CVE-2026-98432 Kernel Flaw: Ubuntu, RHEL, Debian Status
CVE-2026-98432 is a CVSS 9.8 Linux kernel TCP flaw. Fix status for Ubuntu, RHEL, Debian, Amazon Linux and SUSE, and how to prove each server is patched.
Read moreHTTP2Shell & Node2Shell: Patching CVE-2026-111497
CVE-2026-111497 is a CVSS 9.2 Brotli RCE in Node.js, Python and more. Fixed versions, distro status and how to find every copy on your servers.
Read moreeMudhra CA Compromise: Patching ca-certificates
Eight eMudhra CA keys were compromised. What Ubuntu, Debian, RHEL and Alpine shipped, plus the certifi, Node.js, Go and Java stores to fix too.
Read morePHP2Shell (CVE-2026-109618/109619): Patch Your PHP Fleet
PHP2Shell is fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. What Ubuntu, Debian, RHEL and Alpine shipped, and how to prove every server is patched.
Read moreDebian 11 & OpenSSL 3.0 EOL: Audit Your Fleet
Debian 11 LTS ends 31 August 2026, OpenSSL 3.0 on 7 September. How to audit your fleet for every instance hiding in container images, LXC and appliance VMs.
Read morecPanel CVE-2026-41940: The Authentication Bypass That Was Already in the Wild Before the Patch
A practical breakdown of the cPanel & WHM authentication bypass disclosed on 28 April 2026. How it works, which versions are patched, what to do right now, and how to confirm your hosting fleet is no longer exposed.
Read moreCopy Fail (CVE-2026-31431): What It Is, Why It Matters, and How to Patch Your Linux Fleet
A practical breakdown of the Copy Fail Linux kernel privilege escalation flaw. How it works, which kernels are affected, what the distros are shipping, and how to confirm your servers are actually patched.
Read moreThe Complete Guide to Linux Patch Management in 2026
Everything sysadmins need to know about managing patches across Linux servers - from package managers and security updates to automation, compliance, and tooling.
Read moreLinux Patch Compliance: What SOC 2 and ISO 27001 Actually Require
A practical breakdown of patching requirements for SOC 2, ISO 27001, PCI-DSS, and HIPAA - what auditors actually ask for, what evidence you need, and how to stop dreading audit season.
Read moreManaging Patches Across Mixed Linux Distributions: A Practical Guide
How to keep Ubuntu, RHEL, Alpine, Arch, and FreeBSD servers patched when your fleet runs five different package managers - without losing your mind.
Read moreThe Sysadmin's Guide to Patch Management Without Enterprise Bloat
You manage 50 servers, not 50,000. Here's how to build a patch management workflow that doesn't require a dedicated team, a Java application server, or a six-figure budget.
Read moreHow to Monitor FreeBSD Package Updates Across Your Fleet
FreeBSD gets ignored by most patch management tools. Here's how to track package updates, security advisories, and base system patches across your FreeBSD servers.
Read moreLinux Patch Management Basics
A practical guide to keeping your Linux servers up to date with security patches and updates.
Read more