Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
CVE-2025-59438 Observable Timing Discrepancy. The presence of a padding error could leak through timings, enabling the attacker to recover information about th…
Backport fix for race condition leading to root compromise (GHSA-f55j-vvr9-69xv)
Update to 0.6.26, fixing several CVEs https://github.com/libexif/libexif/releases/tag/v0.6.26
fix bad reuse of HTTP Negotiate connection (CVE-2026-1965) fix token leak with redirect and netrc (CVE-2026-3783) fix wrong proxy connection reuse with credent…
Update to 0.6.26, fixing several CVEs https://github.com/libexif/libexif/releases/tag/v0.6.26
An update that solves one vulnerability can now be installed.
An update that solves two vulnerabilities and has two fixes can now be installed.
Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosu…
An update that solves six vulnerabilities can now be installed.
Important: perl-YAML-Syck security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service, information leaks, or potentia…
The first week of April 2026 marked a significant escalation in supply chain tactics. A coordinated campaign involving 36 malicious npm packages, disguised as …
Update to 9.21.20 (rhbz#2440560) Security Fixes: Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. (CVE-2026-1519) Fix memory l…
An update that solves one vulnerability can now be installed.
An update that solves two vulnerabilities can now be installed.
Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python…
Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect)
n8n (CVE-2025-68613) is an open-source automation tool used to connect APIs, databases, and SaaS apps into workflows. It is commonly used to move data between …
An update that solves four vulnerabilities can now be installed.
FreeType could be made to leak sensitive information.
An update that solves four vulnerabilities can now be installed.
Several security issues were fixed in curl.
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to inform…
