The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
An update that fixes 8 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that solves 13 vulnerabilities and has three fixes is now available.
An update that fixes one vulnerability is now available.
The Qualys Research Labs discovered a local privilege escalation in PolicyKit's pkexec. Details can be found in the Qualys advisory at
It was found that nss, the Mozilla Network Security Service library, was vulnerable to a NULL pointer dereference when parsing empty PKCS 7 sequences, which co…
An update that solves 10 vulnerabilities and has 32 fixes is now available.
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-snapshotter was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-resizer was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-provisioner was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-node-driver-registrar was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-attacher was updated. The following patches have been included in this update:
The container ses/7/cephcsi/cephcsi was updated. The following patches have been included in this update:
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
Security fix for CVE-2022-21658, a TOCTOU race condition in std::fs::remove_dir_all. Privileged programs should be rebuilt if they use this function on paths t…
Bug fixes and incremental optimization improvements. ---- Bugfix release including fix for CVE-2021-45290 and CVE-2021-45293.
Security fix for CVE-2022-21658, a TOCTOU race condition in std::fs::remove_dir_all. Privileged programs should be rebuilt if they use this function on paths t…
Bug fixes and incremental optimization improvements. ---- Bugfix release including fix for CVE-2021-45290 and CVE-2021-45293.
Multiple out-of-bounds error were discovered in qt4-x11. The highest threat from CVE-2021-3481 (at least) is to data confidentiality the application availabili…
An issue has been found in apr, the Apache Portable Runtime Library. The issue is related to out of bounds memory access due to invalid date fields.
An update that solves one vulnerability and has three fixes is now available.
strongSwan could crash or allow unintended access to network services.