Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Upstream details at : https://access.redhat.com/errata/RHSA-2019:2964
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3127
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3128
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3136
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3158
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3055
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3067
Privacy is a hot topic in the realm of smart speakers, from employees listening in on recordings and auditors accessing user locations. Now, another issue rega…
It was discovered that Aspell, the GNU spell checker, incorrectly handled certain inputs which leads to a stack-based buffer over-read. An attacker could poten…
In sudo, a program that provides limited super user privileges to specific users, an attacker with access to a Runas ALL sudoer account can bypass certain poli…
OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949) * OpenJDK: Unexpected exception thrown during regular expression p…
Updated nmap packages fix security vulnerability: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack …
X41 D-Sec discovered that unbound, a validating, recursive, and caching DNS resolver, did not correctly process some NOTIFY queries. This could lead to remote …
ruby-openid performed discovery first, and then verification. This allowed an attacker to change the URL used for discovery and trick the server into connectin…
Octavia could allow unintended access to network services.
A 7-year-old critical remote code execution vulnerability has been discovered in iTerm2 macOS terminal emulator app'one of the most popular open source replace…
A heap buffer overflow vulnerability was discovered in openjpeg2, the open-source JPEG 2000 codec. This vulnerability is caused by insufficient validation of w…
Recently, researchers discovered a serious vulnerability affecting many D-Link Routers. Upon an exploit, the flaw can lead to remote codeCritical Command Execu…
An XSS vulnerability was discovered in noVNC in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to …
Max Kellermann reported a NULL pointer dereference flaw in libapreq2, a generic Apache request library, allowing a remote attacker to cause a denial of service…
It was discovered that there was a remotely-exploitable null pointer dereference in libapreq2, a library for manipulating HTTP requests. For Debian 8 "Jessie",…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:2829
An ex-Yahoo! employee has pleaded guilty to misusing his access at the company to hack into the accounts of nearly 6,000 Yahoo users in search of private and p…
Looking for ways to unlock and read the content of an encrypted PDF without knowing the password?Well, that's now possible, sort of'thanks to a novel set of at…
