Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes 42 vulnerabilities is now available.
There was a possible directory traversal vulnerability in the Rack::Directory app that is bundled with Rack.
An update that fixes two vulnerabilities is now available.
A security flaw is found on rake which may case arbitrary command execution under file existence with crafted name. This new rpm will fix the issue (CVE-2020-8…
A security flaw is found on rake which may case arbitrary command execution under file existence with crafted name. This new rpm will fix the issue (CVE-2020-8…
Security fix for CVE-2020-5247, CVE-2020-5249
An update that fixes one vulnerability is now available.
An update that fixes 7 vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
An update that solves two vulnerabilities and has one errata is now available.
An update that solves two vulnerabilities and has one errata is now available.
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Update to Rack 2.0.8.
An update that fixes one vulnerability is now available.
In haml, when using user input to perform tasks on the server, characters like " ' must be escaped properly. In this case, the ' character was missed. An atta…
An update that fixes one vulnerability is now available.
Rebased pcs to the newest major version (see CHANGELOG.md) - includes fix for CVE-2026-84828 Updated standalone web UI and HA Cluster Management Cockpit applic…
