Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in the Linux kernel.
It was discovered that atril, a simple multi-page document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For…
Several issues have been found in asterisk, an Open Source Private Branch Exchange (PBX). They are related to buffer under- or overflows, either on heap or on …
# Security update for containerized-data-importer Announcement ID: SUSE-SU-2026:2407-1 Release Date: 2026-06-16T07:47:27Z Rating: important References:
If more than 12 million enterprise systems can be exposed by flaws in a security control designed to harden Linux, it's probably worth asking whether Linux giv…
A Fedora contributor account recently came under scrutiny for apparently AI-generated activity that disrupted the project's bug tracker.
Ubuntu Security Notice USN-8423-1 addresses several vulnerabilities in lwIP affecting various Ubuntu versions, with serious risks including buffer overflows an…
For years, IPv4 was the only proxy type that really mattered for anyone running automation off a Linux box. IPv6 was the protocol everyone said they’d migrate …
A compromised Linux server can continue running malware long after the initial intrusion. One of the most common persistence techniques is a malicious cron job…
Debian LTS announced a security advisory for gsasl, addressing a denial of service vulnerability due to insufficient input sanitization, recommending an upgrad…
Fedora 44 has updated the rubygem-yard package to version 0.9.40, addressing path traversal issues by backporting fixes from versions 0.9.41 and 0.9.44.
Fedora released an update for rubygem-yard to version 0.9.40-2, addressing path traversal vulnerabilities and allowing users to generate consistent documentati…
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the software that sits at the front of much of the Linux internet…
Linux rootkits are old, but they never really disappeared. They just stopped attracting the same attention.
A vulnerability in the Little CMS color management library can cause crashes or arbitrary code execution on certain Ubuntu versions; updates are available for …
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from dev…
Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other mainte…
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved fro…
Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a campaign targeting a telecommunications p…
Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that could allow for local privilege escalat…
Linux administrators are once again dealing with a familiar problem: a local Linux foothold that can potentially become full root access.
An attacker compromises a Linux container, launches a cryptominer, sets up a way to stay in the system through a background task, and disappears before the inv…
Red Hat released an Important krb5 security update for Red Hat Enterprise Linux 8 this week, addressing two vulnerabilities tracked as CVE-2026-40355 and CVE-2…
Linux runs the internet. More than 96% of the world’s top one million web servers operate on Linux-based systems. That makes every linux server a target by def…
