Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A critical update for .NET 9.0 on Rocky Linux 8 addresses multiple security vulnerabilities and includes bug fixes, with new versions available for SDK and run…
The Fedora update notification details several nginx module rebuilds and a version update to fix critical vulnerabilities, including CVE-2026-42533, while prov…
Ubuntu Security Notice USN-8596-1 details several security vulnerabilities in the Linux kernel affecting Ubuntu 22.04 and 24.04, requiring immediate system upd…
Fedora 43 has released kernel version 7.1.4-104, addressing security issues and containing updates. Users can upgrade using the dnf command line tool.
An update for collectl, a Linux performance data utility, addresses insecure code handling and upgrades to version 4.3.20.3, available for installation via the…
Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, ven…
Multiple vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in cross-site scripting, se…
An update that solves eight vulnerabilities, contains two features and has three security fixes can now be installed.
An update that solves 44 vulnerabilities, contains two features and has five security fixes can now be installed.
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
New libssh packages are available for Slackware 15.0 and -current to fix security issues.
An update that fixes 8 vulnerabilities is now available.
It was discovered that there was a potential buffer overflow in xz-utils, a popular data-compression utility and library. CVE-2026-34743 If the lzma_index_deco…
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) …
An update that solves nine vulnerabilities and contains one feature can now be installed.
A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no explo…
Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.
Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.
Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.
Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.
Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archi…
Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were pub…
An update that fixes 7 vulnerabilities is now available.
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted H…
