The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Oracle Linux has released security updates for version 10, addressing CVE-2026-5056 related to integer overflow and bounds check vulnerabilities in uncompresse…
Oracle Linux Security Advisory ELSA-2026-48170 announces updated RPM packages for PHP version 8.3.32 for x86_64 and aarch64 architectures, addressing vulnerabi…
Oracle has released updates for Oracle Linux 9, addressing security vulnerabilities related to input validation, AVC issues, and ignored routes with specific R…
Oracle Linux Security Advisory ELSA-2026-24342 announces the release of updated Python Tornado packages for Oracle Linux 7 addressing CVE-2026-31958 and CVE-20…
SUSE released a security update for nginx addressing three vulnerabilities including heap buffer overflows and a remote denial of service, applicable to variou…
A security update for rrdtool addresses a vulnerability (CVE-2026-43958) involving a stack buffer overflow that could lead to local privilege escalation in var…
A security update for containerd addresses four vulnerabilities, including a significant denial of service risk, affecting various SUSE Linux Enterprise produc…
SUSE released an important security update for bind addressing eight vulnerabilities affecting various SUSE Linux products, including fixes for issues related …
SUSE released a security update for perl-HTTP-Date to address CVE-2026-14741, which can cause CPU exhaustion from regex backtracking. Users should apply the up…
SUSE released a security update for gawk addressing three vulnerabilities, including use-after-free, integer overflow, and buffer overflow, recommended for aff…
SUSE released a security update for perl-Net-DNS addressing CVE-2026-64194, which may allow DoS attacks through unbounded recursion in DNS packet processing.
A security update for OpenSSL 1.1 has been released, addressing a denial of service vulnerability impacting multiple SUSE Linux products, available via recomme…
SUSE released a security update for Vim addressing multiple vulnerabilities, including arbitrary code execution and memory issues, alongside various bug fixes …
SUSE released a security update for python3-dulwich addressing CVE-2026-38974, which lacked SSH host key verification, impacting several SUSE products with imp…
Mageia's security update addresses vulnerabilities in Squid affecting version 10, including an out-of-bounds read and a heap-based buffer overflow, linked to C…
An update for Mageia versions 10 and 9 addresses a critical security vulnerability in GD versions before 2.86, which could allow OS command injection and file …
Mageia updates address multiple security vulnerabilities across releases 10 and 9, including heap out-of-bounds reads and NULL pointer dereferences affecting l…
Mageia has released updates for versions 9 and 10 addressing security vulnerabilities that permit denial of service and information disclosure through crafted …
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access …
A security update for Yelp on Rocky Linux 8 addresses a vulnerability allowing host file disclosure from Flatpak applications, with a CVSS score of 7.1.
openSUSE Tumbleweed has released an update for python312-3.12.13-8.1, addressing nine security vulnerabilities with varying severity, including multiple CVEs, …
An update for openSUSE Tumbleweed addresses a vulnerability in the libntpc1 package, enhancing security and involving multiple related packages, as noted in CV…
An update for gio-branding-upstream-2.88.3-1.1 on openSUSE Tumbleweed addresses CVE-2026-15588, which impacts security with a moderate severity rating.
An update for python313-pydantic-2.13.4-2.1 on openSUSE Tumbleweed addresses two vulnerabilities, improving security with moderate severity, as indicated by CV…