Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability can now be installed.
An update that solves 2 vulnerabilities can now be installed.
Several security issues were fixed in libevent.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities can now be installed.
Updated to 1.52.6 Includes fixes for CVE-2026-75131 & CVE-2026-93337
Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high sever…
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
Updated to 1.52.6 Includes fixes for CVE-2026-75131 & CVE-2026-93337
Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high sever…
Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high sever…
Important: resteasy security update
Important: expat security update
Two vulnerabilities were discovered in Swift, OpenStack's object storage service, that could lead to information disclosure. CVE-2026-71191 / OSSA-2026-030 An …
Multiple vulnerabilities were discovered in Glance, OpenStack's image storage service. CVE-2026-71196, CVE-2026-71197 and CVE-2026-71198 / OSSA-2026-038 Three …
USN-8487-1 introduced a regression in curl.
VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Switch GUI to Qt6 Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP plugin
Dancer2::Serializer::YAML::deserialize handed request bodies straight to YAML::Load. A body tagged !!perl/hash:Some::Class therefore instantiated an arbitrary …
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. In this packa…
Fix CVE-2026-91837
Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high sever…
