Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 44 has released an update for gstreamer1-plugins-ugly-free version 1.28.6 which includes plugins with licenses not fully compatible with LGPL. Users can…
A security update for nodejs24 addresses twelve vulnerabilities and enhances system protection, with various CVEs resolved through version upgrade to 24.18.1 f…
Oracle Linux has released an update for GIMP addressing multiple CVEs, available for both x86_64 and aarch64 architectures, as part of their security advisory …
Oracle has released updated RPMs for Oracle Linux 9 addressing several CVEs, including significant enhancements in osbuild-composer and its components for both…
Kubernetes maintainers patched two path-traversal vulnerabilities in the NFS and SMB CSI drivers earlier this year. But repository histories show that the secu…
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Ninete…
A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and running Ransom Cartel, the ransomware-as-…
A significant security update has been released for Mozilla Thunderbird affecting Rocky Linux 9, addressing multiple vulnerabilities with potential for exploit…
A kernel update for Rocky Linux 8 addresses a security vulnerability and includes bug fixes and enhancements, notably for KVM and CIFS mounts, accompanied by a…
A critical security update for python-Django addresses four vulnerabilities affecting SUSE and openSUSE, including potential file-write attacks and denial-of-s…
A critical security update for php8 addresses three vulnerabilities in SUSE Linux Enterprise Server 15 SP7, improving security against potential exploits like …
SUSE released a critical update for php7 addressing three vulnerabilities, including potential SQL injections and unbounded recursion, affecting various SUSE p…
Oracle Linux 8 has updated Thunderbird package versions to address multiple CVEs, which include security fixes and configuration changes, available for both x8…
Oracle Linux released updated rpms for version 9 addressing CVEs 2026-32280 and 2026-32281, enhancing security through version 175-1.0.1 for both x86_64 and aa…
Oracle Linux 10 has updated RPM packages for PHP 8.4.23, addressing CVE-2026-14355, and is available for both x86_64 and aarch64 architectures through the Unbr…
Oracle Linux 10 updates include RPM packages addressing CVE-2026-10846, fixing vulnerabilities related to off-path poisoning attacks. The update is available f…
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane f…
Debian has addressed multiple vulnerabilities in the Linux kernel, potentially leading to privilege escalation, denial of service, or information leaks, urging…
Debian has released a security advisory for aom due to multiple vulnerabilities affecting its encoder, potentially leading to denial of service or arbitrary co…
Fedora 44 has updated the perl-PAR-Packer module to version 1.064-6, including a rebuild for Perl 5.42.3 and addressing notable security vulnerabilities.
The Fedora Update notification for coreutils version 9.10-5 addresses CVE-2026-56391, fixing a denial of service vulnerability related to the uniq command's ha…
A security update for valkey addresses two vulnerabilities affecting openSUSE Leap 15.6 and SUSE Linux Enterprise Server 15 SP6, enhancing TLS handling and RCE…
A security update for spice-vdagent addresses two vulnerabilities, allowing for potential heap buffer overflow and improper sanitization, affecting various SUS…
A security update for openssl-3 has been released for several SUSE products, addressing a remote denial of service vulnerability in the TLS ClientHello. Users …
