The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Release of OpenShift Serverless 1.27.0 The References section contains CVE links providing detailed severity ratings for each vulnerability. Ratings are based …
OpenStack Swift could be made to expose sensitive information over the network.
Nova could be made to expose sensitive information.
Cinder could be made to expose sensitive information.
xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494) For more details about the security issue(s), including the…
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/ruby was updated. The following patches have been included in this update:
- Fix CVE-2022-3560 - This is a privilege escalation in the pesign-authorize script, which is now deprecated. There is no impact unless you are using pesign as…
* Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, and improving frame discard to avoid …
Fixed: * A buffer overflow in tss2-rc as CVE-2023-22745. * The drv layer in tss2-rc should have been the policy layer. * Spec deviation in Fapi_GetDescription …
- New upstream release (116) - Fix CVE-2022-3560 - This is a privilege escalation in the pesign-authorize script, which is now deprecated. There is no impact u…
Several security vulnerabilities have been discovered in SDL2, the Simple DirectMedia Layer library. These vulnerabilities may allow an attacker to cause a den…
Multiple security vulnerabilities have been discovered in Wireshark, a network traffic analyzer. An attacker could cause a denial of service (infinite loop or …
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Heimdal could be made to crash if it received specially crafted input.
Helmut Grohne discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3…
This release fixes various issues in shim bootloader and updates it to a supported version. Older versions of the shim may eventually be blocked by Secure Boot…
I discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accident…
An update that fixes two vulnerabilities is now available.
Several security issues were fixed in OpenSSL.
X.Org X Server could be made to crash or run programs as the administrator if it received specially crafted input.
Several security issues were fixed in OpenSSL.
Several security issues were fixed in OpenSSL.