Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This week’s Linux security updates cover several areas administrators cannot afford to overlook. Debian, Ubuntu, Fedora, SUSE, openSUSE, and other distribution…
A security update for python3.9 on Rocky Linux 9 addresses a critical vulnerability, allowing directory escape during tarfile extraction, rated with a CVSS sco…
A moderate security update for the kernel-rt on Rocky Linux 8 addresses vulnerabilities including a fix for partition descriptor bookkeeping and a double-free …
A security update for the Automatic Bug Reporting Tool in Rocky Linux 8 addresses multiple vulnerabilities, including arbitrary file writes and content injecti…
Fedora 44's linux-firmware package has been updated with numerous firmware updates for various devices including amdgpu, WiFi, Bluetooth, and ethernet, along w…
A moderate kernel security update is available for Rocky Linux 8, addressing issues related to partition descriptor bookkeeping and a double-free bug, with ass…
A moderate security update for python-idna has been released for Rocky Linux 8, addressing a denial of service vulnerability identified as CVE-2026-45409.
A vulnerability in xdg-dbus-proxy allowed malicious Flatpak applications to monitor D-Bus signals; this has been fixed in version 0.1.6-1+deb13u2 for Debian's …
Debian has issued an advisory regarding multiple vulnerabilities in the Xorg X server that could lead to privilege escalation and denial of service, urging upd…
Debian's xorg-server package has several vulnerabilities that may allow privilege escalation and crashes if exploited; users are advised to upgrade to the late…
Ubuntu issued a security notice for a vulnerability in node-follow-redirects affecting multiple LTS releases, allowing potential exposure of sensitive informat…
Fedora 43 has updated cri-o to version 1.34.11, addressing CVE-2026-34986 and resolving specific bugs while providing upstream fixes for enhanced stability and…
Fedora has released an update for vaultwarden to version 1.37.1, addressing several CVEs and patched vulnerabilities, enhancing the security of this unofficial…
The Fedora update addresses vulnerabilities CVE-2026-11822 and CVE-2026-11824 in SQLite 3.51.2, enhancing security against arbitrary code execution and buffer …
Fedora 44 has released apr-util version 1.6.5 with security fixes, enhancing its Apache Portable Runtime Utility library for better handling of XML, LDAP, and …
The Fedora 44 update for libcupsfilters version 2.1.1 includes security fixes for CVE-2026-64611 and CVE-2026-64612, addressing potential vulnerabilities in pr…
Fedora has released an update for cri-o version 1.34.11, addressing a denial of service vulnerability and providing upstream fixes, with installation instructi…
Fedora 44 has released an update for vaultwarden version 1.37.1, addressing multiple vulnerabilities, including a significant denial of service issue and other…
SUSE released a moderate security update for gzip to address CVE-2026-41992, involving a global buffer overflow vulnerability. Users are advised to apply the u…
Ubuntu released security updates for libgit2 addressing multiple vulnerabilities that could allow remote code execution, denial of service, and credential leak…
openSUSE has released a critical security update for chromium, addressing 41 vulnerabilities including various memory management issues and insufficient input …
A moderate security update for resource-agents in Rocky Linux 8 addresses an information disclosure vulnerability, enhancing protection in high-availability en…
A security update for libgcrypt in Rocky Linux 8 addresses a denial of service and buffer overflow vulnerability (CVE-2026-41989), rated with a CVSS score of 7…
Debian's advisory DLA-4736-1 addresses two Django vulnerabilities: potential denial-of-service from long language codes and cross-site scripting via unvalidate…
