The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An important update for Grafana on Rocky Linux 8 addresses a denial of service vulnerability and includes bug fixes and enhancements, with detailed CVSS rating…
Fedora has released an update for opkssh version 0.16.0, fixing a security vulnerability in GQ-commitment PK Tokens, while updating dependencies and maintainin…
A critical kernel security update for Rocky Linux 8 addresses multiple vulnerabilities, including fixes for out-of-bounds and double-free issues, with detailed…
Fedora 44 has updated the rust-libgit2-sys package to version 0.18.7, addressing several security vulnerabilities while maintaining compatibility with system P…
A security update for Mozilla Firefox addresses 32 vulnerabilities, enhancing protection for various SUSE Linux Enterprise products, critical for maintaining s…
A critical update for .NET 8.0 on Rocky Linux 8 addresses multiple security vulnerabilities and includes bug fixes, with detailed CVSS ratings available for ea…
An important update for Rocky Linux 9 addresses kernel security vulnerabilities and includes bug fixes and enhancements, with detailed severity ratings availab…
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, wh…
GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Lin…
Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not eve…
When researchers announced GhostLock, many people focused on the exploit. What stood out to me wasn't just what the vulnerability could do, but how long it had…
Most of us don't hear about a kernel vulnerability until a CVE lands in our inbox or the vulnerability scanner starts complaining. By then, the patch isn't new…
A flaw was found in Sympa’s web interface, a modern mailing list manager. An attacker may bypass authentication by using an arbitrary e-mail address when the g…
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in P…
A vulnerability in the Little CMS color management library can cause crashes or arbitrary code execution on certain Ubuntu versions; updates are available for …
Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a campaign targeting a telecommunications p…
Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that could allow for local privilege escalat…
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
The 7.0.6 stable kernel update contains a number of important fixes across the tree. It also contains a fix for the Fragnesia CVE-2026-46300
Jaroslav Loba'evski from GitHub Security Lab discovered a memory corruption vulnerability in the RAR module of p7zip, a now unmaintained fork of 7-Zip, a file …
Multiple vulnerabilities were discovered in p7zip, a now unmaintained fork of 7-Zip, a file archiver handling multiple formats. To address these security vulne…
Linux administrators often face an ugly choice during major kernel vulnerabilities: reboot critical systems immediately or leave exploitable code running in pr…