Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow …
This release rejects YAML files which decompress to much (CVE-2026-92823), rejects YAML documents with YAML tree deeper than 64 (CVE-2026-92822), fixes iterati…
Security Fixes: CVE-2026-94300 Fix remote termination of named under concurrent GSS-TSIG traffic (rhbz#2558420) CVE-2026-97313 Fix a bug when resuming from a q…
5.02 bump - Fix CVE-2026-120631 (CGI::Cookie->parse backtracking DoS via cookie expires regex) - Fix CVE-2026-120632 (cubic regex backtracking via crafted mult…
Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow …
An update that solves five vulnerabilities can now be installed.
An update that solves four vulnerabilities can now be installed.
Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and python- pysequ…
Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and python- pysequ…
This release rejects YAML files which decompress to much (CVE-2026-92823), rejects YAML documents with YAML tree deeper than 64 (CVE-2026-92822), fixes iterati…
5.02 bump - Fix CVE-2026-120631 (CGI::Cookie->parse backtracking DoS via cookie expires regex) - Fix CVE-2026-120632 (cubic regex backtracking via crafted mult…
Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow …
Several security issues were fixed in OpenJDK 21.
Several security issues were fixed in OpenJDK 8.
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of access restrictions, information disclosure, XML external…
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access…
BeakSec discovered that Telegram Desktop, a fast and secure messaging application, contains an IPC record-separator injection vulnerability. It allows a remote…
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, which could result in local privilege escalation, by…
Backport fix for CVE-2025-12385.
Backport fixes for CVE-2026-101021 and CVE-2026-107157.
Backport fix for CVE-2026-113679.
Backport fix for CVE-2026-115504.
Backport fix for CVE-2206-111497.
Backport fix for CVE-2026-49919.
