Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The 7.3.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.
This release rejects YAML files which decompress to much (CVE-2026-92823), rejects YAML documents with YAML tree deeper than 64 (CVE-2026-92822), fixes iterati…
5.02 bump - Fix CVE-2026-120631 (CGI::Cookie->parse backtracking DoS via cookie expires regex) - Fix CVE-2026-120632 (cubic regex backtracking via crafted mult…
Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow …
Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations fo…
Bugfix Python release 3.15.2 https://www.python.org/downloads/release/python-3152/
Bugfix Python release 3.15.2 https://www.python.org/downloads/release/python-3152/
USN-8890-1 introduced a regression in libsoup
libheif could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in OpenJDK 17.
Several security issues were fixed in OpenJDK 21.
Several security issues were fixed in OpenJDK 11.
Several security issues were fixed in OpenJDK 8.
Several security issues were fixed in OpenJDK 27.
Several security issues were fixed in OpenJDK 25.
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of access restrictions, information disclosure, XML external…
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access…
BeakSec discovered that Telegram Desktop, a fast and secure messaging application, contains an IPC record-separator injection vulnerability. It allows a remote…
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, which could result in local privilege escalation, by…
Spreadsheet::XLSX 0.20 Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata. Security: val…
Backport fix for CVE-2025-12385.
Backport fixes for CVE-2026-101021 and CVE-2026-107157.
Backport fix for CVE-2026-113679.
Backport fix for CVE-2026-115504.
