Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fedora has released an update for ImageMagick, fixing several vulnerabilities and improving its image display and manipulation capabilities, with instructions …
Oracle Linux released an update for nodejs-nodemon version 3.1.14 addressing CVE-2026-13149, available for x86_64 and aarch64 architectures via the Unbreakable…
OpenStack disclosed a flaw in its bare-metal management tool, the Ironic Python Agent (IPA), showing that it could accidentally fall back to local network disc…
Oracle Linux has released updated RPMs for version 10 addressing CVE-2026-13757, specifically re-basing to version 0.26.4 across various package subsets for x8…
An update for python313-certifi in openSUSE Tumbleweed addresses two vulnerabilities, including CVE-2022-23491 and CVE-2024-39689, with varying severity rating…
Fedora 44 has released BorgBackup 1.4.5, a deduplicating backup tool with compression and authenticated encryption, addressing a bugfix for CVE-2026-62268.
Debian LTS announced the fix of two integer overflow issues in the kissfft library for Debian 11 bullseye, recommending an upgrade to version 131.1.0-1+deb11u1.
The Fedora 43 update for GitPython version 3.1.55 addresses multiple vulnerabilities and optimizes object handling for large datasets in this Python library fo…
An update for openSUSE Tumbleweed addresses seven vulnerabilities in dnsdist-2.0.7-1.1, including multiple CVEs with varying levels of severity and impact.
Multiple vulnerabilities were discovered in the starlette ASGI framework, necessitating an upgrade to version 0.26.1-1+deb12u2 to address issues related to met…
Oracle Linux 9 has received updates for Node.js addressing multiple CVEs, including fixes for vulnerabilities in npm's bundled packages, along with new version…
Oracle Linux 10 has released updated OpenSSL packages to address multiple vulnerabilities, including several CVEs, and includes changes like improved header re…
Oracle Linux 7 has released GIMP updates to fix multiple CVEs, including vulnerabilities in image parsing, by updating relevant RPM packages on the Unbreakable…
Fedora 43 has released a new version of the libnbd client library, 1.24.3, addressing a command injection vulnerability and enhancing performance and usability…
Debian announced multiple vulnerabilities in the Linux kernel, which could cause privilege escalation, denial of service, or information leaks, resolved in ver…
openSUSE Tumbleweed has released an update to helm-4.2.3-4.1, addressing a moderate vulnerability (CVE-2026-63308) that can now be installed.
Multiple vulnerabilities in ruby-rack can lead to denial of service, information disclosure, and potential request smuggling, with fixes available in updated v…
openSUSE Tumbleweed has released an update for ffmpeg-7-7.1.5-1.1, addressing a vulnerability (CVE-2026-8461) with a moderate severity rating and a CVSS score …
An update for nginx-mod-vts and related modules is available, addressing vulnerabilities and rebuilding for nginx version 1.30.4. Users can install it using th…
SUSE Linux Enterprise has released Live Patch 15 for SP7 addressing two critical vulnerabilities in the kernel, providing installation instructions and package…
Fedora has released an update for btrbk, version 0.32.7, which fixes CVE-2026-62943, enhancing its capabilities for creating btrfs sub-volume backups with flex…
An update for openSUSE Tumbleweed addresses two vulnerabilities in the valkey package, rated moderate, with CVSS scores of 7.5 and 8.8.
The Debian LTS Advisory DLA-4703-1 reports multiple vulnerabilities in OpenJDK that may cause denial of service and information disclosure, urging users to upg…
Oracle released updates for MariaDB Connector C on Oracle Linux 10 to address CVE-2026-44172, along with various related package versions for x86_64 and aarch6…
