Know when your software needs an update
Enter the software you run, ideally with its version, for example PHP 8.3.30, nginx 1.26 or the package php8.2 on Debian 12. Erseni Patch writes to you as soon as there is something to do.
Matched to your version Debian and Ubuntu backports End-of-support warnings Free
Vulnerabilities in exactly your version
We match every new vulnerability against your version and name the version you need to update to. Vulnerabilities that are already being exploited are reported straight away.
Debian and Ubuntu packages
For distribution packages we check against the package version of the distribution. A vulnerability that Debian or Ubuntu has already closed with a backport is not reported.
End of support in sight
We let you know 90 and 30 days before your release branch stops getting security updates, and once more when it happens.
Known security vulnerabilities
From PHP2Shell to Log4Shell: affected and fixed versions, exploitation status and the fix in Debian and Ubuntu.
PHP2Shell
Two memory flaws in PHP that can lead to remote code execution, actively exploited since October 2026.
Log4Shell
Code execution through a single log message in Apache Log4j 2, rated CVSS 10.0.
regreSSHion
A race condition in sshd from Portable OpenSSH 8.5p1 to 9.7p1 that can lead to root code execution.
XZ Backdoor
Malicious code in the upstream tarballs of XZ Utils 5.6.0 and 5.6.1 that changes liblzma.
Heartbleed
The TLS heartbeat in OpenSSL 1.0.1 to 1.0.1f returned memory of the server process, private keys included.
Shellshock
Bash up to 4.3 ran commands hidden behind function definitions in environment variables.
Software A-Z
Latest version, end of support and known vulnerabilities for every program in our catalogue.
Free
Erseni Patch is free in this version. Important vulnerabilities (CVSS 9 or higher, or actively exploited) arrive straight away, everything else once a day as a summary.