Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Oracle Linux has released an update addressing CVE-2026-33630, fixing a double-free vulnerability in c-ares version 1.34.6-2 for both x86_64 and aarch64 archit…
Oracle Linux has released security updates for Tomcat 9 addressing multiple vulnerabilities, including certificate validation issues and potential security byp…
Mageia 10 received an update addressing a security vulnerability, specifically a Heap Use-After-Free Write in XML Metadata Parsing (CVE-2026-41401), enhancing …
A bugfix update for Mageia 10 resolves an issue where the byobu package did not install its desktop menu entry properly.
SUSE has released a security update for python-Pillow that addresses 11 vulnerabilities. Users are advised to install the update using recommended methods to m…
SUSE released a security update addressing 87 vulnerabilities in the Linux kernel, improving system security for SUSE Linux Micro 6.0 and Micro 6.1, requiring …
Fedora has released an update for Netatalk version 4.5.1, introducing security fixes and improvements to the Apple Filing Protocol file server software and its…
Mageia has released updates for versions 10 and 9 addressing multiple security vulnerabilities, identified by several CVEs, to enhance system protection and re…
SUSE has released a security update for avahi to address CVE-2025-59529, which allows local denial of service due to a client limit issue in the protocol serve…
A bug fix for Mageia 10 addresses the loss of syntax highlighting when opening spec files with emacs, resolving the issue noted in a recent advisory.
A timing discrepancy in PAM's pam_userdb module could expose sensitive information, affecting multiple Ubuntu releases. Users should update their systems and r…
Debian LTS released an advisory regarding security issues in Chromium that could allow arbitrary code execution and other vulnerabilities, recommending an upgr…
Security update resolving 22 CVEs across both caddy itself and its vendored libraries.
nginx-mod-headers-more: Rebuild for 1.30.3 nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-vts:
nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-fancyindex: Rebuild for 1.30.3 nginx-mod-vts:
BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork be…
Red Hat released an Important krb5 security update for Red Hat Enterprise Linux 8 this week, addressing two vulnerabilities tracked as CVE-2026-40355 and CVE-2…
Update to 148.0.7778.96 CVE-2026-7896: Integer overflow in Blink CVE-2026-7897: Use after free in Mobile CVE-2026-7898: Use after free in Chromoting CVE-2026-7…
Update to 5.0.4 Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritativ…
Update to 5.0.4 Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritativ…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed that an unnamed federal civilian agency's Cisco Firepower device running Adaptive…
Version 0.5.3 Fix potential undefined behavior in cgif_addframe which could have led to an integer overflow CVE-2026-4985
Patch release for security advisory CVE-2026-32711. A crafted DICOMDIR could create a path traversal by setting ReferencedFileID to a path outside the File-set…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For the oldstab…
