Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities (RUSTSEC-2026-020…
Rebuild asciinema with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346…
A buffer overflow was found in the "Eye of GNOME" graphics viewer program, which could possibly result in the execution of arbitrary code when opening a malfor…
Multiple vulnerabilities were found and fixed in Vim, an enhanced version of the standard UNIX editor Vi (Vi IMproved). A remote attacker could trigger arbitra…
Fix CVE-2026-111802
Fixup for CVE-2026-19553
Update to the latest upstream release Vulnerability fix CVE-2026-85518: Fix path traversal when dumping SDS components Maintenance, bug fix Lock test_file for …
Fix automated passwordless "ipsec import" support for PKCS12 files Fixes CVE-2026-77205, CVE-2026-77206, CVE-2026-77207 and CVE-2026-94453
fix CVE-2026-112036 (rhbz#2558213)
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security advisories …
Changes for version 1.656 Remove lock file on end of scope Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann) Memory corruption via selectrow_array…
Version 3.3.11 (September 16, 2026) Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots …
fix CVE-2026-112036 (rhbz#2558213)
Update to the latest upstream release Vulnerability fix CVE-2026-85518: Fix path traversal when dumping SDS components Maintenance, bug fix Lock test_file for …
Several vulnerabilities have been found in aiohttp, an asynchronous HTTP client/server framework for asyncio and Python. CVE-2025-53643 Request smuggling vulne…
Fix for CVE-2026-96512
WordPress 7.1.3 Maintenance and Security Release Security updates included in this release A stored XSS on the Comments administration page, exploitable via pe…
Update to 1.8.1.3 (rhbz#2492929) Fix for CVE-2026-56123 (rhbz#2535043)
Some bugs and vulnerabilities were fixed
This is new version of exim fixing CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057.
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)
