Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1216109 * bsc#1216123 * bsc#1221400 * bsc#1226136 * bsc#1229858
* bsc#1229869 Cross-References: * CVE-2023-45288
* bsc#1062303 * bsc#1229008 * bsc#1229858 * bsc#1229867 * bsc#1229869
* bsc#1229858 * bsc#1229867 * bsc#1229869 Cross-References:
Update to v1.29.7 for FC40. Resolves CVE-2024-5321: Incorrect permissions on Windows containers logs. Additional bug and regression fixes from upstream.
* bsc#1222539 Cross-References: * CVE-2024-3177
* bsc#1219964 Cross-References: * CVE-2024-0793
* bsc#1219964 Cross-References: * CVE-2024-0793
* bsc#1062303 * bsc#1219964 Cross-References: * CVE-2024-0793
* bsc#1219964 Cross-References: * CVE-2024-0793
Cilium , an open-source networking, security and observability project, has released version 1.14 with an array of connectivity, security and observability upd…
Upstream security update with additional bugfixes. Resolves CVE-2023-2431.
Resolves, in part, #2142161. Security patches that resolve CVE-2022-3162 and CVE-2022-3294.
As the open-source model continues to prove its sustainability in the enterprise, the software community is ramping up its security-mindedness. That concern wa…
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lr…
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lr…
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lr…
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). --…
Google raises rewards for its kCTF exploit-focussed vulnerability bounty focussing on Linux kernel zero-day flaws. And changes some rules.
An update that contains security fixes can now be installed.
An update that fixes two vulnerabilities is now available.
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernet…
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the software that sits at the front of much of the Linux internet…
The compromise of Nx Console shows how much infrastructure now sits behind a single developer account. GitHub repositories, CI/CD pipelines, container build sy…
