Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues were discovered in the Rails web framework which could result in denial of service. For the stable distribution (buster), these proble…
Every device connected to a network'whether a local network one or the Internet'is assigned an…3 Reasons Why IP Data Can Be Crucial for Cybersecurity on Latest…
The updated packages fix security vulnerabilities: Out of bounds-read when parsing a `WM_COPYDATA` message. (CVE-2021-29964) Memory safety bugs fixed in Thunde…
The updated package fixes security vulnerabilities: A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect. …
The updated packages fix security vulnerabilities: Heap-based buffer overflow in Jp2Image::readMetadata(). (CVE-2021-3482) Heap-based buffer overflow in Exiv2:…
Updated cgal packages fix security vulnerabilities: An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An…
Updated cgal packages fix security vulnerabilities: An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An…
Updated squid packages fix security vulnerabilities: Due to improper input validation Squid is vulnerable to an HTTP Request Smuggling attack. This problem all…
Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file (CVE-2021-30145). References:…
This update patches the vendored `smallvec` Rust crate in librsvg to fix a security vulnerability: The Iterator implementation mishandles destructors, leading …
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consu…
New polkit packages are available for Slackware 14.2 and -current to fix a security issue.
New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
Multiple security issues have been discovered in libwebp CVE-2018-25009
Multiple security issues have been discovered in libwebp CVE-2018-25009
If you haven't been taking data privacy seriously, you should. There are more data breaches…9 Smartphone Cybersecurity Tips You Should Know on Latest Hacking N…
Web apps provide ease to both businesses and customers, allowing enterprises to save money and…How to practice web automation for cybersecurity software? on La…
This kernel-linus update is based on upstream 5.10.41 and fixes atleast the following security issue: kernel/bpf/verifier.c in the Linux kernel through 5.12.7 …
This kernel update is based on upstream 5.10.41 and fixes atleast the following security issues: A double-free memory corruption in the Linux kernel HCI device…
**Version 3.4.49** (2021-05-19) * security **CVE-2021-21424** [SecurityCore] Fix user enumeration via response body on invalid credentials (chalasr) ---- **Ver…
Oracle has released Oracle Linux 8.4 as the latest (and greatest!) version of its free, enterprise-ready OS based on RHEL 8.4. This release offers improved sec…
With the ecommerce business models gaining more and more traction, the industry is growing fast…Security Risks That Ecommerce Businesses Face and How to Avoid …
There is a person in every organization that is the direct owner of breach protection. His or her task is to oversee and govern the process of design, build, m…
A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly(CVE-2021-25214). Mageia 7 version not affected. An assertion check ca…
