Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Updated MariaDB packages fix security vulnerabilities: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple pro…
Cybersecurity researchers have discovered a new critical vulnerability (CVE-2020-7247) in the OpenSMTPD email server that could allow remote attackers to take …
An issue has been found in wget, a tool to retrieve files from the web. A race condition might occur as files rejected by an access list are kept on the disk f…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0194
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0196
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0227
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0203
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0195
It was discovered that libbsd incorrectly handled certain strings, due to an out-of-bounds read during a comparison for a symbol name from the string table (st…
A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checke…
A code injection vulnerability in python-reportlab allows an attacker to execute code while parsing a color attribute. An application that uses python-reportla…
LastPass has recently troubled users when it locked out people from accessing their accounts due to a bug. Once again,Another LastPass Outage After Chrome Exte…
An election security group has said the Justice Department's renewed calls for access to encrypted data could impact more than privacy, stating:Â'Any effort to…
openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution (CVE-2019-5544) SL6 x86_64 openslp-2.0.0-4.el6_10.i6…
Internet Explorer is dead, but not the mess it left behind.Microsoft earlier today issued an emergency security advisory warning millions of Windows users of a…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0124
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0122
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0122
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0124
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0120
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0123
Following in the footsteps of their West Coast neighbors, Washington state legislators have introduced legislation to regulate consumer data privacy and the go…
Per Upstream, a malicious CA could result in unexpected inventory access with the System CA patch. The risk is very low. That patch is now dropped.
git: Remote code execution in recursive clones with nested submodules (CVE-2019-1387) SL7 x86_64 git-1.8.3.1-21.el7_7.x86_64.rpm git-daemon-1.8.3.1-21.el7_7.x8…
