The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A step-by-step method for finding and proving CORS misconfiguration vulnerabilities: the header checks, the edge cases developers miss, and how to fix them.How…
Gentoo Linux has issued a security advisory about multiple vulnerabilities in FreeType, urging users to upgrade to version 2.14.3 to mitigate risks including a…
Ubuntu issued a security notice for a vulnerability in node-follow-redirects affecting multiple LTS releases, allowing potential exposure of sensitive informat…
Fedora 43 has updated cri-o to version 1.34.11, addressing CVE-2026-34986 and resolving specific bugs while providing upstream fixes for enhanced stability and…
Fedora has released an update for vaultwarden to version 1.37.1, addressing several CVEs and patched vulnerabilities, enhancing the security of this unofficial…
The Fedora update addresses vulnerabilities CVE-2026-11822 and CVE-2026-11824 in SQLite 3.51.2, enhancing security against arbitrary code execution and buffer …
Fedora 44 has released apr-util version 1.6.5 with security fixes, enhancing its Apache Portable Runtime Utility library for better handling of XML, LDAP, and …
The Fedora 44 update for libcupsfilters version 2.1.1 includes security fixes for CVE-2026-64611 and CVE-2026-64612, addressing potential vulnerabilities in pr…
Fedora 44 has released an update for vaultwarden version 1.37.1, addressing multiple vulnerabilities, including a significant denial of service issue and other…
SUSE released a moderate security update for gzip to address CVE-2026-41992, involving a global buffer overflow vulnerability. Users are advised to apply the u…
openSUSE has released a critical security update for chromium, addressing 41 vulnerabilities including various memory management issues and insufficient input …
A moderate security update for resource-agents in Rocky Linux 8 addresses an information disclosure vulnerability, enhancing protection in high-availability en…
A security update for libgcrypt in Rocky Linux 8 addresses a denial of service and buffer overflow vulnerability (CVE-2026-41989), rated with a CVSS score of 7…
Debian announced the fix for multiple vulnerabilities in SPIP, including remote code execution and SQL injection risks, recommending users upgrade their spip p…
A security update for SUSE Linux addresses 59 vulnerabilities, including fixes for memory leaks, out-of-bounds access, and potential crashes, urging immediate …
A security update for openvpn addresses seven vulnerabilities, including issues related to memory leaks, denial of service, and race conditions, applicable to …
SUSE released a security update for libheif addressing four vulnerabilities and introducing version 1.23.1, improving various decoding capabilities and ensurin…
SUSE announced an important security update for dracut addressing a root code execution vulnerability (CVE-2026-15816) in several SUSE Linux Enterprise product…
A security update for dracut addresses a critical vulnerability, CVE-2026-15816, which allows root code execution via unescaped error messages in emergency-hoo…
Ubuntu 24.04 LTS received a security update fixing multiple Linux kernel vulnerabilities that could allow system compromise, necessitating a reboot and possibl…
Ubuntu 14.04 LTS has received updates addressing multiple vulnerabilities in the Linux kernel affecting security, privilege escalation, and various subsystem f…
Ubuntu released security updates for Linux kernels addressing multiple vulnerabilities that could compromise systems, urging users to update and reboot their d…
Ubuntu Security Notice USN-8631-1 addresses multiple vulnerabilities in various Linux kernel versions affecting Ubuntu 20.04 LTS and 22.04 LTS, requiring updat…
Ubuntu released security notice USN-8630-1 addressing vulnerabilities in the Linux kernel for various systems, requiring users to update and reboot their insta…