Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A security update for OpenSSH in Rocky Linux 8 addresses vulnerabilities including a local MITM attack and a client-side denial of service risk, classified as …
openSUSE has released a security update for s2n, addressing two vulnerabilities, including a denial of service and a man-in-the-middle attack, along with a bug…
An important security update for openSUSE Leap 16.0 addresses two vulnerabilities in apptainer, improving functionality and fixing issues related to file owner…
openSUSE released a security update for keybase-client addressing CVE-2026-39824, which involves improper handling of ASCII-only Punycode-encoded labels, appli…
openSUSE released a security update for GraphicsMagick fixing CVE-2026-61464, which addresses a heap buffer over-write vulnerability in X11 import, affecting o…
openSUSE has released a security update for java-25-openjdk addressing nine vulnerabilities, including information disclosure and denial of service, with avail…
openSUSE released a security update for python313 and python3, addressing six vulnerabilities and introducing several bug fixes, improving overall security and…
An update for logcli-3.7.4-1.1 has been released for openSUSE Tumbleweed, addressing a vulnerability rated moderate with a CVSS score of 7.7.
A security update for nodejs-nodemon on Rocky Linux 10 addresses a Denial of Service vulnerability, with a CVSS score of 7.5 for the identified issue.
A critical security update for Firefox on Rocky Linux 10 addresses various vulnerabilities, including privilege escalation, information disclosure, and memory …
openSUSE Tumbleweed has released an update for kubernetes1.34-apiserver addressing a moderate security vulnerability, identified as CVE-2020-8561, affecting va…
openSUSE Tumbleweed has released an update for ffmpeg-7-7.1.5-1.1, addressing a vulnerability (CVE-2026-8461) with a moderate severity rating and a CVSS score …
Ubuntu announced a security vulnerability in ruby-sinatra affecting multiple LTS versions, which could lead to a denial of service via crafted network traffic,…
A libinput vulnerability allows local attackers to potentially execute arbitrary code with root privileges. Users of Ubuntu 20.04 and 22.04 LTS should update t…
Ubuntu Security Notice USN-8614-1 addresses vulnerabilities in Python 2.7 and 3.5 affecting Ubuntu 16.04 LTS, allowing potential denial of service attacks thro…
A security update for gstreamer1-plugins-bad-free affecting Rocky Linux 8 addresses vulnerabilities, including a heap out-of-bounds write and a stack buffer ov…
A security update for gstreamer1-plugins-bad-free on Rocky Linux 8 addresses vulnerabilities including heap out-of-bounds write and stack buffer overflow, with…
A significant security update for Perl (5.32) addresses a vulnerability in perl-Archive-Tar affecting Rocky Linux 8, which could allow denial of service via a …
A critical security update for Perl 5.32 on Rocky Linux 8 addresses a Denial of Service vulnerability in the Archive-Tar module (CVE-2026-9538), enhancing over…
A security update for OpenSSH on Rocky Linux 8 addresses several vulnerabilities, including improper validation and character encoding issues, with enhancement…
Debian announces multiple security vulnerabilities in the expat XML parsing library, affecting various aspects leading to denial of service or arbitrary code e…
Fedora 44 has released an update for Unbound 1.25.2, addressing multiple security vulnerabilities, including denial of service attacks and memory corruption, e…
The Fedora update for ProFTPD includes a new module, mod_procfs, enabled by default to fix an ACL bypass vulnerability, enhancing security and configuration ea…
Fedora released an update for WordPress 6.9.5, addressing critical security vulnerabilities including SQL injection issues and potential remote code execution …
