Our takeAUSCERT lists OpenVPN at CVSS 7.5, pcre2 at 8.2, libvirt at 7.8, Firefox ESR up to 8.8, and several OpenShift advisories. Apply the updates that affect you and move on.Cyber Resilience desk
Sources (14)
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
What this means for you — Security leader:Apply the listed OpenVPN, PCRE2, libvirt, OpenShift, and Firefox-ESR patches per your normal cycle; most are standard Linux/container/browser updates with no noted in-the-wild exploitation.
What this means for you — Lean IT orgs:Run your usual update process for OpenVPN, Firefox, and any listed Linux packages; most lean teams on current distros or hosted services can ignore the rest.
What this means for you — MSP:Check client estates for unpatched OpenVPN (CVSS 7.5), PCRE2 (8.2), libvirt (7.8), OpenShift 4.12/4.18, and Firefox-ESR (8.8); schedule the routine batch in the next maintenance window.
What this means for you — Researcher:AUSCERT bulletins detail OpenVPN, PCRE2, libvirt, OpenShift, and Firefox-ESR advisories with CVSS scores up to 8.8; review the linked ESB notices for exact package versions and fixes.