Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Oracle Linux has released updates for PHP 8.4.24 addressing CVEs 2026-17543 and 2026-17544, with new RPMs for x86_64 and aarch64 architectures available via th…
Oracle Linux 10 has new MySQL 8.4.11 packages addressing multiple CVEs, enhancing security. The updates include various components for x86_64 and aarch64 archi…
Oracle Linux 10 has received updated RPMs for curl due to several vulnerabilities, including fixes for proxy issues, OAuth2 token leakage, and connection reuse…
Oracle Linux 9 has updated RPMs for .NET SDK and runtime, addressing several CVEs and adding Oracle Linux support, with versions released for both x86_64 and a…
Oracle Linux released updates for .NET SDK and runtime, addressing multiple CVEs and adding support for Oracle Linux 9, with packages available for x86_64 and …
Oracle Linux 9 has released security updates for the Performance Co-Pilot (PCP) package, addressing multiple vulnerabilities and adding various enhancements an…
Oracle Linux updated multiple Node.js packages to address several CVEs, including vulnerabilities related to memory exhaustion and IP address issues, improving…
Oracle Linux 9 has released updated RPM packages for Node.js and dependencies addressing multiple CVEs, including vulnerabilities related to npm and sqlite, av…
Oracle Linux 9 has released updated bind9 packages addressing multiple security vulnerabilities, including issues related to NSEC3 validation and cache exhaust…
Oracle Linux 9 has updated multiple glib2 RPM packages to fix various security vulnerabilities, including buffer overflows and authentication issues, as detail…
Oracle Linux 9 has received updates for curl and libcurl packages to address several vulnerabilities, including issues related to authentication bypass, token …
Oracle Linux 8 has released updates for gstreamer1-plugins-bad-free including security fixes for CVE-2026-19387 and CVE-2026-59692, available through the Unbre…
Oracle released updated RPMs for Oracle Linux 8 addressing CVE-2026-54371, fixing a privilege escalation vulnerability, along with other minor adjustments to t…
Oracle Linux 8 updated packages for PAM address security issues, including a fix for a use after free vulnerability and a timing leak in password comparisons, …
Oracle Linux Security Advisory ELSA-2026-56130 details updated rpms for Oracle Linux 8, including sg3_utils packages addressing CVE-2026-16313 and related chan…
Oracle Linux Security Advisory ELSA-2026-55804 details updates for Oracle Linux 8, addressing CVE-2026-58055 related to HTTP request smuggling and response-que…
Oracle Linux 8 has received several updated RPM packages in relation to security vulnerabilities, introducing enhancements and bug fixes across various Perform…
Oracle Linux released updated RPMs for libXfont2, fixing CVEs 2026-44950 and 2026-59679 in version 2.0.3-2.el8_10.3 for supported architectures.
A security update for gstreamer1-plugins-good addresses vulnerabilities affecting Rocky Linux 8, including memory growth and potential out-of-bounds errors, en…
A security update for java-21-openjdk on Rocky Linux 8 addresses vulnerabilities improving resource resolving, HTTP connections, and TLS servers, with multiple…
Rocky Linux 9 has released an important security update for MySQL 8.4, addressing multiple unspecified vulnerabilities, bugs, and enhancements to improve datab…
Multiple security vulnerabilities in the Swift package could lead to information disclosure or denial of service, prompting an upgrade to version 2.30.1-0+deb1…
An important MySQL update for Rocky Linux 8 addresses multiple security vulnerabilities, bug fixes, and enhancements, along with a detailed Common Vulnerabilit…
Debian issued an advisory for Designate, revealing two vulnerabilities that may allow tenant zone manipulation, leading to denial of service or DNS hijacking. …
