Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 (CVE-2020-6800) Mozilla: Out-of-bounds read when processing certain email messages (CVE-20…
The updated packages fix security vulnerabilities: PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (do…
Joining the trail of vulnerable WordPress plugins, here comes another plugin that threatens the security of over 1 million websites.Actively Exploited Duplicat…
Updated postgresql9.6 and postgresql11 packages fix security vulnerability: The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform authorization check…
Updated patch package fixes security vulnerabilities: * In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than inpu…
rhbz#1784216, python3-remoto ---- Security fix for CVE-2020-1699
- Update to 2.16.4 - CVE-2019-18222 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.4-and-2.7.13-released Security Advisory: https://tl…
What if I told you that there is an exploitable security risk hiding in plain sight that could result in the compromise of your Linux or Windows machine? What …
A popular WordPress theme plugin with over 200,000 active installations contains a severe but easy-to-exploit software vulnerability that, if left unpatched, c…
Another WordPress plugin has now joined the list of plugins exhibiting threatening security flaws. This time, the vulnerability appeared inVulnerability In Wor…
Rebase to radare2-4.2.1 and cutter-re 1.10.1. It fixes CVE-2019-19590 and CVE-2019-19547. It also fix a problem in cutter-re that did not display the window ic…
**Horde_Data 2.1.5** * [jan] Fix Remote Code Execution vulnerability (CVE-2020-8518, Reported by: Andrea Cardaci/SSD).
Rebase to radare2-4.2.1 and cutter-re 1.10.1. It fixes CVE-2019-19590 and CVE-2019-19547. It also fix a problem in cutter-re that did not display the window ic…
The updated packages fix a security vulnerability: In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop a…
Updated python-waitress packages fix security vulnerabilities: If a front-end server does not parse header fields with an LF the same way as it does those wit…
Open-source software isn't a completely chaotic and breached wasteland of vulnerabilities. It's a global effort to make the development lifecycle faster.
Ilja Van Sprundel discovered a buffer overflow vulnerability in ppp, the Point-to-Point Protocol daemon. When receiving an EAP Request message in client mode, …
A researcher found numerous security flaws in the WhatsApp Desktop platform for both Windows and macOS. The vulnerabilities could allowWhatsApp Desktop Platfor…
An out-of-bounds write vulnerability due to an integer overflow was reported in libexif, a library to parse EXIF files, which could result in denial of service…
A flaw that gave out root privileges gets patched. It is a utility that,ÂsaidDan Goodin inÂArs Technica,Âcan be found in "dozens of Unix-like operating systems…
Several Cisco-manufactured network equipments have been found vulnerable to five new security vulnerabilities that could allow hackers to take complete control…
This update incorporates fixes from the upstream glibc 2.29 stable release branch, including a fix for a minor security vulnerability ([`LD_PREFER_MAP_32BIT_EX…
OpenSMTPD could be made to run programs as root if it received specially crafted input over the network.
Researchers have found another WordPress plugin to be posing a threat to hundreds of thousands of websites. Specifically, they aWordPress Plugin “Code Snippets…
