Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A Linux host intrusion prevention system can fail even when the protected server still has spare CPU. If its logging path cannot record and move events as quic…
A Linux server can be carefully hardened before it reaches production and still become less secure over time. Hardening means reducing unnecessary services, ac…
A Linux service may need broad system-call access while it starts, then only a smaller set while it handles requests. A single policy loaded before startup oft…
The Linux IPMI maintainer accepted a patch on Aug 26, 2026 that restores an RCU grace period before command-receiver objects are freed. The one-line change add…
A Linux system can be hardened, monitored, and carefully administered while still receiving untrusted code through a package, dependency, container image, buil…
A security update for python311 addresses 13 vulnerabilities and includes fixes for non-security issues in SUSE Linux Micro 6.0, enhancing overall system secur…
Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama insta…
Fedora 43 has released an update for java-25-openjdk, version 25.0.4.1.1, related to August CPU vulnerabilities, with installation instructions provided.
Oracle Linux Security Advisory ELSA-2026-58561 details updated rpm packages for Oracle Linux 10, including a security fix for CVE-2026-9323, enhancing session …
Oracle released Firefox updates for Oracle Linux 9 addressing multiple CVEs, including fixes for preferences and debranding patches in versions 140.14.0-1.0.1.
SUSE released Live Patch 30 for SUSE Linux Enterprise 15 SP5, addressing 20 vulnerabilities in the kernel, with recommended update methods available for variou…
Fedora 43 has released GitPython version 3.1.59, providing bug fixes and improvements for this Python library that interacts with Git repositories.
Fedora has released an update for tcpreplay to version 4.6.1, a tool for replaying captured network traffic, along with improved performance and basic file inf…
Fedora 44 has released AusweisApp2 version 2.5.5, which allows online identification using German ID cards, featuring data self-assessment. Users can update vi…
A SUSE update released on August 4, 2026 addresses a vulnerability in avahi, specifically CVE-2025-59529, which allows for local denial of service due to clien…
Ubuntu issued a notice regarding a vulnerability in the linux-hwe-7.0 kernel, affecting Ubuntu 24.04 LTS, and provides instructions for necessary updates and r…
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-…
Oracle Linux 9 has released updates for Java 21 OpenJDK packages addressing several CVEs, with various RPMs available for x86_64 and aarch64 architectures.
Oracle Linux 9 has updated Java packages addressing CVEs for August 2026, including specifics on rpm files for x86_64 and aarch64 architectures and embargo det…
Oracle Linux has released an update for Java 21 on version 8, fixing multiple CVEs and improving various components, available through the Unbreakable Linux Ne…
An update for python-sqlalchemy (2.0.52) includes bug fixes and enhancements for related packages, providing improved flexibility for SQL databases with a high…
Fedora 44 has updated perl-DBI to version 1.652, addressing vulnerabilities CVE-2026-73194 and CVE-2026-73193. The update is available via the dnf package mana…
An update for Fedora 44 includes bugfixes and enhancements for python-sqlalchemy, python-alembic, and python-asyncmy, with new versions and improvements outlin…
Fedora has released an update for python-alembic version 1.19.1, including bug fixes for python-sqlalchemy and python-asyncmy. Users can upgrade using the 'dnf…
