Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0085
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0086
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
TikTok,Âthe 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-securit…
The package firefox before version 72.0-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation, access restriction bypa…
Updated radare2 packages fix security vulnerabilities: In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function o…
he updated packages fix security vulnerabilities and a packaging problem: An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain L…
Updated ruby packages fix security vulnerabilities: It was discovered that Ruby incorrectly handled certain files. An attacker could possibly use this issue t…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4107
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4148
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4240
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4326
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4190
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4190
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4190
Updated libmirage packages fix security vulnerabilities: The CSO filter in libMirage in CDemu did not validate the part size, triggering a heap-based buffer o…
A 22-year-old man who claimed to have access to over 300 million iCloud accounts and threatened to factory reset all accounts unless Apple pays ransom has plea…
Stephan Zeisberg reported an out-of-bounds write vulnerability in the _sasl_add_string() function in cyrus-sasl2, a library implementing the Simple Authenticat…
There has been an out-of-bounds write in Cyrus SASL leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP c…
Updated apache-commons-beanutils packages fix security vulnerability: In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allo…
LifeLabs, the largest provider of healthcare laboratory testing services in Canada, has suffered a massive data breach that exposed the personal and medical in…
Thanks to a statewide policy banning law enforcement use of facial recognition for three years, several agencies in San Diego will lose access to a database of…
Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) Bug Fix(es): * KEYS: prevent creating a different user's keyrings SL-6.10 * BUG: unable to…
An issue has been found in harfbuzz, an OpenType text shaping engine. Due to a buffer over-read, remote attackers are able to cause a denial of
