Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
fix CVE-2026-7233 (rhbz#2463402)
Update to 3.11.0
Fixes CVE-2026-58101 and CVE-2026-58102
Update routinator to the latest, pulling in updated dependencies (rpki and syslog), and switch fern to using syslog 7 instead of 6 for this update, and loosen …
Update routinator to the latest, pulling in updated dependencies (rpki and syslog), and switch fern to using syslog 7 instead of 6 for this update, and loosen …
Multiple vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in cross-site scripting, se…
An update that solves eight vulnerabilities, contains two features and has three security fixes can now be installed.
An update that solves seven vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that has one security fix can now be installed.
An update that solves 44 vulnerabilities, contains two features and has five security fixes can now be installed.
An update that solves one vulnerability can now be installed.
An update that fixes 8 vulnerabilities is now available.
Important: httpd:2.4 security, bug fix, and enhancement update
Important: httpd:2.4 security, bug fix, and enhancement update
AccountsService could be made to run programs as an administrator if it opened a specially crafted file.
It was discovered that there was a potential buffer overflow in xz-utils, a popular data-compression utility and library. CVE-2026-34743 If the lzma_index_deco…
Several security issues were fixed in ImageMagick.
Several security issues were fixed in jbig2dec.
AccountsService could be made to run programs as an administrator if it opened a specially crafted file.
OpenSSH could allow unintended access to network services.
CUPS could be made to run programs as the lp user if it received specially crafted print job requests.
Several security issues were fixed in snapd.
It was discovered that there was a origin-validation error in rtpengine, an open-source media proxy for real-time audio and video traffic. CVE-2025-53399 The e…
