Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Tom Lane discovered that "ALTER ... DEPENDS ON EXTENSION" sub commands in the PostgreSQL database did not perform authorisation checks. For the stable distribu…
Tom Lane discovered that "ALTER ... DEPENDS ON EXTENSION" sub commands in the PostgreSQL database did not perform authorisation checks. For the oldstable distr…
The updated packages fix a security vulnerability: In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop a…
Open-source software isn't a completely chaotic and breached wasteland of vulnerabilities. It's a global effort to make the development lifecycle faster.
Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received from a remote LAN party, which may lead to buffer overf…
We're living in times where internet privacy could soon become a myth with companies putting in their best foot to get hold of our data for advertising and oth…
Google might have mistakenly shared your private videos saved on the company's servers with other users, the tech giant admitted yesterday in a security notifi…
Strong, unbroken encryption is essential in protecting users' privacy and the integrity of sensitive data, yet encryption technology is currently under threat …
Updated sqlite3 packages fix security vulnerabilities: An out of bounds write flaw (CVE-2019-13734), insufficient data validation flaw (CVE-2019-13750), unini…
One of the most significant projects from the Apache Foundation has released another version of SpamAssassin. This is primarily a security release, but also in…
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c (CVE-2020-5395) FontForge 20190801 has a heap-based buffer overflow in the Type2NotDef…
An election security group has said the Justice Department's renewed calls for access to encrypted data could impact more than privacy, stating:Â'Any effort to…
libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry (CVE-2019-18408) SL7 x86_64 lib…
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
Researchers have found numerous popular Android camera apps stealing users' data and spying on them. Android Camera Apps Caught SpyingPopular Android Camera Ap…
PySAML2 could be made to bypass signature verification with arbitrary data.
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
An update for openvswitch is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate…
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would …
**Version 4.9.4** (2020-01-07) - issue #15724 Fix 2FA was disabled by a bug - issue [security] Fix SQL injection vulnerability on the user accounts page (PM…
Once again, Facebook has (unintentionally) breached users' privacy. Facebook developed a glitch that exposed page admin accounts to the public.Serious Facebook…
Applications using libpcap could be made to crash if given specially crafted data.
