Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Debian has addressed multiple vulnerabilities in the Linux kernel that could result in privilege escalation or denial of service, and advises upgrading to vers…
Mageia has released updates for rootcerts, nss, and firefox packages addressing multiple vulnerabilities, affecting versions 10 and 9, including CVE-2026-15718…
Oracle has released updated RPMs for Oracle Linux 9 addressing several vulnerabilities, including CVEs related to KVM and x86 architecture improvements and rob…
Oracle Linux 7 has received important kernel updates addressing various vulnerabilities and bugs, including improvements for safety against interrupt injection…
Fedora 44 has released an update for the gstreamer1-plugins-good package, version 1.28.6, enhancing its media processing capabilities and providing better plug…
The Fedora 44 update for GStreamer 1.28.6 enhances the streaming media framework, allowing improved sound processing and video playback through a plugin-based …
A recent Mageia advisory reports bug fixes for pfm2afm crashing on 64-bit systems and the lack of acceptance for absolute file paths in releases 10 and 9.
Oracle Linux has released RPM updates for version 10, resolving CVE-2026-55827 by adding codecID checks and fixing boundary checks in gdi_Bitmap_Decompress.
Oracle has released updated RPMs for Oracle Linux 9 addressing several CVEs, including significant enhancements in osbuild-composer and its components for both…
Fedora 44 introduces the tcpreplay tool for replaying captured network traffic, now at version 4.6.0, with added features including tcpprep and capinfo for per…
Fedora has released an update for ImageMagick, fixing several vulnerabilities and improving its image display and manipulation capabilities, with instructions …
Linux runs cloud platforms, containerized applications, and business-critical servers. It is the engine that powers much of today’s business infrastructure. St…
Oracle Linux released an update for nodejs-nodemon version 3.1.14 addressing CVE-2026-13149, available for x86_64 and aarch64 architectures via the Unbreakable…
OpenStack disclosed a flaw in its bare-metal management tool, the Ironic Python Agent (IPA), showing that it could accidentally fall back to local network disc…
Oracle Linux has released updated RPMs for version 10 addressing CVE-2026-13757, specifically re-basing to version 0.26.4 across various package subsets for x8…
An update for python313-certifi in openSUSE Tumbleweed addresses two vulnerabilities, including CVE-2022-23491 and CVE-2024-39689, with varying severity rating…
Fedora 44 has released BorgBackup 1.4.5, a deduplicating backup tool with compression and authenticated encryption, addressing a bugfix for CVE-2026-62268.
Debian LTS announced the fix of two integer overflow issues in the kissfft library for Debian 11 bullseye, recommending an upgrade to version 131.1.0-1+deb11u1.
The Fedora 43 update for GitPython version 3.1.55 addresses multiple vulnerabilities and optimizes object handling for large datasets in this Python library fo…
An update for openSUSE Tumbleweed addresses seven vulnerabilities in dnsdist-2.0.7-1.1, including multiple CVEs with varying levels of severity and impact.
Multiple vulnerabilities were discovered in the starlette ASGI framework, necessitating an upgrade to version 0.26.1-1+deb12u2 to address issues related to met…
Oracle Linux has released updated Java 25 RPM packages for version 10, addressing several CVEs and including various updates and changes to dependencies and do…
Oracle Linux 9 has received updates for Node.js addressing multiple CVEs, including fixes for vulnerabilities in npm's bundled packages, along with new version…
Oracle Linux has released kernel updates for version 10 addressing several CVEs, introducing new certificates, disabling signing for aarch64, and implementing …
