The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rebuild for dovecot 2.3.16 ---- Rebuild for dovecot 2.3.16
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Two vulnerabilities were discovered in the Nextcloud desktop client, which could result in information disclosure. For the oldstable distribution (buster), the…
The legacy 1.0 version of OpenSSL, a cryptography library for secure communication, fails to validate alternate trust chains in some conditions. In particular …
An update that solves one vulnerability and has one errata is now available.
Multiple vulnerabilities were discovered in nettle, a low level cryptographic library, which could result in denial of service (remote crash in RSA decryption …
GnuTLS, a portable cryptography library, fails to validate alternate trust chains in some conditions. In particular this breaks connecting to servers that use …
Update to 2.2.17
Upstream annoucement: [WordPress 5.8.1 Security and Maintenance Release](https://wordpress.org/news/2021/09/wordpress-5-8-1-security-and- maintenance-release/)
Another race in XENMAPSPACE_grant_table handling [XSA-384, CVE-2021-28701] bugfix for XSA-380
The container caasp/v4.5/kube-scheduler was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-proxy was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-controller-manager was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-apiserver was updated. The following patches have been included in this update:
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Update to 2.3.14
Upstream annoucement: [WordPress 5.8.1 Security and Maintenance Release](https://wordpress.org/news/2021/09/wordpress-5-8-1-security-and- maintenance-release/)
Several security issues were fixed in Python.
Several security issues were fixed in Qt.
Libgcrypt could be made to expose sensitive information.
An update that solves one vulnerability and has three fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.