-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

====================================================================                   Red Hat Security Advisory

Synopsis:          Moderate: httpd:2.4 security update
Advisory ID:       RHSA-2022:0891-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:0891
Issue date:        2022-03-15
CVE Names:         CVE-2021-34798 CVE-2021-39275 
====================================================================
1. Summary:

An update for the httpd:2.4 module is now available for Red Hat Enterprise
Linux 8.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64

3. Description:

The httpd packages provide the Apache HTTP Server, a powerful, efficient,
and extensible web server.

Security Fix(es):

* httpd: NULL pointer dereference via malformed requests (CVE-2021-34798)

* httpd: Out-of-bounds write in ap_escape_quotes() via malicious input
(CVE-2021-39275)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, the httpd daemon will be restarted
automatically.

5. Bugs fixed (https://bugzilla.redhat.com/):

2005119 - CVE-2021-39275 httpd: Out-of-bounds write in ap_escape_quotes() via malicious input
2005128 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests

6. Package List:

Red Hat Enterprise Linux AppStream (v. 8):

Source:
httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.src.rpm
mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.src.rpm
mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.src.rpm

aarch64:
httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
httpd-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
httpd-debugsource-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
httpd-devel-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
httpd-tools-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64.rpm
mod_http2-debuginfo-1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64.rpm
mod_http2-debugsource-1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64.rpm
mod_ldap-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64.rpm
mod_md-debuginfo-2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64.rpm
mod_md-debugsource-2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64.rpm
mod_proxy_html-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
mod_session-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
mod_session-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
mod_ssl-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
mod_ssl-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm

noarch:
httpd-filesystem-2.4.37-43.module+el8.5.0+14370+51c6d843.2.noarch.rpm
httpd-manual-2.4.37-43.module+el8.5.0+14370+51c6d843.2.noarch.rpm

ppc64le:
httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
httpd-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
httpd-debugsource-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
httpd-devel-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
httpd-tools-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le.rpm
mod_http2-debuginfo-1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le.rpm
mod_http2-debugsource-1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le.rpm
mod_ldap-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le.rpm
mod_md-debuginfo-2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le.rpm
mod_md-debugsource-2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le.rpm
mod_proxy_html-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
mod_session-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
mod_session-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
mod_ssl-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
mod_ssl-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm

s390x:
httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
httpd-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
httpd-debugsource-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
httpd-devel-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
httpd-tools-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.s390x.rpm
mod_http2-debuginfo-1.15.7-3.module+el8.4.0+8625+d397f3da.s390x.rpm
mod_http2-debugsource-1.15.7-3.module+el8.4.0+8625+d397f3da.s390x.rpm
mod_ldap-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.s390x.rpm
mod_md-debuginfo-2.0.8-8.module+el8.3.0+6814+67d1e611.s390x.rpm
mod_md-debugsource-2.0.8-8.module+el8.3.0+6814+67d1e611.s390x.rpm
mod_proxy_html-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
mod_session-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
mod_session-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
mod_ssl-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
mod_ssl-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm

x86_64:
httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
httpd-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
httpd-debugsource-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
httpd-devel-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
httpd-tools-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64.rpm
mod_http2-debuginfo-1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64.rpm
mod_http2-debugsource-1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64.rpm
mod_ldap-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64.rpm
mod_md-debuginfo-2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64.rpm
mod_md-debugsource-2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64.rpm
mod_proxy_html-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
mod_session-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
mod_session-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
mod_ssl-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
mod_ssl-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2021-34798
https://access.redhat.com/security/cve/CVE-2021-39275
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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wNeE
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://listman.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2022-0891:01 Moderate: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8

Summary

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
* httpd: NULL pointer dereference via malformed requests (CVE-2021-34798)
* httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Summary


Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the updated packages, the httpd daemon will be restarted automatically.

References

https://access.redhat.com/security/cve/CVE-2021-34798 https://access.redhat.com/security/cve/CVE-2021-39275 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat Enterprise Linux AppStream (v. 8):
Source: httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.src.rpm mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.src.rpm mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.src.rpm
aarch64: httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm httpd-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm httpd-debugsource-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm httpd-devel-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm httpd-tools-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64.rpm mod_http2-debuginfo-1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64.rpm mod_http2-debugsource-1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64.rpm mod_ldap-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64.rpm mod_md-debuginfo-2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64.rpm mod_md-debugsource-2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64.rpm mod_proxy_html-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm mod_session-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm mod_session-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm mod_ssl-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm mod_ssl-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64.rpm
noarch: httpd-filesystem-2.4.37-43.module+el8.5.0+14370+51c6d843.2.noarch.rpm httpd-manual-2.4.37-43.module+el8.5.0+14370+51c6d843.2.noarch.rpm
ppc64le: httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm httpd-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm httpd-debugsource-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm httpd-devel-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm httpd-tools-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le.rpm mod_http2-debuginfo-1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le.rpm mod_http2-debugsource-1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le.rpm mod_ldap-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le.rpm mod_md-debuginfo-2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le.rpm mod_md-debugsource-2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le.rpm mod_proxy_html-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm mod_session-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm mod_session-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm mod_ssl-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm mod_ssl-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le.rpm
s390x: httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm httpd-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm httpd-debugsource-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm httpd-devel-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm httpd-tools-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.s390x.rpm mod_http2-debuginfo-1.15.7-3.module+el8.4.0+8625+d397f3da.s390x.rpm mod_http2-debugsource-1.15.7-3.module+el8.4.0+8625+d397f3da.s390x.rpm mod_ldap-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.s390x.rpm mod_md-debuginfo-2.0.8-8.module+el8.3.0+6814+67d1e611.s390x.rpm mod_md-debugsource-2.0.8-8.module+el8.3.0+6814+67d1e611.s390x.rpm mod_proxy_html-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm mod_session-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm mod_session-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm mod_ssl-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm mod_ssl-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x.rpm
x86_64: httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm httpd-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm httpd-debugsource-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm httpd-devel-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm httpd-tools-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64.rpm mod_http2-debuginfo-1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64.rpm mod_http2-debugsource-1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64.rpm mod_ldap-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64.rpm mod_md-debuginfo-2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64.rpm mod_md-debugsource-2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64.rpm mod_proxy_html-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm mod_session-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm mod_session-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm mod_ssl-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm mod_ssl-debuginfo-2.4.37-43.module+el8.5.0+14370+51c6d843.2.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Severity
Advisory ID: RHSA-2022:0891-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:0891
Issued Date: : 2022-03-15
CVE Names: CVE-2021-34798 CVE-2021-39275

Topic

An update for the httpd:2.4 module is now available for Red Hat EnterpriseLinux 8.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.


Topic


 

Relevant Releases Architectures

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64


Bugs Fixed

2005119 - CVE-2021-39275 httpd: Out-of-bounds write in ap_escape_quotes() via malicious input

2005128 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests


Related News

32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
28.Lock Globe Esm H320
1 - 2 min read
A resurgence of cyberattacks targeting Linux systems in Asian campaigns through the utilization of the Pupy Remote Access Trojan (RAT) has been
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved