Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Plasma Workspace could allow unintended access to user sessions.
Several security issues were fixed in Erlang.
Several security issues were fixed in Atril.
Several security issues were fixed in catdoc.
pdfminer could be made to run programs as your login if it opened a specially crafted file.
Booth could allow unintended access to network services.
Several security issues were fixed in FreeIPMI.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities can now be installed.
Updated to 1.52.6 Includes fixes for CVE-2026-75131 & CVE-2026-93337
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
Updated to 1.52.6 Includes fixes for CVE-2026-75131 & CVE-2026-93337
Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high sever…
Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high sever…
Two vulnerabilities were discovered in Swift, OpenStack's object storage service, that could lead to information disclosure. CVE-2026-71191 / OSSA-2026-030 An …
Multiple vulnerabilities were discovered in Glance, OpenStack's image storage service. CVE-2026-71196, CVE-2026-71197 and CVE-2026-71198 / OSSA-2026-038 Three …
Dancer2::Serializer::YAML::deserialize handed request bodies straight to YAML::Load. A body tagged !!perl/hash:Some::Class therefore instantiated an arbitrary …
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. In this packa…
Fix CVE-2026-91837
