Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The update for nginx released as DSA 6496-1 caused a regression in the nginx-dev package: the backported fix for CVE-2026-42533 declared two private header fil…
2.2100 - CVE-2026-86219: Replay attack in Authen::SASL::Perl::DIGEST_MD5 Thanks to TIMLEGGE (@timlegge) and the CPANSec team for the AI-assisted detection and …
2.2100 - CVE-2026-86219: Replay attack in Authen::SASL::Perl::DIGEST_MD5 Thanks to TIMLEGGE (@timlegge) and the CPANSec team for the AI-assisted detection and …
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
An update that solves three vulnerabilities and contains one feature can now be installed.
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
An update that solves three vulnerabilities and contains one feature can now be installed.
The 7.2.5 stable kernel update contains a number of important fixes across the tree.
An update that solves 12 vulnerabilities and contains one feature can now be installed.
An update that fixes 38 vulnerabilities is now available.
Several vulnerabilities were discovered in libevent, an asynchronous event notification library. The HTTP implementation (evhttp) handled Transfer-Encoding and…
An update that solves 662 vulnerabilities, contains two features and has 35 security fixes can now be installed.
Adobe has released an emergency fix for a Magento vulnerability that attackers are already using against online stores. Someone exploiting the flaw can make an…
A version 2 Linux kernel patch series posted on August 31 proposes a new eBPF security interface for applying Landlock policy during program execution. The 15-…
SUSE has released a security update for buildah, addressing vulnerabilities by rebuilding it against the latest Go security release, applicable to multiple ent…
A security update for buildah on various SUSE products was released, addressing vulnerabilities by rebuilding the software against the current go security rele…
A security update for the SUSE Linux Enterprise Kernel resolves six vulnerabilities in version 6.4.0-150700.53.66, with critical patches available for affected…
A significant security update for Firefox on Rocky Linux 9 addresses multiple vulnerabilities, including privilege escalation and information disclosure, with …
An important security update for Firefox on Rocky Linux 10 addresses multiple vulnerabilities, including privilege escalations and information disclosures, det…
An update for hauler-2.0.3-1.1 on openSUSE Tumbleweed addresses two security vulnerabilities with moderate ratings, improving the system's security against pot…
A critical security update has been released for the SUSE Linux kernel, addressing 21 vulnerabilities and improving system integrity, with available installati…
Oracle Linux has released updates for Python 3.14.7 addressing security vulnerability CVE-2026-11940, available for both x86_64 and aarch64 architectures.
Oracle Linux Security Advisory ELSA-2026-58561 details updated rpm packages for Oracle Linux 10, including a security fix for CVE-2026-9323, enhancing session …
