Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 45 Updates Rust Cargo Semver Checks and Dependencies
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Fedora 45 rust-clap-cargo Update Includes RustSec Fixes
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Fedora 43 WebKitGTK Update Fixes Sandbox and Rendering Issues
Update to version 2.54.2. Fix performance when compositing layers with backdrop filters. Fix prewarmed web process leak when they are rejected due to sandboxin…
Fedora 43 libinstpatch Update Fixes SoundFont Denial-of-Service
Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak.
Fedora libinstpatch 1.1.8 Fixes SoundFont Denial-of-Service Vulnerability
Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak.
Fedora 43 perl-Plack Update Fixes Request Handling Issues
A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plac…
Fedora 43 Plack Middleware Fixes Memory Leak and Path Issues
A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plac…
Fedora 44 WebKitGTK 2.54.2 Fixes and Improvements Overview
Update to version 2.54.2. Fix performance when compositing layers with backdrop filters. Fix prewarmed web process leak when they are rejected due to sandboxin…
Fedora 45 ca-certificates Update Removes emSign Root CS CA
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc45 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compro…
Fedora 44 Removes emSign Root CS CA G3 from ca-certificates
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc44 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compro…
Debian Trixie AIDE Update Blocks Malicious File Detection Bypass
Two vulnerabilities were discovered in aide, an advanced intrusion detection system, which could allow a local user to bypass the detection of malicious files.…
Fedora 43 Removes the emSign Code Signing Certificate from Its Trust Store
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc43 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compro…
Fedora 43 rust-rustls-webpki Update for eMudhra CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 43 rust-webpki-root-certs Fixes eMudhra CA Trust Issue
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 43 Updates rust-webpki-roots After CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
openSUSE cyrus-sasl Update Fixes DIGEST-MD5 Client Compromise
An update that solves one vulnerability can now be installed.
Ubuntu NSS Update Removes Compromised Certificate Authority Roots
The CA certificates in the nss package were updated.
Fedora 44 Updates rust-webpki-roots After eMudhra CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 44 Updates Rust Certificate Roots After CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 44 Updates rustls-webpki After eMudhra CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Debian LTS Firefox ESR Blocks Compromised eMudhra Certificates
This update blocks compromised intermediate certificates issued by the eMudhra CA. Most users will have these certs already blocked by the OneCRL feature provi…
Debian Firefox ESR Update Blocks Access to eMudhra Certificates
This update blocks compromised intermediate certificates issued by the eMudhra CA. Most users will have these certs already blocked by the OneCRL feature provi…
Ubuntu ca-certificates Update Removes Compromised Root CAs
The CA certificates in the ca-certificates package were updated.
Fedora 43 perl-Net-IDN-Encode Fixes Punycode Read and Data Leak
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak …