Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.7.7. Version 1.7.6 is a security fix for GHSA-6m27-337c-jcgf. Config file or environment variable can trigger writing out a config file, overwritin…
Version 3.1.60 fixes GHSA-g5vv-9gxw-82hx, GHSA-whh4-5q6c-9v3x, and GHSA-239g-whfq-7xj9. Version 3.1.61 fixes accidental removal of public class regex on Actor.…
Moderate: gstreamer1-plugins-base security update
Moderate: perl security update
The urwid web display backend generates web session identifiers by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, whi…
1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbm_type/dbm_mldbm (CVE-2026-78030) Tighten symlink outside of f_dir (CVE-2026-15392) c…
Dancer2 générates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there.
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.
An update that solves three vulnerabilities and has five fixes can now be installed.
An update that solves four vulnerabilities and has one security fix can now be installed.
An update that solves nine vulnerabilities can now be installed.
An update that solves nine vulnerabilities can now be installed.
An update that solves three vulnerabilities and contains one feature can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbm_type/dbm_mldbm (CVE-2026-78030) Tighten symlink outside of f_dir (CVE-2026-15392) c…
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.
An update that solves six vulnerabilities can now be installed.
An update that solves five vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
