Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Updated libapreq2 packages fix security vulnerability: Max Kellermann reported a NULL pointer dereference flaw in libapreq2, allowing a remote attacker to cau…
Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
A security vulnerability has been reported in libzmq/zeromq. a remote, unauthenticated client connecting to a libzmq application, running with a socket listen…
Updated python-numpy packages fix security vulnerability: An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, whic…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3756
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3836
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3755
hw: Machine Check Error on Page Size Change (IFU) (CVE-2018-12207) * hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135) * Kernel: vhost_net: infinit…
hw: Machine Check Error on Page Size Change (IFU) (CVE-2018-12207) * hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135) * hw: Intel GPU Denial Of Se…
Recent attacks on encryption have diverged. On the one hand, weve seen Attorney General William Barr call for 'wful access'o encrypted communications, using a…
Recent attacks on encryption have diverged. On the one hand, we've seen Attorney General William Barr call for 'lawful access' to encrypted communications,Âusi…
Updated freetds packages fix security vulnerability: Felix Wilhelm discovered that FreeTDS incorrectly handled certain types after a protocol downgrade. A rem…
Updated python and python3 packages fix security vulnerabilities: It was discovered that Python incorrectly parsed certain email addresses. A remote attacker c…
A buffer overflow in pump might allow remote attacker to execute arbitrary code.
Americas national security depends on the government getting access to the artificial intelligence breakthroughs made by the technology industry. So says a rep…
A team of cybersecurity researchers has discovered a clever technique to remotely inject inaudible and invisible commands into voice-controlled devices ' all j…
HAproxy would allow unintended access if ii received specially crafted HTTP request.
The package samba before version 4.10.10-1 is vulnerable to multiple issues including arbitrary filesystem access, insufficient validation and denial of servic…
If you're using the popular rConfig network configuration management utility to protect and manage your network devices, here we have an important and urgent w…
Updated libsoup package fixes security vulnerability: It was discovered that libsoup incorrectly handled parsing certain NTLM messages. If a user or automated…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3287
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3281
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3286
An out-of-bounds memory access was discovered in the Qt library, which could result in denial of service through a text file containing many directional charac…
