PT-2020-2585

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to a heap overflow, which could lead to arbitrary code execution if successfully exploited. This allows a remote attacker to execute arbitrary cod...

PT-2020-6352

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to an out-of-bounds read, which could lead to information disclosure if successfully exploited. This can be achieved by a remote attacker using a...

PT-2020-6365

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to an out-of-bounds read, which could lead to information disclosure if successfully exploited. This can be achieved by a remote attacker using a...

PT-2020-6359

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to an out-of-bounds read, which could lead to information disclosure if successfully exploited. This allows a remote attacker to disclose protecte...

Securing Smart Manufacturing

“Alexa, turn on the TV.” ”Get it yourself.” This nightmare scenario could play out millions of times unless people take steps to protect their IoT devices. The situation is even worse in industrial settings. Smart manufacturing, that is, Industry 4.0, relies on tight integration between IT system...

Maxum Development Rumpus Path Traversal Vulnerability

Maxum Development Rumpus is a suite of file transfer server software from Maxum Development in the United States. A security vulnerability exists in Maxum Development Rumpus versions prior to 8.2.12 macOS. An attacker can exploit the vulnerability to access arbitrary files on the server...

Red Hat Keycloak Code Issue Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A code issue vulnerability exists in Red Hat Keycloak versions prior to 9.0.2. The vulnerability stems from an improperly designed or implement...

How a Facebook Bug Took Down Spotify, TikTok, and Other Major iOS Apps

Thank a tiny change to a software development kit for widespread crashes Wednesday, including the Spotify and TikTok apps...

The Basics of Exploit Development 3: Egg Hunters

Hello dear reader. If you have read the other articles in this series, welcome back! If not I encourage you to read the previous installments before proceeding with this post. This post covers a surprisingly useful technique in exploit development called Egg Hunters. In order to demonstrate how E...

Principles of a Cloud Migration – Security W5H – The When

If you have to ask yourself when to implement security, you probably need a time machine! Security is as important to your migration as the actual workload you are moving to the cloud. Read that again. It is essential to be planning and integrating security at every single layer of both...

java security update

CentOS Errata and Security Advisory CESA-2020:1507 An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

Building for Billions: Addressing Security Concerns for Platforms at Scale

Security operations once consisted of a multitude of manual operations based around alerts, thresholds and severity levels. As systems scale and platforms continue to grow, how do you keep up with the growing requirements to secure these transactions and the networks they are built upon?...

How to Use VSSTrace to Collect VSS Diagnostic Logging

Challenge This article explains how to collect additional VSS diagnostic data with the VSSTrace tool, a Microsoft Windows Software Development Kit SDK component. Cause Veeam products use Microsoft Volume Shadow Copy Service VSS for various tasks. Sometimes it is necessary to go through the...

Applied ThreadFix: Security teams collaborating with development teams

Modern enterprises are distributed. Most ThreadFix deployments have stakeholders spanning development and security teams and those team members are spread around the globe. To support these distributed organizations, ThreadFix has a number of collaboration features that make teams more efficient...

ALBA-2020:1928 nodejs:12 bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Bug Fixes: Rebuild the nodejs:12 module for AlmaLinux 8.2 BZ1811502...

dpdk: possible memory leak leads to denial of service

A flaw was found in dpdk where a malicious master, or a container with access to vhostuser socket, can send specially crafted VRINGSETNUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition...

gcc-toolset-9-annobin bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documente...

ALBA-2020:1742 gcc-toolset-9-make bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documente...

gcc-toolset-9-make bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documente...

ALBA-2020:1737 gcc-toolset-9-strace bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documente...