Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The container bci/ruby was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/openjdk was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/bci-init was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
SecurityWeek reports that federal agencies have been ordered by the Cybersecurity and Infrastructure Security Agency to remediate within three weeks a Linux ke…
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The container ses/7.1/rook/ceph was updated. The following patches have been included in this update:
The container ses/7.1/ceph/prometheus-server was updated. The following patches have been included in this update:
The container ses/7.1/ceph/prometheus-node-exporter was updated. The following patches have been included in this update:
The container ses/7.1/cephcsi/csi-resizer was updated. The following patches have been included in this update:
The container ses/7.1/cephcsi/csi-provisioner was updated. The following patches have been included in this update:
It was found that wkhtmltopdf, a command line utility to render HTML files into PDF, allowed local filesystem access by default. This update disables local fil…
Update to maintenance release 3.0.8
Several vulnerabilities were discovered in BlueZ, the Linux Bluetooth protocol stack. An attacker could cause a denial-of-service (DoS) or leak information.
Updated CVE security packages are now available for Red Hat Certificate System 9.7. Red Hat Product Security has rated this update as having a security impact …
GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header. (CVE-2022-41550) References: - https://bugs.mageia.org/…
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitima…
cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. (CVE-2022-40320) References: - https://bugs.mageia.org/show_bug.cgi?id=30856
