The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves 138 vulnerabilities and contains one feature can now be installed.
Two vulnerabilities were discovered in gst-plugins-ugly1.0, a set of GStreamer plugins from the "ugly" set. CVE-2026-2920 The ASF demuxer did not validate the …
Update to v3.0.50; contains fix for CVE-2026-32935
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in denial of service or the execution of …
An update that solves two vulnerabilities and has two fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that solves 13 vulnerabilities, contains one feature and has two security fixes can now be installed.
An update that solves 124 vulnerabilities and contains one feature can now be installed.
An update that fixes one vulnerability is now available.
A single unpatched server opens a path into systems that were never meant to be exposed, and because nothing appears broken, that access can remain in place fo…
An update that solves 657 vulnerabilities, contains four features and has 57 fixes can now be installed.
An update that solves five vulnerabilities, contains one feature and has one security fix can now be installed.
An update that solves five vulnerabilities, contains one feature and has one security fix can now be installed.
An update that solves five vulnerabilities, contains one feature and has one security fix can now be installed.
An update that solves five vulnerabilities, contains one feature and has one security fix can now be installed.
An update that solves five vulnerabilities, contains one feature and has one security fix can now be installed.
Kazuma Matsumoto discovered an integer overflow bug in the EAP-TTLS plugin of strongSwan, an IKE/IPsec suite. The EAP-TTLS plugin doesn't check the length fiel…
An update that fixes 26 vulnerabilities is now available.
An update that fixes 26 vulnerabilities is now available.
Use after free of paging structures in EPT [XSA-480, CVE-2026-23554] Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]
An update that solves five vulnerabilities, contains one feature and has one security fix can now be installed.
The Qualys Threat Research Unit (TRU) discovered a local privilege escalation vulnerability in snapd, a daemon and tooling that enable snap packages. Details c…
An update that solves 13 vulnerabilities, contains one feature and has one security fix can now be installed.