The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Linux runs cloud platforms, containerized applications, and business-critical servers. It is the engine that powers much of today’s business infrastructure. St…
Oracle Linux released an update for nodejs-nodemon version 3.1.14 addressing CVE-2026-13149, available for x86_64 and aarch64 architectures via the Unbreakable…
OpenStack disclosed a flaw in its bare-metal management tool, the Ironic Python Agent (IPA), showing that it could accidentally fall back to local network disc…
Oracle Linux has released updated RPMs for version 10 addressing CVE-2026-13757, specifically re-basing to version 0.26.4 across various package subsets for x8…
An update for python313-certifi in openSUSE Tumbleweed addresses two vulnerabilities, including CVE-2022-23491 and CVE-2024-39689, with varying severity rating…
Fedora 44 has released BorgBackup 1.4.5, a deduplicating backup tool with compression and authenticated encryption, addressing a bugfix for CVE-2026-62268.
Debian LTS announced the fix of two integer overflow issues in the kissfft library for Debian 11 bullseye, recommending an upgrade to version 131.1.0-1+deb11u1.
The Fedora 43 update for GitPython version 3.1.55 addresses multiple vulnerabilities and optimizes object handling for large datasets in this Python library fo…
An update for openSUSE Tumbleweed addresses seven vulnerabilities in dnsdist-2.0.7-1.1, including multiple CVEs with varying levels of severity and impact.
Multiple vulnerabilities were discovered in the starlette ASGI framework, necessitating an upgrade to version 0.26.1-1+deb12u2 to address issues related to met…
Oracle Linux has released updated Java 25 RPM packages for version 10, addressing several CVEs and including various updates and changes to dependencies and do…
Oracle Linux 9 has received updates for Node.js addressing multiple CVEs, including fixes for vulnerabilities in npm's bundled packages, along with new version…
Oracle Linux has released kernel updates for version 10 addressing several CVEs, introducing new certificates, disabling signing for aarch64, and implementing …
Oracle Linux 10 has released updated OpenSSL packages to address multiple vulnerabilities, including several CVEs, and includes changes like improved header re…
Oracle Linux 7 has released GIMP updates to fix multiple CVEs, including vulnerabilities in image parsing, by updating relevant RPM packages on the Unbreakable…
Fedora 43 has released a new version of the libnbd client library, 1.24.3, addressing a command injection vulnerability and enhancing performance and usability…
Debian announced multiple vulnerabilities in the Linux kernel, which could cause privilege escalation, denial of service, or information leaks, resolved in ver…
Linux administrators automate almost everything. Backups run on a schedule, logs rotate on their own, updates ship through pipelines, and health checks happen …
openSUSE Tumbleweed has released an update to helm-4.2.3-4.1, addressing a moderate vulnerability (CVE-2026-63308) that can now be installed.
Multiple vulnerabilities in ruby-rack can lead to denial of service, information disclosure, and potential request smuggling, with fixes available in updated v…
openSUSE Tumbleweed has released an update for ffmpeg-7-7.1.5-1.1, addressing a vulnerability (CVE-2026-8461) with a moderate severity rating and a CVSS score …
An update for nginx-mod-vts and related modules is available, addressing vulnerabilities and rebuilding for nginx version 1.30.4. Users can install it using th…
Fedora 43 has released an update for the nginx-mod-fancyindex module, enhancing file listings with customization options, and fixing multiple CVEs along with v…
The Fedora update for nginx-mod-brotli version 1.0.0~rc-13 includes a rebuild for nginx version 1.30.4, addressing various CVEs and improving Brotli compressio…