Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in att…
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary code.…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape,…
LightLLM, software used to serve AI models, can expose Linux AI servers to remote code execution when operators enable its profiling mode, a tool for measuring…
Andres Berbescu discovered two vulnerabilities in the L2TP connection plugin for Network Manager which allowed a local user with permissions to create/activate…
Multiple vulnerabilities have been found in expat. CVE-2024-28757 A crafted XML document could trigger an entity expansion attack (billion laughs attack) when …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape,…
An issue has been found in pgextwlist, a Postgres extensions that implements extension whitelisting. The issue is related to substituting extension schemas or …
Multiple vulnerabilities were discovered in Django, the Python-based web development framework: CVE-2026-48587 Potential exposure of private data via whitespac…
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service, information disclosure or po…
Booth could allow unintended access to network services.
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, which could result in local privilege escalation, by…
Multiple security issues were discovered in libheif, an ISO/IEC 23008-12 HEIF and AVIF image file format decoder and encoder, which may result in denial of ser…
Update librsvg to version 2.63.2. This includes a fix for a potential use-after-free bug (assigned RUSTSEC-2026-0305, also assigned CVE-2026-96889 - see upstre…
Update librsvg to version 2.63.2. This includes a fix for a potential use-after-free bug (assigned RUSTSEC-2026-0305, also assigned CVE-2026-96889 - see upstre…
Update librsvg to version 2.63.2. This includes a fix for a potential use-after-free bug (assigned RUSTSEC-2026-0305, also assigned CVE-2026-96889 - see upstre…
An issue has been found in evolution-data-server, an evolution database backend server. A Flatpak application with D-Bus access to the addressbook service can …
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execut…
Linux is not a standard environment. An enterprise can run many different flavors of Linux on its servers, desktops and specialized systems, each with its own …
The update for jq released as DSA-6416-1 introduced a regression in the loading of modules. The fix for CVE-2026-44777 registered each library before its own d…
Update to the latest U-Boot 2026.10 RC4 fixes Display fixes from sleep for some generations of Raspberry Pi
It was discovered that there were two vulnerabilities in the Redis key/value database. CVE-2026-81934 CVE-2026-81934: Prevent a use-after-free vulnerability in…
Kubernetes released fixes on Sep 23, 2026 for a control-plane flaw that could create a pod outside the namespace where a user's permissions applied. CVE-2026-2…
