个月前就知道了。
Microsoft shifted gears over the weekend, announcing plans on Sunday to release an emergency patch for a vulnerability that the company has known about for more than three months.
是时候发布一个魅人的修复漏洞的快照了！
我们已经看到在过去的资料，如何利用新漏洞更新发布到网上只有几天，甚至小时后，安全更新发布。
We have seen cases in the past where information on how to exploit a newly updated vulnerability was posted to the web only a few days, or even hours, after a security update is released.
我们发布了一个修复若干漏洞，内部修改还有添加新漏洞的快照。
We are releasing a new snapshot with several bug fixes, internal changes and probably also some new bugs.
2017年第七期发布的安全漏洞中，应用程序占比最高，其次是WEB应用漏洞。
2017 seventh issue of security vulnerabilities, the highest proportion of applications, followed by WEB application vulnerabilities.
几个月后，它们发布软件升级版本来修复一两个漏洞，也许还加入了新特性，诸如此类的更新。
After a few months, they release a firmware update or two to fix bugs, maybe add a few features, that sort of thing.
这个安全漏洞似乎影响到所有咨询网页，可以使用个人发布的恶意软件，进行钓鱼或各种不同的恶意攻击。
The flaw seems to affect all advisory pages and can be used by ill-intentioned individuals to distribute malware, launch phishing campaigns, or instrument various malicious attacks.
应用推荐