Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

OpenSSH — CVE-2026-123158

Vulnerability High

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

OpenSSH released version 10.6p2 on 5 November 2026 to close a password authentication bypass in sshd affecting Linux systems built on the musl C library with PAM disabled, such as…

LinuxOpenSSHAlpine Linux

GitLab — CVE-2026-97229

Vulnerability Critical

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

CISA has added CVE-2026-97229, a GitLab flaw rated CVSS 10.0, to its catalogue of exploited vulnerabilities. Alpine Linux reports an attempted attack on its own server, which rema…

GitLabRubyCI/CD

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Fedora rust-redlib Rebuild Adds Protection Against eMudhra CA Trust

Rebuilt with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which shou…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora AGS Update Fixes FreeType Denial-of-Service Vulnerability

Latest upstream bugfix release from 3.6.2 branch. Changes: https://github.com/adventuregamestudio/ags/releases/tag/v3.6.2.22 . Also fixes CVE-2026-95512 in bun…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Fedora 45 rust-qemu-rdp Update Adds eMudhra Certificate Protection

Rebuilt with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which shou…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 45 Qt6 Windows Component Fixes Address QBinaryJson DoS

Backport fix for CVE-2026-101201.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Fedora 45 Rebuild Updates rust-app-store-connect Rust Dependencies

Rebuilt with the latest Rust dependencies, addressing at least RUSTSEC-2026-0190.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Fedora 45 Fractal 14.3 Update Fixes Certificate Validation Bypass

14.3 14.2

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Fedora 45 Updates Selenium Manager and Rust TLS Libraries

Rebuilt with latest rustls/rustls-webpki rustls 0.23.46 addresses RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349 rustls-webpki …

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 45 Python 3.9 Fixes HTML Parser Denial-of-Service Vulnerability

Security fix for CVE-2026-11940 Security fix for CVE-2026-15308

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 45 QtWebKit Receives a Fix for Its Brotli Decoder

Backport fix for CVE-2026-111497.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Backports SLE-15-SP7 cadvisor Fixes Integer Overflow

An update that fixes one vulnerability is now available.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu PCRE2 Fixes Code Execution and Denial-of-Service Vulnerabilities

Several security issues were fixed in PCRE2.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu Rack Update Fixes Parsing and Data Exposure Issues

Several security issues were fixed in Rack.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu Yaws Fixes XML Injection and Remote Command Execution

Several security issues were fixed in Yaws.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu SOGo Update Blocks Remote Account Takeover Vulnerabilities

SOGo could allow unintended access to user accounts.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu libvips Fixes Image Parsing and Integer Overflow Issues

Several security issues were fixed in libvips.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu 16.04 jabberd2 Fixes for the SASL Authentication Bypass

jabberd2 could allow unintended access to network services.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu Shapelib Fixes Double-Free and Denial-of-Service Risks

Shapelib could be made to crash or run programs as your login if it opened a specially crafted file.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu Sprockets Update Blocks Unauthorized Remote File Access

Sprockets would allow unintended access to files over the network.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu rxvt-unicode Fixes Crafted Terminal Input Code Execution

rxvt-unicode could be made to run programs as your login if it received specially crafted input.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu 22.04 LTS Relax-and-Recover Blocks Local Data Exposure

Relax-and-Recover could be made to expose sensitive information.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu Net--EasyTCP Update Addresses Predictable Encryption Keys

Net::EasyTCP could be made to expose sensitive information over the network.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 16.04 Swift Mailer Update Blocks Remote Code Execution

Swift Mailer could be made to run programs if it received specially crafted input.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu libuser fixes passwd file corruption and local privilege escalation

Several security issues were fixed in libuser.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu Gin CORS Fix for Remote Origin Restriction Bypass

The Gin CORS middleware could allow unintended access to network services.