Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Ceph could allow unintended access to network services.
Three vulnerabilities were discovered in FreeCAD, an open-source multiplatform 3D parametric modeler, which could result in arbitrary code execution, arbitrary…
Several vulnerabilities were discovered in wordpress, a web blogging tool, which could result in cross-site scripting, privilege escalation or remote code exec…
Multiple security vulnerabilities were discovered in the Lemonldap::NG web SSO system, which could result in a bypass of access controls, authorisation bypass …
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
A vulnerability has been discovered in Ruby, possibly allowing remote code execution.
Several vulnerabilities were discovered in SPIP, a website engine for publishing, which could result in unauthenticated remote code execution. For the stable d…
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service, information disclos…
Flatpak could be made to access files outside its sandbox or delete arbitrary files on the host.
Update to Net-DNS 1.56 (from 1.53). Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - Denial of Service via long …
Update to Net-DNS 1.56 (from 1.53). Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - Denial of Service via long …
Rocky Linux 9 has released an important security update for python-urwid addressing a vulnerability that could lead to remote code execution and information di…
A security update for gstreamer1-plugins-good on Rocky Linux 9 addresses multiple vulnerabilities, including remote code execution risks from buffer overflows …
A security update for gstreamer1-plugins-good in Rocky Linux 10 addresses critical vulnerabilities, including remote code execution risks via heap-based buffer…
Fedora has released an update for calibre, version 9.13.0, enhancing its e-book management features and addressing several vulnerabilities including potential …
A significant security update for python-urwid on Rocky Linux 8 addresses a vulnerability that could lead to remote code execution and information disclosure, …
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
Fedora has released WordPress version 6.9.7, addressing multiple security vulnerabilities, including remote code execution and stored cross-site scripting issu…
Linux kernel fuzzing service syzbot has reported an out-of-bounds array access in print_bpf_insn(), a routine used to turn BPF instructions into readable verif…
Gentoo Linux has issued a high-severity security advisory regarding multiple vulnerabilities in libssh2, which could lead to remote code execution; affected us…
A security update for open-iscsi addresses two vulnerabilities related to remote file-write and authentication bypass, applicable to multiple SUSE Linux Enterp…
A vulnerability in SPIP could allow unauthenticated remote code execution; an update has been released for the stable distribution, and users are advised to up…
A security update for redis7 addresses CVE-2026-66373, a vulnerability allowing remote code execution, affecting several SUSE and openSUSE products with instal…
