Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Automatic update for cockpit-machines-357-1.fc44. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
LiteLLM has patched a privilege-escalation flaw that can let an authenticated internal user forge an administrative session and reach command-execution feature…
Apache detailed two Apache APISIX vulnerabilities in notices issued on October 1, 2026.
An update that fixes 108 vulnerabilities is now available.
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
New libpng packages are available for Slackware 15.0 and -current to fix a security issue.
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browse…
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service, information disclosure or po…
A Linux security review can find a check, a lock, or a safe-looking range and still miss the failure.
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT…
An update that solves two vulnerabilities and contains one feature can now be installed.
An update that solves two vulnerabilities and contains one feature can now be installed.
Two Linux fixes show how extended Berkeley Packet Filter (eBPF) security can fail when mutable map data crosses into the exec path, where Linux starts a progra…
New pcre2 packages are available for Slackware 15.0 and -current to fix a security issue.
New groff packages are available for Slackware 15.0 and -current to fix security issues.
RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy ha…
An update that solves 19 vulnerabilities, contains one feature and has one fix can now be installed.
Update translations from weblate spec: Symlink microdnf(8) and yum(8) manual pages to dnf5(8) Update FSF's address in GPL-2.0 disclaimers Update LGPL-2.1 and G…
Several vulnerabilities were discovered in the Exim mail transport agent, which could result in SMTP smuggling, information disclosure, denial of service or th…
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in a bypass of security/authorisation res…
Several vulnerabilities have been fixed in lemonldap-ng, a Web-SSO system. CVE-2026-95811 Access rules (locationRules) were tested against the raw request URI …
