Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rocky Linux 10 has an important security update for 389-ds-base addressing multiple vulnerabilities including LDAP filter injection and buffer overflow issues …
An important security update for the libXfont2 library is available for Rocky Linux 10 addressing out-of-bounds read/write and privilege escalation vulnerabili…
A security update for curl on Rocky Linux 10 addresses an information disclosure vulnerability (CVE-2026-8927), which has a CVSS score of 7.5, indicating signi…
A security update for nghttp2 addressing HTTP Request/Response Smuggling vulnerabilities has been released for Rocky Linux 8, rated with a moderate severity sc…
A security update for haproxy on Rocky Linux 8 addresses a Denial of Service vulnerability (CVE-2026-55204), with a CVSS base score of 7.5 indicating significa…
An important security update for unbound on Rocky Linux 9 addresses vulnerabilities including cache poisoning and denial of service, with specific CVEs and the…
Rocky Linux 9 has released an important security update for gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free, addressing vulnerabilities with signi…
Fedora 43 has released an update for rust-bat, rebuilding it with the latest libgit2-sys crate to address security vulnerabilities in the libgit2 library.
A security update has been released for open-iscsi addressing two vulnerabilities affecting SUSE Linux Micro 6.2, including improper pathname limitations and i…
An important security update for gstreamer1-plugins-ugly-free on Rocky Linux 10 addresses an integer overflow vulnerability, which may lead to out-of-bounds re…
A security update for curl on Rocky Linux 9 addresses multiple vulnerabilities, including authentication bypass, information disclosure, and man-in-the-middle …
A vulnerability in Engrampa could allow attackers to execute arbitrary code via malicious files. Users on affected Ubuntu versions should update to the latest …
An update for gzip-1.14-3.1 on openSUSE Tumbleweed addresses a security vulnerability identified as CVE-2026-41992, rated moderate with CVSS scores of 6.1 and …
A new update for the containerized-data-importer1.66-api package in openSUSE Tumbleweed addresses twelve vulnerabilities, enhancing security for affected users.
An update for openSUSE Tumbleweed addresses a moderate security vulnerability in the python313-h2 package, specifically CVE-2026-71554, affecting the stability…
Security researchers have disclosedFence2Pwn, a new Linux kernel exploitation technique that uses KFENCE’s alternate memory-allocation path to bypass protectio…
A disclosure posted to the oss-security mailing list on August 16, 2026, reports that OpenZFS on Linux accepts namespace-local CAP_SYS_ADMIN for several host-l…
openSUSE released a critical security update for git-cliff addressing two vulnerabilities, CVE-2025-55159 and CVE-2026-25541, including various enhancements an…
Gentoo Linux has issued a high-severity security advisory for PostgreSQL due to multiple vulnerabilities, with potential for arbitrary code execution, urging u…
Multiple high-severity vulnerabilities in X.Org X server and XWayland require users to upgrade to the latest versions to ensure system security and protection …
Fedora 44 updates jfrog-cli to version 2.119.0, enhancing its functionality for accessing JFrog products while addressing multiple security vulnerabilities lin…
openSUSE Tumbleweed has released an update for chromedriver-151.0.7922.137-1.1 addressing five security vulnerabilities, enhancing system protection against po…
Debian issued a security advisory for docker.io addressing multiple vulnerabilities that could lead to privilege escalation and unauthorized file access, urgin…
Gentoo Linux has issued a security advisory regarding multiple high-severity vulnerabilities in NTFS-3G, which could lead to privilege escalation and requires …
