Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A popular WordPress theme plugin with over 200,000 active installations contains a severe but easy-to-exploit software vulnerability that, if left unpatched, c…
Here's excellent news for sysadmins. You can now use a physical security key as hardware-based two-factor authentication to securely log into a remote system v…
**Horde_Data 2.1.5** * [jan] Fix Remote Code Execution vulnerability (CVE-2020-8518, Reported by: Andrea Cardaci/SSD).
The updated packages fix a security vulnerability: In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop a…
Updated vim and neovim package fixes security vulnerability: It was discovered that Vim before 8.1.1365 and Neovim before 0.3.6 did not restrict the `:source!…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0471
an out-of-bounds write vulnerability due to an integer overflow was reported in libexif, a library to parse exif files. This flaw might be leveraged by remote …
The package chromium before version 80.0.3987.87-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, information …
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
Several Cisco-manufactured network equipments have been found vulnerable to five new security vulnerabilities that could allow hackers to take complete control…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:2079
Upstream details at : https://access.redhat.com/errata/RHSA-2018:2916
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0366
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0375
There are over a hundred potential ways hackers can ruin your life by having access to your WiFi network that's also connected to your computers, smartphones, …
Sudo could allow unintended access to the administrator account.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0316
Sudo could allow unintended access to the administrator account.
It was discovered that the LDAP authentication modules for the Prosody Jabber/XMPP server incorrectly validated the XMPP address when checking whether a user h…
Updated MariaDB packages fix security vulnerabilities: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple pro…
Cybersecurity researchers have discovered a new critical vulnerability (CVE-2020-7247) in the OpenSMTPD email server that could allow remote attackers to take …
An issue has been found in wget, a tool to retrieve files from the web. A race condition might occur as files rejected by an access list are kept on the disk f…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0194
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0196
