Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file (CVE-2021-30145). References:…
This update patches the vendored `smallvec` Rust crate in librsvg to fix a security vulnerability: The Iterator implementation mishandles destructors, leading …
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consu…
New polkit packages are available for Slackware 14.2 and -current to fix a security issue.
New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
Multiple security issues have been discovered in libwebp CVE-2018-25009
Multiple security issues have been discovered in libwebp CVE-2018-25009
If you haven't been taking data privacy seriously, you should. There are more data breaches…9 Smartphone Cybersecurity Tips You Should Know on Latest Hacking N…
Web apps provide ease to both businesses and customers, allowing enterprises to save money and…How to practice web automation for cybersecurity software? on La…
This kernel-linus update is based on upstream 5.10.41 and fixes atleast the following security issue: kernel/bpf/verifier.c in the Linux kernel through 5.12.7 …
This kernel update is based on upstream 5.10.41 and fixes atleast the following security issues: A double-free memory corruption in the Linux kernel HCI device…
**Version 3.4.49** (2021-05-19) * security **CVE-2021-21424** [SecurityCore] Fix user enumeration via response body on invalid credentials (chalasr) ---- **Ver…
Oracle has released Oracle Linux 8.4 as the latest (and greatest!) version of its free, enterprise-ready OS based on RHEL 8.4. This release offers improved sec…
With the ecommerce business models gaining more and more traction, the industry is growing fast…Security Risks That Ecommerce Businesses Face and How to Avoid …
There is a person in every organization that is the direct owner of breach protection. His or her task is to oversee and govern the process of design, build, m…
A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly(CVE-2021-25214). Mageia 7 version not affected. An assertion check ca…
New expat packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection (CVE-2021-29956).
University of Minnesota researchers' recent "experiment" - which involved sneaking vulnerabilities into the Linux kernel code base and then effectively braggin…
This kernel-linus update is based on upstream 5.10.37 and fixes atleast the following security issues: It was discovered that the io_uring implementation of th…
This kernel update is based on upstream 5.10.37 and fixes atleast the following security issues: It was discovered that the io_uring implementation of the Linu…
The updated packages fix security vulnerabilities: Use-after-free in xmlEncodeEntitiesInternal() in entities.c. (CVE-2021-3516)
New libX11 packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
Mozilla has begun rolling out a new security feature for its Firefox browser in nightly and beta channels that aims to protect users against a new class of sid…
