The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Release 1.6.19 Fix PHP Warning: Undefined variable $tmp_command in .../plugins/markasjunk/drivers/cmd_learn.php (#10294) Security: Fix CSS declaration smugglin…
Release 1.7.4 Use X-Content-Type-Options:nosniff for attachment previews and downloads (#10308) zipdownload: Fix attachment filename sanitisation of backslash …
Important: postgresql:18 security update
Important: grafana security update
Important: leapp-repository security update
Important: kernel security, bug fix, and enhancement update
Moderate: .NET 8.0 security, bug fix, and enhancement update
Low: rsyslog security update
Important: .NET 10.0 security, bug fix, and enhancement update
Moderate: .NET 8.0 security, bug fix, and enhancement update
Moderate: rsyslog security update
Important: .NET 10.0 security, bug fix, and enhancement update
Update python-django6 (providing python3-django) to the latest 6.1.1 release
Update to 1.5.8
Version 2.1.9 PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968
Low severity security fixes
Update python-django6 (providing python3-django) to the latest 6.1.1 release
Update to 1.5.8
Release 1.7.4 Use X-Content-Type-Options:nosniff for attachment previews and downloads (#10308) zipdownload: Fix attachment filename sanitisation of backslash …
Low severity security fixes
Important: .NET 9.0 security, bug fix, and enhancement update
Important: .NET 9.0 security, bug fix, and enhancement update
Important: postgresql:18 security update
Important: grafana security update