Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container caasp/v4/cloud-provider-openstack was updated. The following patches have been included in this update:
The container caasp/v4/cilium-operator was updated. The following patches have been included in this update:
Security fix for CVE-2021-4034
Security fix for CVE-2021-4122.
Two vulnerabilities were discovered in uriparser, a library that parses Uniform Resource Identifiers (URIs), which may result in denial of service or potential…
pkexec: argv overflow results in local privilege esc.
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Several security issues were fixed in X.Org X Server.
polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector (CVE-2021-4034) For more details about the security issue(s), includi…
The container caasp/v4/velero-restic-restore-helper was updated. The following patches have been included in this update:
An update that fixes 14 vulnerabilities is now available.
An update that solves 10 vulnerabilities and has 33 fixes is now available.
An update that fixes one vulnerability is now available.
n issue has been found in libxfont, an X11 font rasterisation library. By creating symlinks, a local attacker can open (but not read) local files as user root.…
An issues has been found in lrzsz, a set of tools for zmodem/xmodem/ymodem file transfer. Due to an incorrect length check, which might result in a size_t wrap
Tavis Ormandy discovered that incorrect parsing of pkcs7 sequences in nss, the Mozilla Network Security Service library, may result in denial of service.
An update that fixes 43 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
The following vulnerabilities have been discovered in the wpewebkit web engine: CVE-2021-30934
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, bypass of deserialization restrictions or info…
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30934
policykit-1 could be made to run programs as an administrator.
policykit-1 could be made to run programs as an administrator.
