The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update for Mageia 10 resolves an issue where Amarok failed to open music files selected in Dolphin, ensuring proper functionality of the media player.
A SUSE security update addresses two vulnerabilities in ignition, impacting SUSE Linux Enterprise Micro 5.4, enhancing protection against validation bypass and…
SUSE released a security update for the Linux Kernel addressing six vulnerabilities in SUSE Linux Enterprise 15 SP7, offering detailed patch instructions and r…
Ubuntu issued a security notice for FreeIPMI vulnerabilities affecting various LTS versions, detailing potential denial of service risks from buffer overflow i…
A security update for glib2 addresses six vulnerabilities, enhancing the security of various SUSE products and improving protection against potential out-of-bo…
The python-pyasn1 security update addresses three critical vulnerabilities in several SUSE products, including denial of service and uncontrolled resource cons…
A security update for gzip addressing CVE-2026-41991, involving insecure temporary file handling, is available for several SUSE Linux Enterprise products. Reco…
A security update for SUSE Linux Enterprise Kernel addresses six vulnerabilities, providing fixes for race conditions and memory management issues, available f…
A critical security update for SUSE Linux Enterprise 15 SP7 addresses CVE-2026-53366, improving protection against vulnerability related to IPv4 fragmentation.…
There are several reasons why Linux has such a good reputation and has become such a good standard across the world. It is the power behind most internet serve…
Fedora has released an update for libgit2 version 1.9.6, which includes fixes for multiple security issues, ensuring the package remains secure and reliable fo…
A weak random-number generator behind the Ill Bloom vulnerability has let attackers drain over $5 million from crypto wallets. Here's how to check exposure and…
A researcher found that anyone with physical access to one Shark robot vacuum can extract its AWS IoT certificate and use it to take over other Shark vacuums r…
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.wp2shell: Wor…
A three-line SVG gave XBOW SYSTEM access on Bing's servers through a default ImageMagick setting. Here's the exploit chain and a checklist for anyone running a…
A practical checklist for the Fastjson RCE vulnerability (CVE-2026-16723): how the exploit chain works, four questions to answer this week, and how to mitigate…
An update for the moby-engine in Fedora 43 has been released, addressing upstream security vulnerabilities and introducing version 29.6.2, making Docker contai…
The Fedora 44 update for the google-osconfig-agent version 20260717.00 includes several enhancements and bug fixes, addressing issues like build failures and a…
openSUSE has released a security update for helm addressing two vulnerabilities, CVE-2026-39821 and CVE-2026-56852, along with bug fixes. The update is availab…
An update for helm3-3.21.3-3.1 on openSUSE Tumbleweed addresses a vulnerability (CVE-2026-56852), with moderate ratings and fixes available for related package…
Two newly fixed storage bugs in Kubernetes showed more than just a problem with path traversal. They found a common security flaw in the cloud: powerful parts …
openSUSE released a security update for the gh package to address CVE-2026-39821, which involves rejecting certain Punycode labels in the idna package, rated i…
Debian issued an advisory for imagemagick, addressing multiple security vulnerabilities that could cause denial of service or arbitrary code execution; updates…
An update for openSUSE Tumbleweed addresses four security vulnerabilities in the apache-sshd-2.19.0-2.1 package, enhancing system protection against identified…