Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new version 7.6 of the Squid proxy caching server for Fedora 44 has been released, featuring enhancements in performance and updates for OpenSSL compatibilit…
The Fedora update notification announces version 24.18.0 of Node.js, providing a JavaScript runtime optimized for fast network applications, and includes detai…
Fedora released an update for WordPress 6.9.5, addressing critical security vulnerabilities including SQL injection issues and potential remote code execution …
The Fedora update for ProFTPD version 1.3.9c includes a new module, mod_procfs, which addresses a critical ACL bypass vulnerability by preventing certain file …
Fedora 43 has released WordPress version 6.9.5, addressing security vulnerabilities including SQL injection and remote code execution issues. Users can update …
Fedora 43 has released an update for the nginx-mod-fancyindex module, enhancing file listings with customization options, and fixing multiple CVEs along with v…
The Fedora update for nginx-mod-brotli version 1.0.0~rc-13 includes a rebuild for nginx version 1.30.4, addressing various CVEs and improving Brotli compressio…
Fedora 43 has released an update for nginx-mod-modsecurity, required for ModSecurity v3, alongside other nginx modules, addressing multiple vulnerabilities and…
The Fedora Update Notification details the nginx-mod-headers-more module update for Fedora 43 that allows enhanced header management, along with related nginx …
Fedora 43 is updating nginx to version 1.30.4, fixing multiple CVEs and rebuilding associated nginx modules. Users can install the update using the dnf command.
The Fedora update for nginx-mod-naxsi includes a rebuild for version 1.30.4 and addresses multiple CVEs, enhancing security and functionality for the web appli…
A security update for perl-IO-Compress affecting Rocky Linux 8 addresses a vulnerability allowing arbitrary code execution, highlighted by CVE-2026-48962, with…
An important security update for perl-Archive-Tar on Rocky Linux 8 addresses a path traversal vulnerability allowing arbitrary file access, with a CVSS score o…
An important update for nginx in Rocky Linux 9 addresses a critical buffer overflow vulnerability, ensuring better security and stability through bug fixes and…
A significant security update is available for plexus-utils on Rocky Linux 9, addressing a directory traversal vulnerability (CVE-2025-67030) with a CVSS score…
Rocky Linux 9 has released a critical PHP update addressing multiple vulnerabilities, including remote code execution and denial of service, as detailed in the…
A security update for PostgreSQL on Rocky Linux 9 addresses multiple vulnerabilities, including credential recovery, buffer overflow, and account hijack risks,…
An important security update for PipeWire in Rocky Linux 10 addresses a sandbox escape and arbitrary code execution vulnerability (CVE-2026-5674), with a CVSS …
Rocky Linux 10 has released an important security update for the rest package, addressing weak random number generation in the PKCE implementation (CVE-2026-16…
A significant security update for libXfont2 has been released for Rocky Linux 10, addressing multiple vulnerabilities with a CVSS base score of 7.3 for each.
An important kernel update for Rocky Linux 10 addresses security vulnerabilities and includes bug fixes and enhancements with detailed CVSS ratings available o…
The Fedora update for perl-HTTP-Date version 6.08 addresses a security issue by rejecting overly long input in parse_date(), preventing denial of service from …
Rocky Linux 10 has released a critical security update for gstreamer1-plugins-bad-free, addressing two vulnerabilities, including heap overflows and buffer ove…
A significant Ruby security update for Rocky Linux 9 addresses vulnerabilities including IMAP command injection and TLS bypass, with two CVEs rated 7.1 and 7.4…
