Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New stunnel packages for Slackware 15.0 and -current address security vulnerabilities, including memory access issues and a SOCKS server bypass, with relevant …
Fedora 43 has updated GoAccess to version 1.11, featuring fixes for vulnerabilities, performance improvements, and enhanced HTML report controls, along with su…
Fedora has released an update for GoAccess 1.11, introducing improvements, notable bug fixes, enhanced performance, and new features like fullscreen geolocatio…
Fedora has released Valkey 9.0.5 with security fixes addressing remote code execution vulnerabilities and numerous bug fixes, enhancing performance and stabili…
SUSE has released an important update for valkey addressing two vulnerabilities that allow remote code execution. Systems must be updated using the recommended…
Fedora released an update for WordPress 6.9.5, addressing critical security vulnerabilities including SQL injection issues and potential remote code execution …
Rocky Linux 9 has released a critical PHP update addressing multiple vulnerabilities, including remote code execution and denial of service, as detailed in the…
Fedora 44's kronosnet update addresses vulnerabilities including memory exposure of encryption keys, access control bypass, and memory corruption, enhancing se…
openSUSE released an important security update for jline3, addressing two vulnerabilities related to unauthenticated remote memory exhaustion and DoS attacks, …
openSUSE released a security update for perl-DBI addressing four vulnerabilities that could lead to unauthorized file access and denial of service, applicable …
OpenSSH could allow unintended access to network services.
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted H…
This update addresses a few security issues, one of which could plausibly result in remote code execution.
upower 1.91.3: Feature: up-device-battery: Prefer "Standard" over "Fast" charging (!316 (merged), #344 (closed)) Fix: Resolve potential leaks (!327 (merged)) F…
Fedora 43 has released an update for python-jupyter-server version 2.20.0, addressing a high-severity CVE related to remote code execution vulnerabilities.
nghttp2 could allow unintended access to network services.
Multiple vulnerabilities were discoverd in Nginx, a high-performance web and reverse proxy server, which could result in remote code execution, denial of servi…
Multiple vulnerabilities were discoverd in Nginx, a high-performance web and reverse proxy server, which could result in remote code execution, denial of servi…
Ruby could allow unintended access to network services.
This update addresses a few security issues, one of which could plausibly result in remote code execution.
Multiple security vulnerabilities were found in mediawiki, a website engine for collaborative work, which could lead to information disclosure or access contro…
Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envo…
Critical security vulnerabilities have been disclosed in SEPPMail Secure E-Mail Gateway, an enterprise-grade email security solution, that could be exploited t…
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in remote code execution, privilege escalation, denial of service or …
