Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A security update for dracut has been released, addressing a vulnerability in Rocky Linux 10 that could allow root code execution through an unescaped error me…
A security update for dracut resolves vulnerability CVE-2026-15816, allowing root code execution, impacting several SUSE and openSUSE products. Installation gu…
SUSE has released a security update for dracut addressing CVE-2026-15816, which allows root code execution via an unescaped error message. Users are advised to…
SUSE released a security update for dracut addressing CVE-2026-15816, which allows root code execution. Various affected products include openSUSE Leap 15.6 an…
SUSE released a security update for dracut to address CVE-2026-15816, fixing a root code execution vulnerability. Users are recommended to apply the update via…
SUSE has released a security update for dracut addressing CVE-2026-15816, which allows root code execution via unescaped error messages, impacting several SUSE…
Bubblewrap contains a high-severity vulnerability that allows root privilege escalation when used in suid mode; users are advised to upgrade to version 0.11.2 …
Gentoo Linux has issued a high-severity security advisory for Apache HTTPD, highlighting multiple vulnerabilities that could allow remote code execution, urgin…
A significant security update for FreeRDP on Rocky Linux 10 addresses multiple vulnerabilities, including remote code execution and denial of service risks, re…
Debian announced the fix for multiple vulnerabilities in SPIP, including remote code execution and SQL injection risks, recommending users upgrade their spip p…
SUSE announced an important security update for dracut addressing a root code execution vulnerability (CVE-2026-15816) in several SUSE Linux Enterprise product…
A security update for dracut addresses a critical vulnerability, CVE-2026-15816, which allows root code execution via unescaped error messages in emergency-hoo…
Mageia has released updates for rootcerts, nss, and firefox packages addressing multiple vulnerabilities, affecting versions 10 and 9, including CVE-2026-15718…
A remote-code vulnerability in Redis was identified, leading to a double-free risk if an authenticated attacker uses a malicious `RESTORE` command, now patched…
Debian released an advisory regarding two vulnerabilities in 7-Zip that could lead to remote code execution and content spoofing, urging users to upgrade to th…
Debian's security advisory DSA-6412-1 addresses multiple vulnerabilities in the botan3 cryptography library, recommending an upgrade to version 3.12.0 to mitig…
Oracle Linux 8 has released updated Dovecot packages to address CVE-2026-42006, which fixes an IMAP parser issue, with RPMs available for x86_64 and aarch64 ar…
Fedora has released Valkey 9.0.5 with security fixes addressing remote code execution vulnerabilities and numerous bug fixes, enhancing performance and stabili…
SUSE has released an important update for valkey addressing two vulnerabilities that allow remote code execution. Systems must be updated using the recommended…
Rocky Linux 9 has released a critical PHP update addressing multiple vulnerabilities, including remote code execution and denial of service, as detailed in the…
A critical security update for Dovecot on Rocky Linux 8 addresses a Denial of Service vulnerability (CVE-2026-42006), impacting the server's operation and requ…
openSUSE released an important security update for jline3, addressing two vulnerabilities related to unauthenticated remote memory exhaustion and DoS attacks, …
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted H…
Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
