Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Moderate: xz security update
osbuild-composer security update
A newly confirmed Kestra vulnerability is being exploited in the wild. CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities catalog on Sep 2, 2026,…
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
A security update for Erlang has been released, addressing 19 vulnerabilities, including issues related to DNS cache poisoning, certificate forgery, and Denial…
A vulnerability in SPIP could allow unauthenticated remote code execution; an update has been released for the stable distribution, and users are advised to up…
The security release of php-pear-PHP-CodeSniffer version 4.0.4 addresses vulnerabilities and improves error messages, tokenizer support for PHP 8.5, and overal…
A security update for the erlang-cowboy package addresses various vulnerabilities in cowlib and cowboy, including denial of service risks, with significant cha…
A command injection vulnerability in the Info-ZIP zip program was discovered, prompting the recommendation to upgrade zip packages in the stable distribution.
A security update for helm addresses three vulnerabilities, including privilege escalation and credential exfiltration issues, with a critical CVSS score of 9.…
A security update for BIND has been released, addressing six vulnerabilities that could lead to issues such as cache poisoning, memory misuse, and DNSSEC valid…
Multiple vulnerabilities in the Caddy web server can lead to unauthorized access and other security issues; users are urged to upgrade to version 2.6.2-12+deb1…
The update for python-webob to version 1.8.11 addresses CVE-2024-42353, enhancing WSGI request/response handling. Users can upgrade via the DNF package managem…
Multiple vulnerabilities in the Icinga 2 monitoring system could lead to denial of service, information disclosure, privilege escalation, or the compromise of …
A vulnerability in PowerDNS Recursor can cause denial of service due to increased resource usage when handling malicious DNS packets; an upgrade is recommended…
A security update for ffmpeg-4 addresses seven vulnerabilities, including issues leading to denial of service, code execution, and memory corruption in various…
A local privilege escalation vulnerability in udisks2 (CVE-2026-7867) allows unprivileged users to influence mount execution paths, necessitating an upgrade to…
A security update for rsyslog addresses vulnerability CVE-2026-61548, which may lead to stack buffer overflow, and a crash due to a configuration issue in the …
Multiple vulnerabilities were discovered in the starlette ASGI framework, necessitating an upgrade to version 0.26.1-1+deb12u2 to address issues related to met…
An update for nginx-mod-vts and related modules is available, addressing vulnerabilities and rebuilding for nginx version 1.30.4. Users can install it using th…
A security update for java-17-openjdk resolves nine vulnerabilities, enhancing security by addressing potential information disclosure, unauthorized data acces…
A security update for python-urllib3 addresses CVE-2026-9375, a vulnerability that can cause a denial of service due to a decompression bomb bypass in the stre…
A security update for java-11-openjdk has been released addressing 11 vulnerabilities and includes an upgrade to upstream version jdk-11.0.32+9, improving the …
Multiple vulnerabilities in WebKitGTK have been identified, leading to process crashes, memory corruption, and potential data leaks; users are urged to upgrade…
