Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update to 3.32.2
fixes CVE-2025-64505 and CVE-2026-33416
fixes CVE-2025-64505 and CVE-2026-33416
Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is pr…
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. This tool no…
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak …
x86/AMD: ineffectual Zenbleed workaround [XSA-515, CVE-2026-79608] x86: XPTI may break on huge-memory systems [XSA-516, CVE-2026-79609] grant-table: double ver…
Backport fixes for CVE-2026-19967, CVE-2026-19969
CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Typ…
Automatic update for ImageMagick-7.1.2.34-1.fc44. Changelog for ImageMagick * Thu Oct 15 2026 Luya Tshimbalanga - 1:7.1.2.34-1 - Update to version 7.1.2.34 - R…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
fixes CVE-2025-64505 and CVE-2026-33416
fixes CVE-2025-64505 and CVE-2026-33416
Windows tracks NLMTU per address family and Nebula only ever set it for AF_INET, so the IPv6 MTU on every Windows adapter sat at the adapter default of 65535 r…
