The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in systemd.
Incorporate patch from Sam Doran to fix CVE-2025-69872
An out-of-bounds read vulnerability was discovered in VLC media player, a multimedia player and streamer. The MMS protocol handler in mmstu.c did not properly …
Fix CVE-2026-23868.
Incorporate patch from Sam Doran to fix CVE-2025-69872
Incorporate patch from Sam Doran to fix CVE-2025-69872
An update that solves one vulnerability and has one security fix can now be installed.
An update that solves one vulnerability and has one security fix can now be installed.
Kazuma Matsumoto discovered an integer overflow bug in the EAP-TTLS plugin of strongSwan, an IKE/IPsec suite. The EAP-TTLS plugin doesn't check the length fiel…
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 2 vulnerabilities can now be installed.
Several security issues were fixed in LibTIFF.
Several security issues were fixed in GVfs.
Several security issues were fixed in pyOpenSSL.
An update that solves two vulnerabilities can now be installed.
An update that solves nine vulnerabilities can now be installed.
Vulnerabilities were found in mapserver, a CGI-based framework for Internet map services, which could lead to security controls bypass or SQL injection. CVE-20…
An update that fixes 26 vulnerabilities is now available.
An update that fixes 26 vulnerabilities is now available.
Two vulnerabilities were discovered in ruby-rack, a modular Ruby webserver interface. CVE-2026-22860 Rack::Directory's path check used a string prefix match on…
Add a patch for several CVEs: CVE-2026-1764 - Heap Buffer Overflow in GNOME localsearch MP3 Extractor CVE-2026-1765 - Heap Buffer Overflow in GNOME localsearch…
Use after free of paging structures in EPT [XSA-480, CVE-2026-23554] Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]
Several vulnerabilities were discovered in libyaml-syck-perl, a Perl module providing a fast, lightweight YAML loader and dumper, which may result in denial of…