Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: jq security update
Important: kernel security update
Important: krb5 security update
It was discovered that missing input sanitising in the DIGEST-MD5 parser of the GNU SASL library could result in denial of service. For the oldstable distribut…
Multiple security issues were discovered in PostgreSQL, which may result in authorisation bypass, execution of arbitrary code, information disclosure, privileg…
Multiple security issues were discovered in PostgreSQL, which may result in authorisation bypass, execution of arbitrary code, information disclosure, privileg…
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
nginx could be made to crash or run programs if it received specially crafted network traffic.
Important: jq security update
Important: kernel security update
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), thes…
Important: jq security update
It was discovered that nghttp2, an implementation of the HTTP/2 protocol, could be crashed via an assertion failure. A remote attacker could exploit this to ca…
RubyGems temporarily suspended new account registrations this week after threat actors pushed hundreds of malicious packages into the Ruby package ecosystem. A…
The 6.19.14-102 stable kernel update contains a fix for the Fragnesia CVE-2026-46300.
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
Security fix for CVE-2026-7246
update to 2.31.5: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA- gr92-w2r5-qw5p https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-i…
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
A vulnerabilitie was discovered in nghttp2, a server, proxy and client implementing HTTP/2. CVE-2026-27135 Fix missing iframstate validations to avoid assertio…
An update that solves two vulnerabilities can now be installed.
Update for nodejs20
