Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0227
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0203
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0195
It was discovered that libbsd incorrectly handled certain strings, due to an out-of-bounds read during a comparison for a symbol name from the string table (st…
A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checke…
A code injection vulnerability in python-reportlab allows an attacker to execute code while parsing a color attribute. An application that uses python-reportla…
LastPass has recently troubled users when it locked out people from accessing their accounts due to a bug. Once again,Another LastPass Outage After Chrome Exte…
An election security group has said the Justice Department's renewed calls for access to encrypted data could impact more than privacy, stating:Â'Any effort to…
openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution (CVE-2019-5544) SL6 x86_64 openslp-2.0.0-4.el6_10.i6…
Internet Explorer is dead, but not the mess it left behind.Microsoft earlier today issued an emergency security advisory warning millions of Windows users of a…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0124
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0122
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0122
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0124
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0120
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0123
Following in the footsteps of their West Coast neighbors, Washington state legislators have introduced legislation to regulate consumer data privacy and the go…
Per Upstream, a malicious CA could result in unexpected inventory access with the System CA patch. The risk is very low. That patch is now dropped.
git: Remote code execution in recursive clones with nested submodules (CVE-2019-1387) SL7 x86_64 git-1.8.3.1-21.el7_7.x86_64.rpm git-daemon-1.8.3.1-21.el7_7.x8…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0085
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0086
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
TikTok,Âthe 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-securit…
The package firefox before version 72.0-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation, access restriction bypa…
