The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: kernel-rt security update
Important: grafana-pcp security update
Important: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine…
Important: grafana security update
Moderate: openssh security update
Important: kernel security update
Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver. CVE-2026-35501 (DNSSEC) Bypass of a configured isl…
Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc45 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compro…
Several vulnerabilities were discovered in Erlang/OTP, a programming language and runtime environment. These issues could result in denial of service, HTTP req…
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in IMAP command injection, …
Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc44 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the compro…
Update to the latest upstream release, which has security fixes for CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486.
Upgrade with minor security fixes
Update to 9.21.26 (rhbz#2489832) Security Fixes: Prevent excessive CPU use validating crafted DNSSEC responses. (CVE-2026-19668) Require a TSIG on every messag…
update to 3.5.0039 MaraDNS 3.5.0039 has been released. In addition to revamping how the cryptographic secure pseudo random number generator is seeded to be mor…
New upstream release.
Merge #6 Rebuild for CVE-2026-93600
Update to 1.8.1.3 (rhbz#2492929) Fix for CVE-2026-56123 (rhbz#2535043)
VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Switch GUI to Qt6 (not for EPEL9) Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP…
An update that can now be installed.
An update that solves one vulnerability and has two security fixes can now be installed.
An update that solves three vulnerabilities and has two security fixes can now be installed.
An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed.