Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update for the python313-sentry-sdk-2.66.1-1.1 package on openSUSE Tumbleweed addresses a security vulnerability identified as CVE-2024-40647.
An important security update for compat-libtiff3 in Rocky Linux 8 addresses a heap-based buffer overflow vulnerability, affecting users reliant on the older TI…
Rocky Linux 8 has released an important security update for libtiff addressing a heap-based buffer overflow vulnerability, scored 7.3 on the CVSS scale, affect…
A security update for Yelp addresses a vulnerability in Rocky Linux 9, allowing host file disclosure from Flatpak applications. CVSS score for the issue is 7.1.
Rocky Linux 9 has received an important security update for libXfont2, addressing vulnerabilities that could lead to heap buffer overflows, with CVSS scores of…
Rocky Linux 9 has an important security update for PipeWire addressing a sandbox escape and arbitrary code execution vulnerability (CVE-2026-5674), with detail…
A critical security update for Node.js on Rocky Linux 9 addresses denial of service vulnerabilities related to brace-expansion and tar handling, necessitating …
SUSE has released a security update for google-guest-agent addressing two vulnerabilities that could lead to validation bypass and infinite loops, affecting se…
SUSE released a security update addressing CVE-2026-56379 in GraphicsMagick, which involves arbitrary command injection through the SVG decoder, applicable to …
SUSE released a security update for GraphicsMagick addressing CVE-2026-56379, which allows arbitrary command injection through crafted SVG files in multiple SU…
A security update for rsyslog addresses CVE-2026-61548, a vulnerability that can cause stack buffer overflow in crafted RFC 5424 messages, impacting specified …
A security update for rsyslog addresses CVE-2026-61548, a vulnerability causing stack buffer overflow in crafted messages, affecting openSUSE Leap 15.6 and SUS…
SUSE released a security update for openssl-1_0_0 addressing CVE-2026-28390, requiring installation across several affected products, including various version…
SUSE released a security update for openssl-3 addressing a DoS vulnerability affecting multiple SUSE Linux Enterprise products, with installation instructions …
A Storm-2945 campaign layers device code phishing onto hijacked hotel Wi-Fi to bypass MFA on Microsoft 365 accounts. Here's how it works and how to shut it off…
Fedora 43 has released nsd version 4.15.0, improving Prometheus metrics, adjusting logging noise, and addressing multiple bugs, enhancing the performance and s…
openSUSE has released a security update for warewulf4 addressing a vulnerability in openSUSE Leap 16.0, which includes updates to several related packages and …
openSUSE has released a security update for webkit2gtk3 addressing 23 vulnerabilities, including memory corruption and web content processing issues, affecting…
openSUSE Tumbleweed has released an update addressing a vulnerability in the warewulf4-4.7.0-4.1 package, enhancing security by mitigating identified risks.
CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a R…
CVE-2026-5674 chains a broken PulseAudio auth check, default module loading, and an unrestricted dlopen() into a full PipeWire sandbox escape from inside Flatp…
openSUSE released a security update for keybase-client addressing CVE-2026-39824, which involved a vulnerability related to ASCII-only Punycode-encoded labels.
Fedora 44 has updated Lemonldap-ng to version 2.23.2, addressing CVE-2026-12804, which involves an open redirect vulnerability, enhancing security for its web …
Fedora 43 has updated the rust-libgit2-sys package to version 0.18.7, addressing multiple security issues and linking to the system PCRE2 instead of the bundle…
