The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that contains security fixes can now be installed.
A flaw was discovered in tiff, a Tag Image File Format library, which may result in denial of service or the execution of arbitrary code if malformed image fil…
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-…
An update that fixes one vulnerability is now available.
An update that solves one vulnerability can now be installed.
An update that solves 3 vulnerabilities can now be installed.
An update that solves 3 vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves 4 vulnerabilities can now be installed.
CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the loca…
This update contains a fix for CVE-2026-13503.
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54…
Update PyO3 to 0.29, fixing RUSTSEC-2026-0194 and RUSTSEC-2026-0195.
Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.
This update contains a fix for CVE-2026-13503.
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54…
Update PyO3 to 0.29, fixing RUSTSEC-2026-0194 and RUSTSEC-2026-0195.
Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.
An update that solves one vulnerability can now be installed.
Update to 4.53.3
An update that solves 6 vulnerabilities can now be installed.
An update that solves 9 vulnerabilities and has 9 bug fixes can now be installed.