The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806)
Rebase to OpenSSL 3.5.9
Update to release v3.1.2 Resolves: rhbz#2540024 Resolves CVE-2026-41178: rhbz#2515091 Resolves CVE-2026-85747 Upstream fixes and enhancements
Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422
Automatic update for cockpit-machines-357-1.fc44. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
3.26.6, fixes CVE-2026-91105,CVE-2026-91103,CVE-2026-91102,CVE-2026-91101, CVE-2026-91100,CVE-2026-91099,CVE-2026-91098,CVE-2026-91097
Update to fetchmail-6.6.8 (CVE-2026-94184) Update to fetchmail-6.6.7
WordPress 6.9.9 Security Release Security updates included in this release Unauthenticated path traversal in page-template resolution leading to conditional RC…
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
Update httpcore2 and httpx2 to 2.13.1. This is a security fix for CVE-2026-84378, CVE-2026-84379, and CVE-2026-84380.
x86: DMs may cause mem leak by IRQ binding [XSA-509, CVE-2026-62437] x86: improper handling of HVM emulation return codes [XSA-510, CVE-2026-79602] Uncondition…
Updated to latest upstream (157.0)
Update to 0.1.9
libxml2 updated to version 2.15.4, compat libxml2_2.13 added, and rebuilds of packages linking to libxml2. Packages that FTBFS will require the compat package.…
libxml2 updated to version 2.15.4, compat libxml2_2.13 added, and rebuilds of packages linking to libxml2. Packages that FTBFS will require the compat package.…
libxml2 updated to version 2.15.4, compat libxml2_2.13 added, and rebuilds of packages linking to libxml2. Packages that FTBFS will require the compat package.…
It was discovered that incomplete validation of MS-PPPE packets in radsecproxy, a Radius protocol proxy, could result in denial of service or potentially the e…
Multiple security vulnerabilities have been discovered in the MongoDB driver for PHP, which could result in information disclosure, PHP objection injection or …
An update that solves six vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
An update that solves 11 vulnerabilities and has one security fix can now be installed.
Important: libpcap security update