Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

OpenSSH — CVE-2026-123158

Vulnerability High

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

OpenSSH released version 10.6p2 on 5 November 2026 to close a password authentication bypass in sshd affecting Linux systems built on the musl C library with PAM disabled, such as…

LinuxOpenSSHAlpine Linux

GitLab — CVE-2026-97229

Vulnerability Critical

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

CISA has added CVE-2026-97229, a GitLab flaw rated CVSS 10.0, to its catalogue of exploited vulnerabilities. Alpine Linux reports an attempted attack on its own server, which rema…

GitLabRubyCI/CD

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed ImageMagick Moderate Security Fix 2026-11310-1

An update that solves 14 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

An update that solves two vulnerabilities and has one security fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

An update that solves nine vulnerabilities and contains one feature can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix, which might result in bypass of access checks, overwr…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e

Backport fixes for CVE-2026-59197 and CVE-2026-54058. Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 OpenSSH Significant Update for Remote File Misplacement Issue

CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the loca…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 LibTIFF Critical Security Update for Arbitrary Code Execution

updated to 4.7.2, fixes security issues

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 c-ares Critical Use-After-Free Bug Fix FEDORA-2026-d70d93fcd7

1.34.7 accidentally broke the API compatibility, this is fixed in 1.34.8. update to 1.34.7 fixes CVE-2026-33630 (GHSA-6wfj-rwm7-3542) and GHSA-pjmc-gx33-gc76 a…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Dnsx Critical Update Denial of Service CVE-2026-33817

Update to 1.3.0

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Wget1 Significant Resolution for Various CVEs 2026-1b91a2f126

Fix for CVE-2026-15146, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Wireshark Critical DoS Issues Advisory 2026-bc152c9ff6

Latest wireshark version includes fixes for the following CVEs: CVE-2026-15163 CVE-2026-15164 CVE-2026-15165 CVE-2026-15166

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 gpsd Command Injection Vulnerability Resolution 2026-36e3aa0593

Security fix for CVE-2026-58459

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 mingw-python-pip Important Path Traversal Risk CVE-2026-8643

Update to pip-26.1.2.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Python311 Important Memory Error Command Injection Fix 2026-3132-1

An update that solves four vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE gstreamer-plugins-bad Important Buffer Overflow Risk 2026-3133-1

An update that solves seven vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 389-ds Important Heap Overflow DoS Issues Vuln 2026-3136-1

An update that solves 14 vulnerabilities and has one security fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 389-ds Important Heap Overflow DoS Fix 2026-3137-1

An update that solves 14 vulnerabilities and has one security fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 8573-1 Libde265 Critical Denial of Service Vulnerabilities

Several security issues were fixed in libde265.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Libreswan 5.3.2 Critical Update CVE-2026-14957

Update to 5.3.2 for CVE-2026-14957 (with newsources)

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 FreeType Important Denial of Service CVE-2026-50811

FreeType could be made to crash if it opened a specially crafted file.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 FreeRDP Important Code Execution Vulnern 8561-1

Several security issues were fixed in FreeRDP.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 PHP Significant Denial of Service Flaws USN-8564-1

Several security issues were fixed in PHP.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE shibboleth-sp Important SQL Injection Vulnerability CVE-2025-9943

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE gstreamer-plugins-bad Important Buffer Overflow Issues 2026-3125-1

An update that solves seven vulnerabilities can now be installed.