Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability and has one bug fix can now be installed.
MGASA-2026-0017 - Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities
Resolve CVE-2025-14242
MGASA-2026-0016 - Updated avahi packages fix security vulnerabilities
Kyu Neushwaistein discovered that telnetd from inetutils does not sanitize the USER environment variable before passing it on to login. A remote attacker can t…
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Zoom and GitLab have released security updates to resolve a number of security vulnerabilities that could result in denial-of-service (DoS) and remote code exe…
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
This is new exim version fixing CVE-2025-67896.
In cybersecurity, the line between a normal update and a serious incident keeps getting thinner. Systems that once felt reliable are now under pressure from co…
MGASA-2026-0012 - Updated gimp packages fix security vulnerabilities
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.
An update that solves four vulnerabilities can now be installed.
Backport upstream patches for CVE-2025-69217 (#2425955)
Backport upstream patches for CVE-2025-69217 (#2425955)
GnuPG could be made to crash or run programs if it received specially crafted network traffic.
GnuPG could be made to crash or run programs if it received specially crafted network traffic.
If you manage Linux systems long enough, you start to notice that most security conversations are not really about attackers or tools. They are about pressure.…
Backport fix for CVE-2025-14439/GHSA-grjp-54v3-c442
The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defende…
An update that fixes 14 vulnerabilities is now available.
It’s getting harder to tell where normal tech ends and malicious intent begins. Attackers are no longer just breaking in — they’re blending in, hijacking every…
Update to 1.22.0
