Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A security update for Mozilla Firefox addresses 32 vulnerabilities, enhancing protection for various SUSE Linux Enterprise products, critical for maintaining s…
Ubuntu 26.04 LTS users are advised to update their kernel due to multiple vulnerabilities affecting AMD processors, including potential privilege escalation an…
A bug fix for Mageia 10 addresses the loss of syntax highlighting when opening spec files with emacs, resolving the issue noted in a recent advisory.
openSUSE Tumbleweed has released an update for firefox-esr-140.13.0-1.1, addressing 32 security vulnerabilities to enhance system protection.
An update for openSUSE Tumbleweed addresses four security vulnerabilities in the apache-sshd-2.19.0-2.1 package, enhancing system protection against identified…
A vulnerability in libhttp-date-perl affects multiple Ubuntu versions, allowing specially crafted input to cause excessive resource usage and potential denial …
A timing discrepancy in PAM's pam_userdb module could expose sensitive information, affecting multiple Ubuntu releases. Users should update their systems and r…
A vulnerability in libXpm affects Ubuntu 22.04, 24.04, and 26.04 LTS, potentially leading to crashes. Users are advised to update to corrected package versions…
A critical security update for the mariadb-connector-c library on Rocky Linux 10 addresses an SQL injection vulnerability, enhancing protection for application…
Fedora 44 has released libssh version 0.12.1, addressing multiple security vulnerabilities and updates, enhancing SSH protocol implementation for developers wi…
A Linux server can be fully patched, hardened, and compliant, yet still leave investigators unable to explain how an attacker got in. Without reliable Linux lo…
Multiple vulnerabilities in WebKitGTK have been identified, leading to process crashes, memory corruption, and potential data leaks; users are urged to upgrade…
The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, f…
Ubuntu issued a security notice regarding a regression in libapache-mod-jk affecting version 16.04 LTS, reintroducing a fix for CVE-2023-41081 due to a previou…
The Fedora update notification details several nginx module rebuilds and a version update to fix critical vulnerabilities, including CVE-2026-42533, while prov…
The Fedora update announces a rebuild of various nginx modules, including nginx-mod-naxsi, and addresses security vulnerabilities, notably allowing arbitrary c…
Fedora has released an update for the Secure Reliable Transport (SRT) protocol tools, upgrading it to version 1.5.6 to enhance streaming performance over unpre…
Ubuntu has released updates for its Linux kernel to address multiple security vulnerabilities affecting Ubuntu 20.04 and 22.04 LTS, requiring users to reboot a…
Ubuntu 22.04 LTS has addressed multiple vulnerabilities in the Linux oracle-6.8 kernel affecting AMD processors, enhancing security and requiring users to upda…
Fedora 44 has released an update for LLVM 22.1.8 addressing buffer overflow issues, miscompilations affecting Rust applications, and other fixes, enhancing ove…
The Fedora update for nginx-mod-vts includes a rebuild for version 1.30.4, addressing specific CVEs, and other related nginx modules were also rebuilt for the …
Fedora 43 released an update for perl-DBI version 1.651, addressing multiple security vulnerabilities including CVE-2026-15043 and others, improving database A…
Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in or denial of service or potentially the execution of arbi…
Multiple vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in cross-site scripting, se…
