The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
Update to 10.0.511 Update to 11.0.509 with security fix
Version 0.18.0 - 2026-09-14 Security Fix client-side memory-exhaustion DoS in amqp_handle_input (GHSA-5fp7-wg2f-hhgp, #899) Fixed
The maintainers of shell-quote, a JavaScript library for building shell commands, released version 1.11.0 on September 29, 2026, to fix CVE-2026-102422.
Multiple vulnerabilities have been found in expat. CVE-2024-28757 A crafted XML document could trigger an entity expansion attack (billion laughs attack) when …
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities and has two security fixes can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities can now be installed.
An update that solves four vulnerabilities can now be installed.
An update that solves four vulnerabilities can now be installed.
Authen::SASL could be made to crash or run programs if it received specially crafted network traffic.
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system, would could result in denial of servi…
Kdenlive, MLT could be made to run programs as your login if it opened a specially crafted file.
Important: kernel security, bug fix, and enhancement update
Important: expat security update
Moderate: gawk security update
Important: nodejs:24 security, bug fix, and enhancement update
Important: gdb security update
Important: kernel security, bug fix, and enhancement update
Important: thunderbird security update
Moderate: gawk security update