Security Notices

Security Notices
FreeRTOS Kernel 11.3.3 Fixes Queue-Set Validation FlawNew!!

FreeRTOS-Kernel 11.3.3 fixes a privileged queue-set write flaw. Confirm build options, update forks, rebuild firmware, test devices, and retain evidence.

Read this guide
Security Notices
Red Hat IPA ELS Update Fixes Six VulnerabilitiesNew!!

Red Hat's critical IPA update fixes six flaws on RHEL 7 ELS. Inventory systems, install packages, validate identity services, and retain evidence.

Read this guide
Security Notices
CISA Adds Two Chained Ivanti Connect Secure Flaws to KEVNew!!

CISA adds two chained Ivanti Connect Secure flaws to KEV. Apply Ivanti guidance, triage exposed appliances, preserve evidence, and meet due dates.

Read this guide
Security Notices
AWS Nitro Enclaves SDK 0.4.6 Fixes Two Security IssuesNew!!

AWS Nitro Enclaves SDK 0.4.6 fixes enclave code execution and KMS impersonation risks. Upgrade, rebuild images, validate attestation, and retain evidence.

Read this guide
Security Notices
TeamViewer Says PHP2Shell Requires No Customer ActionNew!!

TeamViewer says PHP2Shell is not assigned to its products and requires no customer action. Document applicability, stay current, and retain evidence.

Read this guide
Security Notices
Johnson Controls Names Two Patched HTTP2Shell ProductsNew!!

Johnson Controls v2 names two patched Fire products for HTTP2Shell. Inventory versions, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
Red Hat Real Time Kernel Update Fixes 23 CVEsNew!!

Red Hat's Real Time 9.2 E4S kernel update fixes 23 CVEs. Match streams, install the signed kernel, reboot deliberately, and retain evidence.

Read this guide
Security Notices
Red Hat OpenStack Updates Fix botocore Header InjectionNew!!

Red Hat issued four OpenStack botocore errata for header injection. Match exact streams, install signed packages, validate workflows, and retain evidence.

Read this guide
Security Notices
Qt 6.8.10, 6.11.3, and 6.12.1 Fix CBOR Conversion FlawNew!!

Qt fixed crafted-CBOR conversion crashes and possible memory-safety impact in 6.8.10, 6.11.3, and 6.12.1. Rebuild apps, test, and retain evidence.

Read this guide
Security Notices
ClickHouse 26.10.3.7 Fixes Unauthenticated Server RCENew!!

ClickHouse fixed critical unauthenticated server RCE in supported 26.x streams. Inventory exposure, update exact branches, and retain evidence.

Read this guide