The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
release v2.0.0
This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.
Moderate: nginx:1.24 security update
Several security issues were fixed in dracut.
An update that solves 139 vulnerabilities can now be installed.
An update that solves nine vulnerabilities and has five security fixes can now be installed.
An update that solves five vulnerabilities can now be installed.
An update that solves three vulnerabilities and contains one feature can now be installed.
An update that solves six vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves five vulnerabilities can now be installed.
Moderate: perl:5.32 security update
An update that solves eight vulnerabilities can now be installed.
Urwid could be made to crash or run programs as your login by other local users.
Several security issues were fixed in FFmpeg.
Several security issues were fixed in CivetWeb.
An update that solves one vulnerability can now be installed.
An update that solves 8 vulnerabilities can now be installed.
The 7.2.5 stable kernel update contains a number of important fixes across the tree.
libmongoc 2.5.2 Fixes Fix OCSP error handling. CVE-2026-84964 Fix unsafe casts during JSON parsing. CVE-2026-84965 Fix possible unsafe truncation when logging …
Update to 5.4.6 Resolves: rhbz#2527899
An update that solves one vulnerability can now be installed.
An update that solves 9 vulnerabilities can now be installed.