Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execution a…
It was discovered that Django, a high-level Python web development framework, did not properly sanitize input. This would allow a remote attacker to perform SQ…
Have you heard that VideoLAN has released a new version of VLC Media Player to resolve a critical security vulnerability that could eventually allow for remote…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2549
The updated packages fix a security vulnerability: An issue was discovered in dbu= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, lea…
Updated bind packages fix security vulnerabilities: It was discovered that Bind incorrectly handled certain TCP-pipelined queries. A remote attacker could poss…
A flaw in Adobe Flash Player may allow local or remote attacker(s) to execute arbitrary code.
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2530
Matei Badanoiu and LoRexxar@knownsec discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not correctly process and sanitiz…
Updated vino packages fix security vulnerabilities: The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer did not properly han…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2432
The package chromium before version 83.0.4103.97-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution and content s…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2414
An information disclosure vulnerability in GnuTLS allow remote attackers to obtain sensitive information.
IBM's new toolkit, which will soon be available for Linux, aims to give developers easier access to fully homomorphic encryption, a technology that protects se…
libupnp, the portable SDK for UPnP Devices allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer derefe…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2406
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2383
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2378
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2381
Cybersecurity researchers today disclosed details for a new vulnerability in VMware's Cloud Director platform that could potentially allow an attacker to gain …
OpenSSH ' secure protocol to connect and manage remote servers ' has announced dropping support for SHA-1 logins. The serviceOpenSSH Drops Support For SHA-1 Lo…
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2344
Upstream details at : https://access.redhat.com/errata/RHSA-2020:2337
