The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A critical security update for Dovecot on Rocky Linux 8 addresses a Denial of Service vulnerability (CVE-2026-42006), impacting the server's operation and requ…
openSUSE released an important security update for jline3, addressing two vulnerabilities related to unauthenticated remote memory exhaustion and DoS attacks, …
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted H…
Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
Release notes for xrdp v0.10.6.1 (2026/07/06) General announcements This release fixes 10 vulnerabilities and 1 regression introduced by a vulnerability fix in…
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege …
Most of us don't hear about a kernel vulnerability until a CVE lands in our inbox or the vulnerability scanner starts complaining. By then, the patch isn't new…
If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability—CVE-2026-20896—sh…
This update addresses a few security issues, one of which could plausibly result in remote code execution.
rLottie is a platform independent C++ library for rendering vector-based animations and art. Its format is used by Telegram Desktop, fast and secure messaging …
Adobe frames the fast exploitation of its ColdFusion vulnerabilities as an attacker speed problem. The real issue is a connector that never should have trusted…
Fedora 43 has released an update for python-jupyter-server version 2.20.0, addressing a high-severity CVE related to remote code execution vulnerabilities.
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Moderate: autotrace security update
Multiple vulnerabilities were discoverd in Nginx, a high-performance web and reverse proxy server, which could result in remote code execution, denial of servi…