Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 3.1.0 Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note: that all TPM object created with a PolicyPCR with the currentPcrs and curren…
A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly(CVE-2021-25214). Mageia 7 version not affected. An assertion check ca…
The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection (CVE-2021-29956).
The patch from latest upstream release to address CVE-2021-30152 was not portable to stretch-security version causing MediaWiki APIs to fail. This update inclu…
Attention, Android users! A banking malware capable of stealing sensitive information is "spreading rapidly" across Europe, with the U.S. likely to be the next…
Security fixes for CVE-2020-36323, CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162. These are memory safety bugs in the Rust standard librar…
Some trivial gaping flaws in SMS communication infrastructure can allow for a complete takeover of…Trivial SMS Exploit Allows A Hacker To Reroute Messages and …
Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO) that could allow an unauthen…
CVE-2019-11840 An issue was discovered in supplementary Go cryptography libraries, aka golang-googlecode-go-crypto. If more than 256 GiB of keystream is
As security professionals who have spent more than a few years in the industry, we know a good challenge when we see one.SaaS and cloud-based technologies are …
An issue has been found in curl, a command line tool for transferring data with URL syntax. In rare circumstances, when using the multi API of curl in combinat…
As the pandemic continues to accelerate the shift towards working from home, aÂslew of digital threatsÂhave capitalized on the health concern to exploit weakne…
An update for ose-cluster-svcat-apiserver-operator-container is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated …
SSH keys play a critical role in server and network security, yet are too often overlooked by admins, IT professionals and security teams.
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. Thi…
- fix expired pointer dereference via multi API with `CURLOPT_CONNECT_ONLY` option set (CVE-2020-8231)
**PHP version 7.3.21** (06 Aug 2020) **Apache:** * Fixed bug php#79030 (Upgrade apache2handler's php_apache_sapi_get_request_time to return usec). (Herbert256)…
**PHP version 7.4.9** (06 Aug 2020) **Apache:** * Fixed bug php#79030 (Upgrade apache2handler's php_apache_sapi_get_request_time to return usec). (Herbert256) …
For much of this year, IT professionals all over the globe have had their hands full, finding ways to help businesses cope with the fallout of the coronavirus …
The Internet of Things (IoT) is rapidly growing, connecting more devices each day. It is projected that by 2025, the world will have an astounding 64 billion I…
It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language.
Fix insufficient output escaping bug in file attachment names (CVE-2020-13625). References: - https://bugs.mageia.org/show_bug.cgi?id=26760
NSS has an information disclosure vulnerability when handling DSA keys.
An HTTP request smuggling issue was discovered in the ngx_lua plugin for nginx, a high-performance web and reverse proxy server, as demonstrated by the ngx.loc…
