Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This announcemen…
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks, emerging vulnerab…
Update the rustls crate to version 0.23.17. Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 (stack overfl…
Update the rustls crate to version 0.23.17. Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 (stack overfl…
Researchers from Qualys recently revealed critical vulnerabilities in the Linux utility needrestart . This tool is an indispensable resource for administrators…
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
A buffer overflow with long SOCKS4a proxy hostname and username has been fixed in the GNOME Input/Output library (GIO). For Debian 11 bullseye, this problem ha…
Multiple decade-old security vulnerabilities have been disclosed in the needrestart package installed by default in Ubuntu Server (since version 21.04) that co…
CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (fedora#2325238) 2325241 - CVE-2024-46952 CVE-2024-46953 CVE-20…
CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (fedora#2325237) 2325240 - CVE-2024-46952 CVE-2024-46953 CVE-20…
For Linux administrators, maintaining system security involves several critical and complex tasks. Implementing kernel lockdown helps protect the system from u…
Linus Torvalds, the revered leader of the open-source movement, has shown that even minute changes can make a significant difference. A relatively small recent…
Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 Convert to %autorelease and %autochangelog Simplify spec Remove checks on if systemd is present Remov…
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed:
This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed:
This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed:
As cyber threats evolve and increasingly target Linux systems critical to our digital infrastructure, more advanced quality assurance (QA) methods are needed t…
In this digital age, Linux servers face unprecedented challenges posed by cyber threats. These, in turn, introduce new vulnerabilities that system administrato…
Red Hat recently discovered a severe flaw in the NetworkManager-libreswan plugin, allowing local attackers to escalate privileges and gain root access to impac…
Multiple vulnerabilities were discovered in libsepol, a set of userspace utilities and libraries for manipulating SELinux policies. CVE-2021-36084, CVE-2021-36…
A new Spectre bypass exploit has exposed vulnerabilities in recent Intel processors and older AMD microarchitectures running Linux, with severe ramifications f…
The fixes for CVE-2024-38474 and CVE-2024-39884 introduced two regressions in mod_rewrite and mod_proxy. For Debian 11 bullseye, these problems have been fixed…
An attacker-friendly vulnerability in Linux systems has been discovered, allowing malicious actors to circumvent the noexec mount flag and execute malicious co…
Like any OS, Linux, renowned for its robust security features , also has vulnerabilities. Although it is still a popular choice for servers and other critical …
