Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in OpenSSL.
The OpenSSL Project team has announced that, on November 1, 2022, they will release OpenSSL version 3.0.7, which will fix a critical vulnerability in the popul…
The recent OpenSSL updates address two security bugs in the service, including a high-severity vulnerability…Severe Remote Code Execution Vulnerability Riddled…
OpenSSL could be made to crash or run programs when the c_rehash script is used.
OpenSSL could be made to expose sensitive information over the network.
The c_rehash script allows command injection. (CVE-2022-2068) References: - https://bugs.mageia.org/show_bug.cgi?id=30573 - https://www.openssl.org/news/secadv…
Security fix for CVE-2022-1292 Upgrade to 1.1.1o, #2095817. See https://www.openssl.org/news/secadv/20220503.txt.
New openssl packages are available for Slackware 14.2 to fix a security issue.
It was discovered that the c_rehash script included in OpenSSL did not sanitise shell meta characters which could result in the execution of arbitrary commands.
New openssl packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue.
Security fix for CVE-2022-1292 Upgrade to 1.1.1o, rhbz#2095817. See https://www.openssl.org/news/secadv/20220503.txt.
OpenSSL could be made to crash or run programs when the c_rehash script is used.
An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of I…
Several security issues were fixed in OpenSSL.
Elison Niven discovered that the c_rehash script included in OpenSSL did not sanitise shell meta characters which could result in the execution of arbitrary co…
The c_rehash script allows command injection. (CVE-2022-1292) References: - https://bugs.mageia.org/show_bug.cgi?id=30369 - https://www.openssl.org/news/secadv…
New openssl packages are available for Slackware 14.2, 15.0, and -current to fix security issues.
Several security issues were fixed in OpenSSL.
Network-attached storage (NAS) maker QNAP has warned that most of its NAS devices are impacted by a high severity OpenSSL bug disclosed two weeks ago .
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as ha…
An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778) For more details about the security issue(s), including the impact,…
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important.…
An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important.…
