Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves seven vulnerabilities can now be installed.
An update that solves seven vulnerabilities can now be installed.
Update rubygems to 4.0.20. Additionally, several security issues were found in resolv gem bundled in rubygems. This update resolves these issues by updating re…
Update to 5.6.2 (fix CVE-2026-85013)
2.2100 - CVE-2026-86219: Replay attack in Authen::SASL::Perl::DIGEST_MD5 Thanks to TIMLEGGE (@timlegge) and the CPANSec team for the AI-assisted detection and …
Fix CVE-2026-73583 and CVE-2026-73584
Update to 3.5.8 (security fixes in XDP, DDNS, and TSIG).
Update to 1.7.7. Version 1.7.6 is a security fix for GHSA-6m27-337c-jcgf. Config file or environment variable can trigger writing out a config file, overwritin…
Version 3.1.60 fixes GHSA-g5vv-9gxw-82hx, GHSA-whh4-5q6c-9v3x, and GHSA-239g-whfq-7xj9. Version 3.1.61 fixes accidental removal of public class regex on Actor.…
Important: perl-YAML-Syck security update
Moderate: gstreamer1-plugins-base security update
Dancer2 générates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there.
Moderate: libkcapi security update
Moderate: perl security update
Important: osbuild-composer security update
Important: git-lfs security update
The urwid web display backend generates web session identifiers by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, whi…
1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbm_type/dbm_mldbm (CVE-2026-78030) Tighten symlink outside of f_dir (CVE-2026-15392) c…
Dancer2 générates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there.
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.
An update that solves three vulnerabilities and has five fixes can now be installed.
An update that solves four vulnerabilities and has one security fix can now be installed.
An update that solves nine vulnerabilities can now be installed.
