Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Fedora 43 update for php-phpseclib3 to version 3.0.56 fixes vulnerabilities CVE-2026-40194 and CVE-2026-44167, improving security for the PHP Secure Commun…
A significant update for PHP and various modules in Rocky Linux 9 addresses critical vulnerabilities, including SQL injection and denial of service issues, enh…
Ubuntu released a security update addressing multiple vulnerabilities in PostgreSQL across various versions, allowing potential arbitrary code execution and se…
SUSE released a security update for openssl-3-livepatches addressing two vulnerabilities related to a DoS attack, affecting several SUSE products with installa…
SUSE has released a security update for podman addressing two vulnerabilities that could modify host filesystem and leak environment variables, impacting vario…
A podman security update addresses two vulnerabilities affecting various SUSE products, allowing exploitation of symlinks and leaking of host environment varia…
Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP…
Oracle Linux 10 has updated glib2 packages available, addressing multiple CVEs including buffer overflows and validation issues to enhance security and system …
Oracle Linux Security Advisory ELSA-2026-56971 announces updated rpms for version 10 to address CVE-2026-60075, fixing a potential regex DoS vulnerability in d…
Oracle Linux 10 has received an update with various kernel RPMs addressing multiple CVEs, enhancing security and adding new certificates, along with numerous b…
Oracle Linux 9 has released security updates for the Performance Co-Pilot (PCP) package, addressing multiple vulnerabilities and adding various enhancements an…
Oracle Linux updated multiple Node.js packages to address several CVEs, including vulnerabilities related to memory exhaustion and IP address issues, improving…
Oracle Linux 9 has released updated bind9 packages addressing multiple security vulnerabilities, including issues related to NSEC3 validation and cache exhaust…
Oracle Linux has released updated RPMs for version 8 to address security vulnerabilities related to GStreamer plugins, specifically correcting several CVEs in …
Oracle Linux 8 has released updates for gstreamer1-plugins-bad-free including security fixes for CVE-2026-19387 and CVE-2026-59692, available through the Unbre…
Oracle has released updated RPMs for Oracle Linux 8 that include security fixes for CVE-2026-11940, with packages for various architectures now available on th…
Oracle Linux 8 updated packages for PAM address security issues, including a fix for a use after free vulnerability and a timing leak in password comparisons, …
Oracle Linux Security Advisory ELSA-2026-56130 details updated rpms for Oracle Linux 8, including sg3_utils packages addressing CVE-2026-16313 and related chan…
Oracle Linux Security Advisory ELSA-2026-55804 details updates for Oracle Linux 8, addressing CVE-2026-58055 related to HTTP request smuggling and response-que…
Oracle Linux 8 has received several updated RPM packages in relation to security vulnerabilities, introducing enhancements and bug fixes across various Perform…
A security update for gstreamer1-plugins-good addresses vulnerabilities affecting Rocky Linux 8, including memory growth and potential out-of-bounds errors, en…
A security update for java-21-openjdk on Rocky Linux 8 addresses vulnerabilities improving resource resolving, HTTP connections, and TLS servers, with multiple…
Gentoo Linux has issued a security advisory for quickjs-ng due to multiple vulnerabilities, particularly one that could allow arbitrary code execution, urging …
A vulnerability in Emacs allows arbitrary code execution by tricking users into opening malicious files, prompting a recommended upgrade for affected versions …
