The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Writing advanced malware for a threat actor requires different groups of people with diverse technical expertise to put them all together. But can the code lea…
An update that solves one vulnerability and has one errata is now available.
An update that solves 9 vulnerabilities and has 103 fixes is now available.
Update to Node.js 14.11.0 September 2020 Security Release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/ ---- Node.js 14.10.0 - F…
Update to Node.js 14.11.0 September 2020 Security Release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/ ---- Node.js 14.10.0 - F…
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with jruby) was too tolerant against
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with ruby2.3) was too tolerant against
An update that solves two vulnerabilities and has one errata is now available.
An update that fixes 12 vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
An update that solves three vulnerabilities and has one errata is now available.
An update that solves three vulnerabilities and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that solves four vulnerabilities and has two fixes is now available.
Red Hat Ansible Tower 3.6.6-1 - RHEL7 Container 2. Description: * Fixed an XSS vulnerability (CVE-2020-25626) * Fixed the Red Hat sosreport tool to no longer i…
An update for servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of …
Multiple security issues were discovered in MediaWiki: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation…
An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with u…
An update for qemu-kvm-rhev is now available for Red Hat Virtualization for Red Hat Virtualization Host 7. Red Hat Product Security has rated this update as ha…
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
I am sure that many of you have by now heard of a recently disclosed critical Windows server vulnerability'calledÂZerologon'that could let hackers completely t…
An update for nss, nss-softokn, nss-util, and nspr is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a …