Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container suse/dotnet-sdk was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them …
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. (CVE-2021-33…
UAF and double-free in MQTT sending. (CVE-2021-22945) Protocol downgrade required TLS bypassed. (CVE-2021-22946) STARTTLS protocol injection via MITM. (CVE-202…
The container suse/sle15 was updated. The following patches have been included in this update:
The container suse/sles12sp5 was updated. The following patches have been included in this update:
The container suse/sles12sp4 was updated. The following patches have been included in this update:
The container suse/sles12sp3 was updated. The following patches have been included in this update:
An issue has been found in grilo, a framework for discovering and browsing media. Due to missing TLS certificate verification, users are vulnerable to network …
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30858
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30858
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.
Two vulnerabilities were discovered in the Nextcloud desktop client, which could result in information disclosure. For the oldstable distribution (buster), the…
Multiple vulnerabilities were discovered in nettle, a low level cryptographic library, which could result in denial of service (remote crash in RSA decryption …
The container caasp/v4.5/kube-scheduler was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-proxy was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-controller-manager was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-apiserver was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-scheduler was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-proxy was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-controller-manager was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-apiserver was updated. The following patches have been included in this update:
