Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2414
An information disclosure vulnerability in GnuTLS allow remote attackers to obtain sensitive information.
IBM's new toolkit, which will soon be available for Linux, aims to give developers easier access to fully homomorphic encryption, a technology that protects se…
libupnp, the portable SDK for UPnP Devices allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer derefe…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2406
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2383
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2378
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2381
Cybersecurity researchers today disclosed details for a new vulnerability in VMware's Cloud Director platform that could potentially allow an attacker to gain …
OpenSSH ' secure protocol to connect and manage remote servers ' has announced dropping support for SHA-1 logins. The serviceOpenSSH Drops Support For SHA-1 Lo…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2344
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2337
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2334
Remote denial of service and several memory management issues were fixed in the epson2 driver.
Apple recently paid Indian vulnerability researcher Bhavuk Jain a huge $100,000 bug bounty for reporting a highly critical vulnerability affecting its 'Sign in…
Updated jasper packages fix security vulnerability: There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 …
Updated transmission packages fix security vulnerability: Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to ca…
The package chromium before version 83.0.4103.61-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, content spoo…
Academics from àcole Polytechnique Fédérale de Lausanne (EPFL) disclosed a security vulnerability in Bluetooth that could potentially allow an attacker to spo…
Yesterday, on the 3rd anniversary of the infamous global WannaCry ransomware outbreak for which North Korea was blamed, the U.S. government released informatio…
PulseAudio could allow unintended access to snap packages.
Mozilla: Use-after-free during worker shutdown (CVE-2020-12387) * Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 (CVE-2020-12395) * usrsc…
Have you heard that GoDaddy has admitted customer usernames and passwords for connecting remotely to Linux servers via SSH have been compromised, forcing provi…
Mozilla: Use-after-free during worker shutdown (CVE-2020-12387) * Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 (CVE-2020-12395) * Mozil…
