Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

OpenSSH — CVE-2026-123158

Vulnerability High

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

OpenSSH released version 10.6p2 on 5 November 2026 to close a password authentication bypass in sshd affecting Linux systems built on the musl C library with PAM disabled, such as…

LinuxOpenSSHAlpine Linux

GitLab — CVE-2026-97229

Vulnerability Critical

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

CISA has added CVE-2026-97229, a GitLab flaw rated CVSS 10.0, to its catalogue of exploited vulnerabilities. Alpine Linux reports an attempted attack on its own server, which rema…

GitLabRubyCI/CD

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Brotli Decoder Out-of-Bounds Write Vulnerability Fix

Brotli 1.2.1 update which is security fix for CVE-2026-111497

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Brotli 1.2.1 Resolves the Decoder Write Issue

Brotli 1.2.1 update which is security fix for CVE-2026-111497

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 mingw-freetype 2.14.3 Fixes a CID Font DoS Vulnerability

Backport fix for CVE-2026-95512.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 perl-DBI Update Fixes Crashes and Memory Issues

Changes for version 1.656 Remove lock file on end of scope Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann) Memory corruption via selectrow_array…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 mingw-gstreamer1 Update Addresses Media Flaws

Update to gstreamer-1.28.8.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Updates stargz-snapshotter 0.19.0 for Two CVEs

Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on https://github.com/containerd/starg…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

Fedora libinstpatch 1.1.8 Fixes SoundFont Denial-of-Service Vulnerability

Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Python Update Fixes SSLContext Use After Free Issues

An update that solves one vulnerability and has one security fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian Trixie php-mongodb Denial of Service Fixes and Updates

Multiple security vulnerabilities have been discovered in the MongoDB driver for PHP, which could result in denial of service. For the stable distribution (tri…

Linux PHP Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian OpenJDK 21 Update Addresses Multiple Java Runtime Risks

Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, sandbox bypass, incomplete certificate checks …

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian Trixie PowerDNS Fixes DNS Packet Denial-of-Service Vulnerability

It was discovered that incorrect parsing of packets with compression pointers in the PowerDNS DNS server could result in denial of service. For the stable dist…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed grok-build Update Resolves Three DoS Flaws

An update that solves 3 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Twisted Moderate Service Disruption Fix

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE AzCopy Update Addresses Remote Denial-of-Service Vulnerability

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

ImageMagick 7.1.2.33 Fixes 13 Issues on openSUSE Tumbleweed

An update that solves 13 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Xen Update Fixes Five Security Issues

An update that solves 5 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed M2Crypto Update Addresses CVE-2026-109087

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Corepack 24.21.0 Fixes CVE-2026-54272

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed psqlODBC Update Addresses Service Disruption

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Update - Matrix Synapse 1.163.0-1.1

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed libsoup 2.74.3 Fixes Two Remote Flaws

An update that solves 2 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 10 httpd Fixes DoS, Authentication and Code Execution Issues

Important: httpd security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 10 Grafana Update Fixes Disclosure and DoS Vulnerabilities

Important: grafana security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 10 Libreswan Fixes Security Flaws in IPsec Tunnels

Important: libreswan security update