Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Gentoo Linux has issued a high-severity security advisory regarding multiple vulnerabilities in libssh2, which could lead to remote code execution; affected us…
A security update for open-iscsi addresses two vulnerabilities related to remote file-write and authentication bypass, applicable to multiple SUSE Linux Enterp…
SUSE has released an important security update for python313, addressing 13 vulnerabilities across various functionalities and improving the handling of specif…
An update for nginx in Ubuntu addresses a regression caused by a previous security fix, reverting the change until further investigation on vulnerabilities is …
Ubuntu Security Notice USN-8651-1 warns of a curl vulnerability affecting multiple Ubuntu releases, allowing sensitive information exposure. Users should updat…
Ubuntu Security Notice USN-8639-1 addresses multiple vulnerabilities in libpng affecting various releases, potentially allowing denial of service or arbitrary …
Ubuntu addressed security vulnerabilities in Cap'n Proto affecting multiple LTS versions, which could allow HTTP request or response smuggling. Users should up…
Debian released a security advisory for firefox-esr addressing multiple vulnerabilities, recommending users upgrade to version 140.14.0esr-1~deb13u1 to mitigat…
Ubuntu Security Notice USN-8563-3 addresses nginx vulnerabilities affecting multiple versions, providing a better fix for CVE-2026-42533 and correcting issues …
Ubuntu Security Notice USN-8649-1 addresses several vulnerabilities in libheif affecting Ubuntu 26.04 LTS and 24.04 LTS, urging users to update their systems t…
Ubuntu Security Notice USN-8113-2 addresses vulnerabilities in LibTIFF for Ubuntu 26.04 LTS, allowing potential denial of service from improper memory handling…
A security update for Erlang has been released, addressing 19 vulnerabilities, including issues related to DNS cache poisoning, certificate forgery, and Denial…
A security update for Erlang addresses 19 vulnerabilities impacting various SUSE Linux distributions, including issues with DNS cache poisoning, certificate fo…
A security update for the gstreamer1-plugins-bad-free package on Rocky Linux 8 addresses a critical heap out-of-bounds write vulnerability, rated 7.6 on the CV…
Fedora 43 has released an update for perl-Imager version 1.034, fixing a security issue in EXIF decoding and addressing other improvements in image handling.
A security update is available for Pluggable Authentication Modules (PAM) on Rocky Linux 8, addressing a vulnerability related to plaintext password recovery i…
A security update has been released for the attr packages in Rocky Linux 8, addressing a symlink traversal privilege escalation vulnerability (CVE-2026-54371) …
Multiple security vulnerabilities in .NET affecting Ubuntu 26.04, 24.04, and 22.04 LTS were addressed, enabling potential request smuggling, information disclo…
Fedora 44 released a security update for Python 3.12.14, addressing vulnerabilities including denial of service issues and a tarfile extraction filter bypass. …
Fedora has released an update for Python 3.14.7, addressing vulnerabilities including DoS in the HTML parser and directory bypass in tarfile extraction, enhanc…
The Fedora 44 perl-Imager update 1.034 includes a security fix for CVE-2026-19082, enhances EXIF decoding, and resolves a TIFF seek error.
A recent security update for snphost addresses seven vulnerabilities in OpenSSL affecting various SUSE Linux products, with multiple CVEs linked to critical is…
A security update for PostgreSQL on Rocky Linux 9 addresses a critical denial of service vulnerability. Affected users should consult the CVE for further detai…
A security update for PostgreSQL 12 has been released for Rocky Linux 8, addressing a denial of service vulnerability via uncontrolled recursion in SSL/GSS neg…
