The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves three vulnerabilities can now be installed.
An update that solves 23 vulnerabilities and has 4 bug fixes can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.
cifs-utils could be made to run programs as an administrator.
nghttp2 could allow unintended access to network services.
LibVNCServer could be made to crash or run programs if it received specially crafted network traffic.
An update that solves one vulnerability and has one security fix can now be installed.
An update that solves one vulnerability can now be installed.
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
The 7.0.14-101/201 kernel builds contain a fix for an unprivileged container / jail escape. This has not been assigned a CVE number yet, but a POC is in the wi…
Fixed a CORS bug that leaked the anti-CSRF nonce. (#8938) Fixed a use-after-free bug in peer code. (#8921) Fixed build error when compiling with fmt 12.2.0. (#…
Update to latest upstream version Update to latest upstream version.
Security update resolving 22 CVEs across both caddy itself and its vendored libraries.
Update to 1.74.3
The 7.0.14-101/201 kernel builds contain a fix for an unprivileged container / jail escape. This has not been assigned a CVE number yet, but a POC is in the wi…
Update! Close Go standard library CVE bugs that are solved by a rebuild
Fixed a CORS bug that leaked the anti-CSRF nonce. (#8938) Fixed a use-after-free bug in peer code. (#8921) Fixed build error when compiling with fmt 12.2.0. (#…
0.9.34 - security fix for CVE-2026-27145