Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Changes: 6.17 2026-05-19 23:11:06Z Fix CVE-2026-8450 (affects 6.15 and earlier): 2-arg open() in send_file() enabled RCE / arbitrary file write / response-body…
An update that solves five vulnerabilities can now be installed.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
Update to SDL2_image 2.8.12, fixes CVE-2026-35444.
Important: rsync security update
The system could be compromised under certain conditions.
The compromise of Nx Console shows how much infrastructure now sits behind a single developer account. GitHub repositories, CI/CD pipelines, container build sy…
You remove the malware. You rotate the compromised credentials. You patch the original vulnerability and close the ticket. Two weeks later, the attacker is bac…
An update that solves one vulnerability can now be installed.
Important: jq security update
Several vulnerabilities were discovered in the Exim mail transport agent, which may result in remote code execution, denial of service or an information leak. …
Three security vulnerabilities were discovered in python-authlib, a python library which builds OAuth and OpenID Connect servers, that can cause authentication…
Prosody 13.0.5 Upstream is pleased to announce a new minor release from their stable branch. This is a security release for the Prosody 13.0.x stable series. I…
Important: git-lfs security update
Important: tigervnc security update
Moderate: libsoup security update
Three security vulnerabilities were discovered in libexif, a library to reads and writes EXIF metainformation from and to images files, that can causes crashes…
Multiple vulnerabilities were discovered in dovecot, a POP3/IMAP server, which could lead to Denial of Service, information leak, path traversal, authenticatio…
An update that solves one vulnerability and has one security fix can now be installed.
An update that solves seven vulnerabilities can now be installed.
Several security issues were fixed in Python marshmallow.
Update the package, including fix for CVE-2026-34080. See also: upstream security advisory
Several security issues were fixed in follow-redirects.
Backport fix for race condition leading to root compromise (GHSA-f55j-vvr9-69xv)
