About SecureRoot

SecureRoot is a free, independent site that helps people who run Linux and Unix servers patch quickly and recover when something goes wrong.

What you will find here

• Vulnerabilities that matter now, rebuilt every hour from official sources, with fixed package versions and the commands to patch on each system.
• Guides for every major system: how to update, which releases are still supported, and how to automate updates safely.
• Emergency help: calm, step-by-step instructions for ransomware, hacked websites, lockouts, broken updates and more.

How the vulnerability list is made

A small program on our server reads the public data feeds listed on Our sources once an hour. It keeps vulnerabilities in software commonly used on Linux and Unix servers that are exploited in the wild, rated critical, or rated high in core components, and builds a page for each one. Fix status comes directly from the Debian, Ubuntu and Red Hat security trackers. For the most important vulnerabilities an editor adds checked instructions and workarounds.

What we do not do

• We are not a vendor, a CERT or an official body, and we do not speak for them. Always confirm with your vendor's advisory.
• We do not sell products, place ads or track visitors.
• We cannot log in to your systems or handle incidents for you. If you are under attack, follow the emergency guides and contact your hosting provider or a security professional.