Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Updated libmirage packages fix security vulnerabilities: The CSO filter in libMirage in CDemu did not validate the part size, triggering a heap-based buffer o…
- Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
- Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
- Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use this iss…
This is a security release fixing the following issues: * CVE-2019-1348: the fast-import stream command "feature export-marks=path" allows writing to arbitrary…
libgit2 has been updated to version 0.28.4 to fix several security issues: * A carefully constructed commit object with a very large number of parents may l…
Potential remote code execution during URN processing (CVE-2019-12526). Multiple improper validations in URI processing (CVE-2019-12523, CVE-2019-18676).
A new variant of Vega ransomware family, dubbed Zeppelin, has recently been spotted in the wild targeting technology and healthcare companies across Europe, th…
With its latest and last Patch Tuesday for 2019, Microsoft is warning billions of its users of a new Windows zero-day vulnerability that attackers are actively…
Fix intermittent SEC_ERROR_UNKNOWN_ISSUER (#1752303, #1648617) ---- Updates the nss package to upstream NSS 3.47.1. For details about new functionality and a l…
The last Patch Tuesday of 2019 is finally here.Adobe today released updates for four of its widely used software'including Adobe Acrobat and Reader, Photoshop …
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/display_git_revision.lib.php and libraries/Footer.class.php.
**MySQL 8.0.18** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html Security Advisory: https://www.oracle.com/security-alerts/cp…
**MySQL 8.0.18** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html Security Advisory: https://www.oracle.com/security-alerts/cp…
Updated libvpx packages fix security vulnerabilities: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an applicat…
Update to version 3.0.12 of cyrus-imapd, which includes (among other fixes) a fix for CVE-2019-18928. https://www.cyrusimap.org/imap/download/release- notes/3.…
There is a lot to like about U.S. Sen. Cantwell's newÂConsumer Online Privacy Rights ActÂ(COPRA). It is an important step towards theÂcomprehensiveÂconsumer da…
Pressure is gathering for a federal privacy law in the US with the introduction of a second bill that would protect consumer data. TheÂConsumer Online Privacy …
Updates the nss package to upstream NSS 3.47.1. For details about new functionality and a list of bugs fixed in this release please see the upstream release no…
Tim DàŒsterhus discovered that haproxy, a TCP/HTTP reverse proxy, did not properly sanitize HTTP headers when converting from HTTP/2 to HTTP/1. This would allo…
The growing battle over end-to-end encryption took another turn last week, when EU officials warned that they may not take kindly to a US encryption ban or ins…
Another day, another Facebook blunder. Though, this time, affecting privacy-oriented iPhones. Reportedly, Facebook for iOS app had a 'bug' thatFacebook For iOS…
Zombieload is back.This time a new variant (v2) of the data-leaking side-channel vulnerability also affects the most recent Intel CPUs, including the latest Ca…
