The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Mageia has released security updates for versions 10 and 9, addressing multiple vulnerabilities including XSS attacks, authentication bypass, and incomplete we…
openSUSE has released a security update for python-httplib2 addressing a vulnerability (CVE-2026-59939) allowing malicious HTTP servers to cause MemoryError in…
openSUSE released a security update for rrdtool, addressing CVE-2026-43958, a critical stack buffer overflow vulnerability that could allow local privilege esc…
openSUSE has released an important security update for nginx addressing CVE-2026-42533, which involves a vulnerability related to map directive and regex match…
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane f…
When people talk about Linux hardening, the conversation often quickly turns to enterprise security platforms, EDR agents, and complex monitoring stacks.
A security update for google-osconfig-agent addresses CVE-2026-56852, fixing an improper handling of invalid UTF-8 bytes that could cause an infinite loop in a…
A security update for google-guest-agent has been released to address CVE-2026-56852, which involves improper handling of invalid UTF-8 leading to infinite loo…
SUSE released a security update for rsyslog addressing a vulnerability that could lead to a stack buffer overflow and a crash due to a configuration-dependent …
A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the system…
Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual private network (VPN) and netw…
Debian's security advisory DSA-6412-1 addresses multiple vulnerabilities in the botan3 cryptography library, recommending an upgrade to version 3.12.0 to mitig…
Debian has released a security advisory for aom due to multiple vulnerabilities affecting its encoder, potentially leading to denial of service or arbitrary co…
Fedora 44 has updated the perl-PAR-Packer module to version 1.064-6, including a rebuild for Perl 5.42.3 and addressing notable security vulnerabilities.
The Fedora 44 update for abrt version 2.17.9 addresses several security vulnerabilities, including issues with journal entry spoofing and race conditions, enha…
A new Fedora update for doctl version 1.164.0 addresses various security vulnerabilities including denial of service and unauthorized command execution in the …
New stunnel packages for Slackware 15.0 and -current address security vulnerabilities, including memory access issues and a SOCKS server bypass, with relevant …
A security update for rsyslog addresses vulnerability CVE-2026-61548, which may lead to stack buffer overflow, and a crash due to a configuration issue in the …
SUSE released a security update for kubevirt addressing four vulnerabilities, including CVE-2026-13201, CVE-2026-39821, CVE-2026-46600, and CVE-2026-56852, req…
A security update for valkey addresses two important vulnerabilities affecting openSUSE Leap 15.6 and SUSE Linux Enterprise Server 15 SP6, requiring installati…
A security update for valkey addresses two vulnerabilities affecting openSUSE Leap 15.6 and SUSE Linux Enterprise Server 15 SP6, enhancing TLS handling and RCE…
SUSE has released an important security update for bind addressing four vulnerabilities that could lead to issues like cache poisoning and memory misuse in spe…
A security update for spice-vdagent addresses two vulnerabilities, allowing for potential heap buffer overflow and improper sanitization, affecting various SUS…
SUSE has released a security update for spice-vdagent to address two vulnerabilities, including an integer overflow and improper sanitization, affecting multip…