Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet.
A vulnerability has been discovered in Libtasn1, a library to manage ASN.1 structures, allowing a remote attacker to cause a denial of service against an appli…
State-backed APT groups are increasingly targeting mobile devices in this new remote work environment. This article explores how the industry is fighting back.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2664
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2663
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2642
Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888) SL7 x86_64 bpftool-3.10.0-1127.13.1.el7.x86_64.rpm bpftoo…
This update includes a rebase from 9.0.34 up to 9.0.36 which resolves one CVE along with various other bugs/features: * rhbz#1838964 CVE-2020-9484 tomcat: Apac…
This update includes a rebase from 9.0.34 up to 9.0.36 which resolves one CVE along with various other bugs/features: * rhbz#1838964 CVE-2020-9484 tomcat: Apac…
Heads up Netgear router users! An unpatched flaw has made around 79 different Netgear router models vulnerable to remote attacks.79 Netgear Router Models Vulne…
It was discovered that there was an out-of-bounds access vulnerability in the server-server protocol in the ngircd Internet Relay Chat (IRC) server.
Rootkits are an effective way for attackers to hide their tracks and keep access to the machines over which they have gained control. Read on to learn about ro…
Two vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execution a…
It was discovered that Django, a high-level Python web development framework, did not properly sanitize input. This would allow a remote attacker to perform SQ…
Have you heard that VideoLAN has released a new version of VLC Media Player to resolve a critical security vulnerability that could eventually allow for remote…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2549
The updated packages fix a security vulnerability: An issue was discovered in dbu= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, lea…
Updated bind packages fix security vulnerabilities: It was discovered that Bind incorrectly handled certain TCP-pipelined queries. A remote attacker could poss…
A flaw in Adobe Flash Player may allow local or remote attacker(s) to execute arbitrary code.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2530
Matei Badanoiu and LoRexxar@knownsec discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not correctly process and sanitiz…
Updated vino packages fix security vulnerabilities: The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer did not properly han…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2432
The package chromium before version 83.0.4103.97-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution and content s…
