Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This update contains new upstream releases containing bugfixes and improvements. Notably, it fixes an overflow in parsing RGBE/HDR image files. For more inform…
Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver, which could result in denial of service, cache poi…
Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity ev…
NSS Release Notes Update NSS to 3.129.0 Bug 2017322 - set CKA_NSS_SERVER_DISTRUST_AFTER for CN=Izenpe.com. Bug 2025246 - fix unknown key error type in ssl_SetA…
This is an upstream bug and security fix release. Please consult the upstream release notes for more details.
Most administrators do not think about BIND, browser engines, or cloud kernels until one of them fails.
Multiple vulnerabilities were discovered in nginx, a high-performance web and reverse proxy server, which may result in denial of service, memory disclosure or…
Update python-django5 to the latest 5.x release (5.2.17) Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups Fixes CVE-…
Update python-django5 to the latest 5.x release (5.2.17) Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups Fixes CVE-…
Update python-django5 to the latest 5.x release (5.2.17) Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups Fixes CVE-…
Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wedn…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
A buffer overflow was found in the ODML parser of MKVToolNix, a set of command-line tools (and GUI) to work with Matroska files, which could potentially result…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Container security can fail before a workload fully enters its root filesystem, the private file tree the container is meant to see.
The update for nginx released as DSA 6496-1 caused a regression in the nginx-dev package: the backported fix for CVE-2026-42533 declared two private header fil…
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service …
Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: https://rustsec.org/advisor…
Dancer2 générates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there.
Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: https://rustsec.org/advisor…
The urwid web display backend generates web session identifiers by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, whi…
Dancer2 générates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there.
Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: https://rustsec.org/advisor…
Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: https://rustsec.org/advisor…
