The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
Security fix for CVE-2026-79655 Fixes a path traversal vulnerability in sos clean tar extraction where unvalidated symlink and hardlink targets could lead to a…
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
Several security issues were fixed in Django.
GStreamer Bad Plugins could be made to crash or run programs as your login if it opened a specially crafted file.
Important: ruby:2.5 security update
Important: nodejs:24 security, bug fix, and enhancement update
Update to 0.1.9
Latest upstream bugfix release from 8.1 branch. Changes: https://code.ffmpeg.org/FFmpeg/FFmpeg/src/branch/release/8.1/Changelog .
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
PHP version 8.5.11 (24 Sep 2026) BCMath: Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds n_scale. (Ilia Alshanetsky) Core:
Version 0.18.0 - 2026-09-14 Security Fix client-side memory-exhaustion DoS in amqp_handle_input (GHSA-5fp7-wg2f-hhgp, #899) Fixed
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update to 2.6.3-2. Fixes privilege problem in the service file and cleans up default configuration file. Update to 2.6.3. Includes fixes to multiple GHSAs list…
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
PHP version 8.4.26 (24 Sep 2026) BCMath: Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds n_scale. (Ilia Alshanetsky) Core:
Version 0.18.0 - 2026-09-14 Security Fix client-side memory-exhaustion DoS in amqp_handle_input (GHSA-5fp7-wg2f-hhgp, #899) Fixed
Update to 3.32.1