Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability and has six security fixes can now be installed.
security fix on the GRUB serial cmd
Update to 3.32.0
Dancer2::Serializer::YAML::deserialize handed request bodies straight to YAML::Load. A body tagged !!perl/hash:Some::Class therefore instantiated an arbitrary …
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. In this packa…
Fix CVE-2026-91837
Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high sever…
34.0.4 Release
Update
Important: ruby:3.3 security update
Important: ruby:4.0 security update
Important: ruby:3.3 security update
A new arm64 Kernel-based Virtual Machine (KVM) merge tightens two ordinary-looking mechanisms with major security weight: page mappings for protected-hyperviso…
Multiple vulnerabilities were discovered in lxml, a set pythonic binding for the libxml2 and libxslt libraries, which may lead to information disclosure or pri…
Vulnerabilities were discovered in libdbi-perl, the Perl Database Interface (DBI), which may lead to memory corruption, denial of service, or arbitrary module …
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, which could result in local privilege escalation, by…
An update that solves 31 vulnerabilities and has one security fix can now be installed.
An update that solves 31 vulnerabilities and has one security fix can now be installed.
An update that solves six vulnerabilities can now be installed.
An update that solves five vulnerabilities can now be installed.
Multiple vulnerabilities have been discovered in the Dovecot IMAP server which could result in denial of service, SMTP smuggling, information disclosure, code …
Several vulnerabilities were discovered in wordpress, a web blogging tool, which could result in cross-site scripting, privilege escalation or remote code exec…
Multiple security vulnerabilities were discovered in Flatpak, an application deployment framework for desktop apps, which could result in denial service via ma…
