Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Python could be made to crash if it received specially crafted input.
Expat could be made to crash if it received specially crafted input.
Go Cryptography could be made to crash if it received specially crafted network traffic.
An update that solves eight vulnerabilities and has one security fix can now be installed.
An update that solves one vulnerability and has three security fixes can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves eight vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
Libidn could be made to crash or expose sensitive information if it received specially crafted input.
Several security issues were fixed in LibRaw.
An update that solves one vulnerability and has 6 fixes is now available.
An update that fixes one vulnerability is now available.
An update that solves four vulnerabilities and has one security fix can now be installed.
An update that solves 18 vulnerabilities can now be installed.
This package contains the Perl module CSS::Minifier::XS. Versions of the module before 0.14 have a memory leak when the entire document is minified away (CVE-2…
Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for RUSTSEC-…
An update that solves one vulnerability can now be installed.
An update that solves three vulnerabilities can now be installed.
Update to opkssh 0.15.0. This release fixes several CVEs in bundled/vendored dependencies: CVE-2026-39829: golang.org/x/crypto/ssh: Denial of Service via craft…
Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for RUSTSEC-…
Improve GSS KEX algorithms documentation CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known- group validation that leads to client…
