Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
A vulnerability has been discovered in Ruby, possibly allowing remote code execution.
Several vulnerabilities were discovered in SPIP, a website engine for publishing, which could result in unauthenticated remote code execution. For the stable d…
Update to version 2026-07-14c (security hotfix update) - see https://github.com/dokuwiki/dokuwiki/issues/4752
Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining wh…
Fixes lots of CVEs: see the fixes section for details
Update to Net-DNS 1.56 (from 1.53). Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - Denial of Service via long …
Update to Net-DNS 1.56 (from 1.53). Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - Denial of Service via long …
The Linux security news from August 27 through September 3 brought serious fixes for remote access software, PostgreSQL, sandboxing tools, local system service…
Rocky Linux 9 has released an important security update for python-urwid addressing a vulnerability that could lead to remote code execution and information di…
A security update for gstreamer1-plugins-good on Rocky Linux 9 addresses multiple vulnerabilities, including remote code execution risks from buffer overflows …
A security update for gstreamer1-plugins-good in Rocky Linux 10 addresses critical vulnerabilities, including remote code execution risks via heap-based buffer…
A significant security update for python-urwid on Rocky Linux 8 addresses a vulnerability that could lead to remote code execution and information disclosure, …
Debian has addressed two vulnerabilities in libnet-dns-perl that pose risks of denial of service and remote code execution, advising users to upgrade to versio…
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
A security update for rootlesskit has been released for multiple SUSE Linux Enterprise products, addressing vulnerabilities by rebuilding it against the latest…
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun.…
Oracle Linux 10 updates include versions of ansible-core and ansible-test that address CVE-2026-11332, which involved potential arbitrary git configuration inj…
Fedora has released WordPress version 6.9.7, addressing multiple security vulnerabilities, including remote code execution and stored cross-site scripting issu…
Gentoo Linux has issued a high-severity security advisory regarding multiple vulnerabilities in libssh2, which could lead to remote code execution; affected us…
