Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves 11 vulnerabilities can now be installed.
An update that solves nine vulnerabilities can now be installed.
An update that solves seven vulnerabilities can now be installed.
An update that solves four vulnerabilities can now be installed.
Important: redis security, bug fix, and enhancement update
Moderate: expat security update
Important: skopeo security update
Important: valkey security, bug fix, and enhancement update
Important: thunderbird security update
Moderate: glib2 security update
Moderate: expat security update
Moderate: xz security update
osbuild-composer security update
A newly confirmed Kestra vulnerability is being exploited in the wild. CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities catalog on Sep 2, 2026,…
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
A security update for Erlang has been released, addressing 19 vulnerabilities, including issues related to DNS cache poisoning, certificate forgery, and Denial…
A vulnerability in SPIP could allow unauthenticated remote code execution; an update has been released for the stable distribution, and users are advised to up…
The security release of php-pear-PHP-CodeSniffer version 4.0.4 addresses vulnerabilities and improves error messages, tokenizer support for PHP 8.5, and overal…
A security update for the erlang-cowboy package addresses various vulnerabilities in cowlib and cowboy, including denial of service risks, with significant cha…
A command injection vulnerability in the Info-ZIP zip program was discovered, prompting the recommendation to upgrade zip packages in the stable distribution.
A security update for helm addresses three vulnerabilities, including privilege escalation and credential exfiltration issues, with a critical CVSS score of 9.…
A security update for BIND has been released, addressing six vulnerabilities that could lead to issues such as cache poisoning, memory misuse, and DNSSEC valid…
Multiple vulnerabilities in the Caddy web server can lead to unauthorized access and other security issues; users are urged to upgrade to version 2.6.2-12+deb1…
The update for python-webob to version 1.8.11 addresses CVE-2024-42353, enhancing WSGI request/response handling. Users can upgrade via the DNF package managem…
