all products — latest versions

ISPsystem

security — the vendor's changelog says solikely security — the build is not in the changelog: by the vendor's rule that is an “update for technical reasons”, in practice security fixes ship this waypay attention — no changelog for the build (COREmanager core, pre-release branches): what changed is unknown

Linux kernels

nginx

SSH server

QEMU and libvirt

PowerDNS

Critical · urgent · major — the vendor's top rating, or no rating while CVEs are listed: red pill and barImportant · high · medium — the vendor's second ratingModerate · medium · low — the vendor's other ratingsthe rating is the vendor's: AlmaLinux Critical / Important / Moderate, Low; Fedora and EPEL urgent / high / medium, low; Ubuntu (USN OVAL) Critical / High / Medium, Low; nginx.org major / medium / low; modules — CVSS from the CVE record critical / high / medium, low; PowerDNS Critical, High / Medium / Lowskipped testing — the Fedora update went straight to stable, without testing (as Bodhi shows)Ubuntu pockets: proposed — published for testing, updates — released, security — released as a security fixdefault — what dnf install nginx installs without choosing a streamper PowerDNS — EPEL named no CVEs; the fixed CVEs come from the PowerDNS advisories (this version is fixed, the previous one in the branch is not)