Known vulnerabilities

Software on the latest patch release

Published CVEs affecting the software versions your servers reveal.

Why it matters

Patch releases are how vendors ship security fixes. Running an older patch means missing fixes that are already public - attackers compare releases to find what was fixed.

How to fix it

Quick fix · under 1 hour
  1. Install the latest patch release of the same line (no feature changes, low risk).
  2. Enable automatic security updates so future patches arrive without waiting for a scan.
  3. Re-run the scan to confirm.
Debian / Ubuntu
sudo apt update && sudo apt upgrade
sudo apt install unattended-upgrades && sudo dpkg-reconfigure unattended-upgrades
RHEL / Alma / Rocky
sudo dnf upgrade --security

How we test it

The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.

Does your domain pass this check?

Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.

Scan your domain free