The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two vulnerabilities were discovered in the Nextcloud desktop client, which could result in information disclosure. For the oldstable distribution (buster), the…
The legacy 1.0 version of OpenSSL, a cryptography library for secure communication, fails to validate alternate trust chains in some conditions. In particular …
Multiple vulnerabilities were discovered in nettle, a low level cryptographic library, which could result in denial of service (remote crash in RSA decryption …
The container caasp/v4.5/kube-scheduler was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-proxy was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-controller-manager was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-apiserver was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-scheduler was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-proxy was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-controller-manager was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-apiserver was updated. The following patches have been included in this update:
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
The container ses/7/prometheus-webhook-snmp was updated. The following patches have been included in this update:
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
The container ses/7/ceph/grafana was updated. The following patches have been included in this update:
The container ses/7/cephcsi/cephcsi was updated. The following patches have been included in this update:
The container sles-15-sp2-chost-byos-v20210913 was updated. The following patches have been included in this update:
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security…
The container suse-sles-15-sp2-chost-byos-v20210913-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and…
The container suse/sle15 was updated. The following patches have been included in this update:
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
It was discovered that Ghostscript, the GPL PostScript/PDF interpreter, does not properly validate access for the "%pipe%", "%handle%" and "%printer%" io devic…
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege …