The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.0.2 (rhbz#2560278) Patch CVE-2026-109438 (rhbz#2553107, rhbz#2553106)
New version of the Python interpreter New version of Python 3.13. There are no significant changes.
Valkey 8.1.11 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Securit…
Update to upstream 2.6.5 which includes a number of security fixes, see https://github.com/openbao/openbao/releases/v2.6.5. Also fixes golang CVE-2026-111943 b…
New version of the Python interpreter
libmongoc 1.30.14 Fixes Fix handling of large usernames for GSSAPI on Windows. CVE-2026-114645
Rebuilt with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which shou…
Rebuilt with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which shou…
Rebuilt with the latest Rust dependencies, addressing at least RUSTSEC-2026-0190.
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in guest-to-host privilege escalation or information disclosure. For th…
It was discovered that incorrect validation of hostname ACLs in the authorisation service of Trapperkeeper, a service framework used by Puppet servers, could a…
It was discovered that missing validation of event data in the agent of the Puppet configuration management system could result in code execution on the Puppet…
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves 5 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 4 vulnerabilities can now be installed.
ADOdb could be made to crash or run programs if it received specially crafted input.
Critical: fence-agents security update