The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.
Moderate: nginx:1.24 security update
Several security issues were fixed in dracut.
An update that solves 139 vulnerabilities can now be installed.
An update that solves nine vulnerabilities and has five security fixes can now be installed.
An update that solves five vulnerabilities can now be installed.
An update that solves three vulnerabilities and contains one feature can now be installed.
An update that solves six vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves five vulnerabilities can now be installed.
Moderate: perl:5.32 security update
An update that solves eight vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 8 vulnerabilities can now be installed.
libmongoc 2.5.2 Fixes Fix OCSP error handling. CVE-2026-84964 Fix unsafe casts during JSON parsing. CVE-2026-84965 Fix possible unsafe truncation when logging …
An update that solves one vulnerability can now be installed.
An update that solves 9 vulnerabilities can now be installed.
An update that solves 5 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
Elixir ver. 1.19.6
Elixir ver. 1.20.4
Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m, GHSA-gmhf-fxfx-m2w9