Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The alarming discovery of a backdoor in the xz data compression library , which had the potential to compromise Linux systems, has dominated recent security ne…
CVE-2024-28085 Skyler Ferrante discovered that the wall(1) utility found in util-linux, a collection of system utilities for Linux, does not
The recent security issue with xz-utils has delayed the latest Ubuntu beta release and other major Linux distros. The delay follows the discovery of a critical…
The German state, Schleswig-Holstein, has decided to move away from proprietary software, such as Windows and Office, to open-source alternatives , including L…
It was discovered that Cockpit, a web console for Linux servers, was susceptible to arbitrary command execution if an administrative user was tricked into open…
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1498
Upstream details at : https://access.redhat.com/errata/RHSA-2024:1486
Ransomware targeting Linux systems is a growing threat, particularly in IoT ecosystems. Cybersecurity analysts are presenting live forensic techniques to detec…
The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating …
* bsc#1218946 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.3
Fedora 40 beta , the newest version of the Fedora operating system, is an efficient and lightning-fast release with various new and useful features. Compared t…
Multiple vulnerabilities were found in libvirt, a C toolkit to interact with the virtualization capabilities of Linux, which could lead to denial of service or…
Skyler Ferrante discovered that the wall tool from util-linux does not properly handle escape sequences from command line arguments. A local attacker can take …
In the world of open-source software , security vulnerabilities can have widespread consequences. The recent publication of a Linux privilege-escalation proof-…
A Linux version of the multi-platform backdoor malware called DinodasRAT has been spotted in cyberattacks across several countries. The malware, also known as …
Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745 base64 now packaged in Fedora
A backdoor in the widely used xz compression utility has been discovered, posing a severe threat to Linux users. The issue is tracked as CVE-2024-3094 and has …
A critical vulnerability has been found in the wall command of the util-linux package that poses a severe security threat to Linux systems. This vulnerability,…
New util-linux packages are available for Slackware 15.0 and -current to fix a security issue.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
A Linux version of a multi-platform backdoor called DinodasRAT has been detected in the wild targeting China, Taiwan, Turkey, and Uzbekistan, new findings from…
util-linux could be made to expose sensitive information.
The Southern California Linux Expo (SCALE) 21x is a massive community-run open-source and free software conference. This year's event showcased various worksho…
