Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Tim DàŒsterhus discovered that haproxy, a TCP/HTTP reverse proxy, did not properly sanitize HTTP headers when converting from HTTP/2 to HTTP/1. This would allo…
IBM has spoken out against Australia's controversial 'anti-encryption' laws, claiming they undermine previous work to strengthen the country's defenses.ÂThe ve…
Updated mariadb packages fix security vulnerabilities: A vulnerability in Server: Optimizer contains an easily exploitable vulnerability allows low privileged…
This kernel-linus update is based on the upstream 5.3.13 and fixes atleast the following security issues: Insufficient access control in a subsystem for Intel…
This kernel update is based on the upstream 5.3.13 and fixes atleast the following security issues: Insufficient access control in a subsystem for Intel (R) …
The updated packages fix a security vulnerability: In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote e…
Updated systemd packages fix security vulnerability: Nadav Markus from Palo Alto Networks discovered that systemd-resolved does not enforce appropriate access…
It was discovered that there were multiple double free vulnerabilities in python-psutil, a Python module providing convenience functions for accessing system p…
As the world becomes more interconnected by the day, more and more companies of all sizes and industries are finding themselves under attack by fearless cyberc…
The recent controversies surrounding the WhatsApp hacking haven't yet settled, and the world's most popular messaging platformÂcould be in the choppy waters on…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3878
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3872
Updated libapreq2 packages fix security vulnerability: Max Kellermann reported a NULL pointer dereference flaw in libapreq2, allowing a remote attacker to cau…
Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
A security vulnerability has been reported in libzmq/zeromq. a remote, unauthenticated client connecting to a libzmq application, running with a socket listen…
Updated python-numpy packages fix security vulnerability: An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, whic…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3756
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3836
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3755
hw: Machine Check Error on Page Size Change (IFU) (CVE-2018-12207) * hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135) * Kernel: vhost_net: infinit…
hw: Machine Check Error on Page Size Change (IFU) (CVE-2018-12207) * hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135) * hw: Intel GPU Denial Of Se…
Recent attacks on encryption have diverged. On the one hand, weve seen Attorney General William Barr call for 'wful access'o encrypted communications, using a…
Recent attacks on encryption have diverged. On the one hand, we've seen Attorney General William Barr call for 'lawful access' to encrypted communications,Âusi…
Updated freetds packages fix security vulnerability: Felix Wilhelm discovered that FreeTDS incorrectly handled certain types after a protocol downgrade. A rem…
