Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

OpenSSH — CVE-2026-123158

Vulnerability High

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

OpenSSH released version 10.6p2 on 5 November 2026 to close a password authentication bypass in sshd affecting Linux systems built on the musl C library with PAM disabled, such as…

LinuxOpenSSHAlpine Linux

GitLab — CVE-2026-97229

Vulnerability Critical

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

CISA has added CVE-2026-97229, a GitLab flaw rated CVSS 10.0, to its catalogue of exploited vulnerabilities. Alpine Linux reports an attempted attack on its own server, which rema…

GitLabRubyCI/CD

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Assimp Fixes Two Buffer Overflow Vulnerabilities

Backport fixes for CVE-2026-19967, CVE-2026-19969

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Ghostscript Update Fixes Memory Errors and Sandbox Bypass

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Typ…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 libpng12 Fixes Heap Overflow and Use After Free

fixes CVE-2025-64505 and CVE-2026-33416

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 libpng15 Fixes Heap Overflow and Use After Free

fixes CVE-2025-64505 and CVE-2026-33416

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 gopass Update Addresses SSH Key Attack Vulnerability

Update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 perl-GD-SecurityImage Replaces Predictable rand

Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is pr…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Enterprise 15 SP5 Kernel Live Patch 34 Fixes Four Issues

An update that solves four vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Micro 6.2 p11-kit Update Fixes RPC Parsing Issues

An update that solves two vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Micro 6.2 Fixes 81 NVIDIA Driver Security Flaws

An update that solves 81 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 10 librabbitmq Update Fixes Heap Overflow, CVE-2026-44236

Important: librabbitmq security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 10 Xwayland Fixes Code Execution and Escalation

Important: xorg-x11-server-Xwayland security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 10 Emacs Update Fixes Image and TRAMP Exploits

Important: emacs security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 10 Wireshark Update Fixes DoS and Buffer Overflows

Important: wireshark security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 webkit2gtk3 Fixes Critical ANGLE Code Execution

Critical: webkit2gtk3 security, bug fix, and enhancement update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 xorg-x11-server Update Blocks Code Execution Risks

Important: xorg-x11-server security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 Xwayland Fixes Code Execution and Escalation

Important: xorg-x11-server-Xwayland security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 cockpit-files Fixes Symlink Ownership Flaws

Moderate: cockpit-files security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 PostgreSQL 18 Fixes pgvector Code Execution

Important: postgresql:18 security update

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux PostgreSQL Update Fixes pgvector Index Build Code Execution

Important: postgresql:16 security update

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 Emacs Fixes the Flymake Code Execution Issue

Important: emacs security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Hashcat Important Fixes for Three Security Flaws

An update that solves 3 vulnerabilities and has 4 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE python-joserfc Fixes Critical JWS Signature Bypass

An update that solves one vulnerability and has one bug fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

CoreDNS Update Stops HTTP/2 Heap Exhaustion on openSUSE Leap 16.0

An update that solves one vulnerability and has one bug fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 16.0 gh Update Fixes File Write and HTTP/2 Risks

An update that solves 8 vulnerabilities and has 8 bug fixes can now be installed.