Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
A vulnerability has been discovered in Ruby, possibly allowing remote code execution.
Several vulnerabilities were discovered in SPIP, a website engine for publishing, which could result in unauthenticated remote code execution. For the stable d…
Flatpak could be made to access files outside its sandbox or delete arbitrary files on the host.
Rocky Linux 9 has released an important security update for python-urwid addressing a vulnerability that could lead to remote code execution and information di…
A security update for gstreamer1-plugins-good on Rocky Linux 9 addresses multiple vulnerabilities, including remote code execution risks from buffer overflows …
A security update for gstreamer1-plugins-good in Rocky Linux 10 addresses critical vulnerabilities, including remote code execution risks via heap-based buffer…
Fedora has released an update for calibre, version 9.13.0, enhancing its e-book management features and addressing several vulnerabilities including potential …
A significant security update for python-urwid on Rocky Linux 8 addresses a vulnerability that could lead to remote code execution and information disclosure, …
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
Fedora has released WordPress version 6.9.7, addressing multiple security vulnerabilities, including remote code execution and stored cross-site scripting issu…
Gentoo Linux has issued a high-severity security advisory regarding multiple vulnerabilities in libssh2, which could lead to remote code execution; affected us…
A security update for open-iscsi addresses two vulnerabilities related to remote file-write and authentication bypass, applicable to multiple SUSE Linux Enterp…
A vulnerability in SPIP could allow unauthenticated remote code execution; an update has been released for the stable distribution, and users are advised to up…
A security update for redis7 addresses CVE-2026-66373, a vulnerability allowing remote code execution, affecting several SUSE and openSUSE products with instal…
A security update for redis7 addresses a critical remote code execution vulnerability (CVE-2026-66373), applicable to various SUSE and openSUSE products, with …
SUSE released a security update for Redis addressing a critical vulnerability (CVE-2026-66373) that allows remote code execution, affecting multiple SUSE produ…
A significant Redis security update addresses CVE-2026-66373, affecting various SUSE products, allowing remote code execution via a RESTORE payload. Users are …
SUSE has released an important security update for Redis addressing CVE-2026-66373, which allows remote code execution. Users on specific SUSE platforms are ad…
A security update for Redis addresses a vulnerability (CVE-2026-66373) that allows remote code execution. Affected products include SUSE Linux and openSUSE, wi…
A SUSE security update addresses CVE-2026-66373, fixing a vulnerability in redis7 that allows remote code execution affecting several SUSE and openSUSE product…
A security update for redis7 addresses the CVE-2026-66373 vulnerability, allowing remote code execution via a RESTORE payload, affecting several SUSE products.…
Ubuntu has resolved multiple security vulnerabilities in c3p0, a JDBC connection pooling library, affecting various LTS versions, potentially allowing remote c…
