Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
update to 2.31.5: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA- gr92-w2r5-qw5p https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-i…
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
A vulnerabilitie was discovered in nghttp2, a server, proxy and client implementing HTTP/2. CVE-2026-27135 Fix missing iframstate validations to avoid assertio…
An update that solves two vulnerabilities can now be installed.
Update for nodejs20
fix CVE-2026-6842 and CVE-29026-6843 Resolves: CVE-2026-6842 Resolves: CVE-2026-6843 Resolves: rhbz#2455127 Resolves: rhbz#2455314
An update that solves two vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
Moderate: libsoup3 security update
An update that fixes one vulnerability is now available.
An update that fixes 6 vulnerabilities is now available.
An update that solves one vulnerability and has one bug fix can now be installed.
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 3 vulnerabilities can now be installed.
Moderate: freerdp security update
Moderate: glib2 security update
An update that solves 11 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
Exim could be made to crash or run programs if it received specially crafted network traffic.
Several vulnerabilities were discovered in the Exim mail transport agent, which may result in remote code execution, denial of service or an information leak. …
