Security Notices
Elastic Updates Elasticsearch for Seven Resource-Consumption Flaws
Seven Elasticsearch advisories address service-disrupting resource consumption with different affected ranges and fixes. Check all applicable notices and supported cluster upgrade order; access restrictions reduce exposure but are not equivalent to vendor fixes.
Elastic Kibana Updates Address Authorization, Privilege, and Availability Risks
Kibana advisories cover Agent Builder privileges, Timeline authorization, cross-space Synthetics deletion and resource exhaustion. Match enabled features, roles and release ranges across all four notices before selecting a compatible stack update.
wolfSSL 5.9.4 Fixes Eleven TLS and Certificate Validation Flaws
wolfSSL 5.9.4 fixes TLS and certificate-validation flaws whose applicability depends on build options and APIs. Update embedded and static copies as well as shared libraries, and follow the vendor's persistent-state and cache-handling requirements.
containerd Updates Bound OCI Image Graph Processing
A crafted OCI image index can exhaust containerd resources during image pull, before a container starts. Update affected runtimes through the host or cluster's supported channel and limit untrusted image sources while arranging rollout.
AWS Updates pgcollection to Address Type-Confusion Remote Code Execution
Self-managed pgcollection 2.0.0-2.1.1 needs an update for type-confusion code execution. Inventory installed extensions and plan recovery checks; AWS's unaffected RDS/Aurora statement applies specifically to the pgcollection version named in its bulletin.