Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux s…
Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package…
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project t…
Looking for a secure, lightweight Linux distro? If so, Alpine Linux might be a breath of fresh mountain air for you!
CVE-2020-14929 Alpine before 2.23 silently proceeds to use an insecure connection
Important: jq security update
Important: kernel security update
Important: sudo security update
Important: .NET 8.0 security update
Moderate: kernel-rt security update
Important: perl-YAML-Syck security update
Important: container-tools:rhel8 security update
2.23 fixes CVE-2020-14929 (#1850048,#1850047) and new version (#1848786)
2.23 fixes CVE-2020-14929 (#1850048,#1850047) and new version (#1848786)
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are config…
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's…
A flaw in APT, the tool that installs software on Debian and Ubuntu, could let an attacker replace a package after it passed a security check.
It was discovered that missing validation of event data in the agent of the Puppet configuration management system could result in code execution on the Puppet…
A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management in…
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege es…
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The atta…
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
