Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
SUSE announces a critical security update for libXfont2, addressing two vulnerabilities that could lead to heap buffer overflow and out-of-bounds read/write is…
SUSE has released a critical security update for libXfont2, addressing two vulnerabilities that could lead to heap buffer overflows and out-of-bounds reads/wri…
The openSUSE update for vifm addresses a significant vulnerability, enhances documentation, fixes numerous issues, and introduces improvements for better user …
openSUSE has released a security update for python-nltk addressing three important vulnerabilities, including regex denial of service and path traversal issues…
Oracle Linux 7 has received kernel updates addressing multiple security vulnerabilities, including fixes for KVM-related issues and XFS data handling, along wi…
Oracle Linux 8 has received an important security update with new RPMs addressing multiple CVEs, improving kernel capabilities, and updating signing keys for e…
Oracle Linux 8 security advisory ELSA-2026-500121 includes new kernel updates addressing critical vulnerabilities and various bug fixes related to network issu…
Oracle released updated RPMs for Oracle Linux 9, addressing CVE-2026-59939 by upgrading httplib2 and fixing a timeout issue with fence_openstack for managing n…
Oracle Linux 9 has updated packages for libgcrypt to address CVE-2026-41989, which fixes a denial of service and buffer overflow issue through crafted ECDH cip…
Oracle Linux released updated RPM packages for version 9, including libraries and development tools for sg3_utils, addressing CVE-2026-16313 with improved SCSI…
Oracle Linux has issued an advisory with updated RPMs for version 9, addressing CVE-2026-10846 related to DNS response spoofing by validating address, port, TX…
Oracle Linux released security updates for version 9, including p11-kit packages, addressing significant vulnerabilities, particularly CVE-2026-13757, improvin…
Oracle released updates for Oracle Linux 9 addressing CVE-2026-37460, improving packet parsing and resolving related issues, with specific RPMs available for x…
Oracle Linux has released security updates for sg3_utils package versions, addressing CVE-2026-16313, with new RPMs available for x86_64 and aarch64 architectu…
Oracle Linux 10 updates include RPM packages addressing CVE-2026-10846, fixing vulnerabilities related to off-path poisoning attacks. The update is available f…
Oracle Linux has released security updates for nodejs24, addressing vulnerabilities CVE-2026-13149, CVE-2026-59873, and CVE-2026-59874, available for x86_64 an…
Debian LTS released an advisory for p7zip, addressing multiple vulnerabilities including a heap overflow and an issue with RAR5 handling, recommending users up…
Debian released an advisory regarding two vulnerabilities in 7-Zip that could lead to remote code execution and content spoofing, urging users to upgrade to th…
Debian released an advisory regarding vulnerabilities in the Linux kernel that could lead to privilege escalation, denial of service, or information leaks, urg…
openSUSE has released a security update for python-httplib2 addressing a vulnerability (CVE-2026-59939) allowing malicious HTTP servers to cause MemoryError in…
openSUSE released a security update for rrdtool, addressing CVE-2026-43958, a critical stack buffer overflow vulnerability that could allow local privilege esc…
openSUSE has released an important security update for nginx addressing CVE-2026-42533, which involves a vulnerability related to map directive and regex match…
A security update for google-osconfig-agent addresses CVE-2026-56852, fixing an improper handling of invalid UTF-8 bytes that could cause an infinite loop in a…
A security update for google-guest-agent has been released to address CVE-2026-56852, which involves improper handling of invalid UTF-8 leading to infinite loo…
