Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Mageia has released updates for acl and attr packages addressing multiple security vulnerabilities identified by CVE-2026-54369, CVE-2026-54370, and CVE-2026-5…
Oracle Linux 10 has received updates for Node.js packages addressing multiple CVEs, including enhancements and security fixes, ensuring improved software perfo…
Oracle Linux has released security updates for version 8, addressing packet parsing issues in frr related to CVE-2026-37460, with updated RPMs available for x8…
Oracle Linux 8 has received security updates, including fixes for CVE-2026-14355 related to memory corruption in OpenSSL, along with various package updates an…
Oracle Linux 8 has released security updates including PHP 8.2.32 and libzip 1.7.3, addressing CVE-2026-14355, with multiple related packages uploaded to the U…
Oracle Linux Security Advisory ELSA-2026-25172 details updates for rsync addressing multiple CVEs, including CVE-2026-41035, with specific version changes for …
Debian's security advisory addresses multiple vulnerabilities in ruby2.7, including Denial of Service, credential exposure, buffer overflow, and deserializatio…
Fedora has released an update for the rust-ammonia crate, upgrading to version 4.1.4 to address specific security vulnerabilities and improving HTML sanitizati…
A security update for perl-DBI addresses six vulnerabilities in SUSE Linux Enterprise products, including issues leading to arbitrary code execution and potent…
A security update for xen has been released, addressing 15 vulnerabilities across various SUSE products, with instructions for installation and the need to reb…
A security update for libssh addresses seven vulnerabilities affecting various SUSE Linux products, requiring installation of patches to mitigate risks such as…
A SUSE security update has been released for libssh addressing seven vulnerabilities across multiple products, enhancing system integrity and mitigating denial…
Oracle released updates for Oracle Linux 10 to address CVE-2026-9538, enhancing security by fixing a vulnerability in the Archive-Tar package that could lead t…
Oracle Linux has released security updates for version 10, addressing CVE-2026-5056 related to integer overflow and bounds check vulnerabilities in uncompresse…
Oracle Linux Security Advisory ELSA-2026-48170 announces updated RPM packages for PHP version 8.3.32 for x86_64 and aarch64 architectures, addressing vulnerabi…
Oracle has released updates for Oracle Linux 9, addressing security vulnerabilities related to input validation, AVC issues, and ignored routes with specific R…
Oracle Linux Security Advisory ELSA-2026-24342 announces the release of updated Python Tornado packages for Oracle Linux 7 addressing CVE-2026-31958 and CVE-20…
SUSE released a security update for nginx addressing three vulnerabilities including heap buffer overflows and a remote denial of service, applicable to variou…
A security update for rrdtool addresses a vulnerability (CVE-2026-43958) involving a stack buffer overflow that could lead to local privilege escalation in var…
A security update for containerd addresses four vulnerabilities, including a significant denial of service risk, affecting various SUSE Linux Enterprise produc…
SUSE released an important security update for bind addressing eight vulnerabilities affecting various SUSE Linux products, including fixes for issues related …
SUSE released a security update for perl-HTTP-Date to address CVE-2026-14741, which can cause CPU exhaustion from regex backtracking. Users should apply the up…
SUSE released a security update for gawk addressing three vulnerabilities, including use-after-free, integer overflow, and buffer overflow, recommended for aff…
SUSE released a security update for perl-Net-DNS addressing CVE-2026-64194, which may allow DoS attacks through unbounded recursion in DNS packet processing.
