Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability can now be installed.
An update that solves 10 vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.
Several vulnerabilities were discovered in nginx, a high performance web and reverse proxy server. Depending on the configuration, these could result in memory…
Two critical vulnerabilities were found in PHP, a widely-used open source general purpose scripting language, which could result in remote execution of arbitra…
PHP could be made to crash or run programs if it received specially crafted network traffic.
It was discovered that incorrect memory state tracking in PHP, a widely-used open source general purpose scripting language, could result in the execution of a…
An update that fixes 10 vulnerabilities is now available.
An update that solves 10 vulnerabilities can now be installed.
An update that solves 10 vulnerabilities can now be installed.
An update that solves seven vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
Moderate: hostapd security update
Important: kernel security, bug fix, and enhancement update
Important: bubblewrap security update
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
fixes CVE-2025-64505 and CVE-2026-33416
fixes CVE-2025-64505 and CVE-2026-33416
Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is pr…
x86/AMD: ineffectual Zenbleed workaround [XSA-515, CVE-2026-79608] x86: XPTI may break on huge-memory systems [XSA-516, CVE-2026-79609] grant-table: double ver…
Backport fixes for CVE-2026-19967, CVE-2026-19969
CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Typ…
fixes CVE-2025-64505 and CVE-2026-33416
