Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 (denial of service via crafted channel messages in golang.org/…
Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 (denial of service via crafted channel messages in golang.org/…
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Removed included patches version 3.7.13 (bcl) maint: Update to latest gnulib and bootstrap script (bcl) parted: Fix partition number allocation in do_print (bc…
Disable outdated functionality which requires outdated SDL1. Fix for CVE-2026-57160
Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 (denial of service via crafted channel messages in golang.org/…
FreeIPA 4.13.4 security release Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of ar…
An update that solves one vulnerability can now be installed.
An update that solves 153 vulnerabilities can now be installed.
Latest security bugfix release from upstream. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.4 . Resolves a number of vulnerabilities. Split…
An update that solves 18 vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.
Multiple issues were found in libde265, an open source implementation of the H.265 video codec, which potentially may result in denial of service, heap/buffer …
An update that solves one vulnerability can now be installed.
An update that solves 63 vulnerabilities can now be installed.
Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver, which could result in denial of service, cache poi…
ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. JWT.decode(token, '', true, algorithm: 'HS256') accepts an attacker-forged tok…
Add a patch to validate clickable preview elements in the Mail. Fixes CVE-2026-88859.
Patch stb_sprintf: security fix for CVE-2026-79516
Update to 153.0.8010.36, it fixes 230 CVEs: CVE-2026-87429 - CVE-2026-87658
3.2.6
Add a patch to validate clickable preview elements in the Mail. Fixes CVE-2026-88859.
This rpm updates included resolv gem to 0.7.2 to resolve CVE security issues.
