Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container caasp/v4/etcd was updated. The following patches have been included in this update:
The container caasp/v4/curl was updated. The following patches have been included in this update:
The container caasp/v4/coredns was updated. The following patches have been included in this update:
The container caasp/v4/configmap-reload was updated. The following patches have been included in this update:
The container caasp/v4/cloud-provider-openstack was updated. The following patches have been included in this update:
The container caasp/v4/cilium-operator was updated. The following patches have been included in this update:
Two vulnerabilities were discovered in uriparser, a library that parses Uniform Resource Identifiers (URIs), which may result in denial of service or potential…
The container caasp/v4/velero-restic-restore-helper was updated. The following patches have been included in this update:
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users t…
The container suse/sles12sp5 was updated. The following patches have been included in this update:
The container suse/sles12sp3 was updated. The following patches have been included in this update:
The following vulnerabilities have been discovered in the wpewebkit web engine: CVE-2021-30934
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, bypass of deserialization restrictions or info…
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30934
A flaw was identified in how phpMyAdmin processes two factor authentication; a user could potentially manipulate their account to bypass two factor authenticat…
Buffer overflow due to inccorect calculation in EVP_PKEY_decrypt. (CVE-2021-3711) Denial of Service attack due to possible non-zero terminated strings. (CVE-20…
Buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). (CVE-2021-33430) Buffer overflow that could lead to DoS i…
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., alloca…
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-snapshotter was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-resizer was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-provisioner was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-node-driver-registrar was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-attacher was updated. The following patches have been included in this update:
