Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Debian released an advisory regarding two vulnerabilities in 7-Zip that could lead to remote code execution and content spoofing, urging users to upgrade to th…
Debian's security advisory DSA-6412-1 addresses multiple vulnerabilities in the botan3 cryptography library, recommending an upgrade to version 3.12.0 to mitig…
Mageia 10 has released updated Xonotic packages to address issues with broken online statistics support, as detailed in the bug report.
rLottie is a platform independent C++ library for rendering vector-based animations and art. Its format is used by Telegram Desktop, fast and secure messaging …
Moderate: autotrace security update
This update addresses a few security issues, one of which could plausibly result in remote code execution.
Moderate: autotrace security update
Moderate: autotrace security update
# Security update for rootlesskit Announcement ID: SUSE-SU-2026:2451-1 Release Date: 2026-06-18T13:48:10Z Rating: important References:
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in remote code execution, privilege escalation, denial of service or …
Important: dovecot security update
Important: dovecot security update
Improve stack protection Fix security vulnerabilities CVE-2026-32877,CVE-2026-32883,CVE-2026-32884,CVE-2026-34580,CVE-2026-34582
Some weeks in cybersecurity feel routine. This one doesn’t.Several new developments surfaced over the past few days, showing how quickly the threat landscape k…
Coturn 4.9.0 Multiple security fixes Fix to Web Admin password check Cleanup of deprecated OpenSSL APIs Fix for CVE-2026-27624: Bypass localhost and IP range b…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video recorders (NVRs) to its Kno…
U.S. cybersecurity and intelligence agencies have issued a joint advisory warning of potential cyber attacks from Iranian state-sponsored or affiliated threat …
U.S. cybersecurity and intelligence agencies have issued a joint advisory warning of potential cyber attacks from Iranian state-sponsored or affiliated threat …
New jupyterlab and notebook fixing security vulnerabilities.
New jupyterlab and notebook fixing security vulnerabilities.
Select list elements could be shown over another site. (CVE-2024-11692) CSP Bypass and XSS Exposure via Web Compatibility Shims. (CVE-2024-11694) URL Bar Spoof…
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '' characters at the end of header names are ignored, i.e., a "Transfer…
It was discovered that the Booth cluster ticket manager failed to correctly validate some authentication hashes. For the stable distribution (bookworm), this p…
Invalid HMAC could have been accepted in the Booth Cluster Ticket Manager. For Debian 11 bullseye, this problem has been fixed in version
