The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
KCoreAddons could be made to run programs as your login if it received specially crafted input.
Several security issues were fixed in OpenSSL.
libXpm could be made to crash if it opened a specially crafted file.
Important: gvfs security update
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
Security fix for CVE-2026-79655 Fixes a path traversal vulnerability in sos clean tar extraction where unvalidated symlink and hardlink targets could lead to a…
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
GStreamer Bad Plugins could be made to crash or run programs as your login if it opened a specially crafted file.
Important: ruby:2.5 security update