The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Moderate: golang security, bug fix, and enhancement update
nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-fancyindex: Rebuild for 1.30.3 nginx-mod-vts:
Update to 1.3.13 (minor packaging changes); backport unreleased fix for cross- side scripting via unescaped HTML
Update to 1.16.12 Update to 1.16.11
Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.
Update to release v0.35.0 Resolves: rhbz#2487819 Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102 Upstream enhancements, new features, and fixes
Update to release v0.31.0 Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056 Upstream new features and fixes
1.4.84 1.4.83 https://wiki.lighttpd.net/Release-1_4_83
Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264.
* Wed Jun 17 2026 Klaus Wenninger - 3.0.2-3 - fix CVE-2026-10649: Fix integer overflows in remote message code
nginx-mod-headers-more: Rebuild for 1.30.3 nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-vts:
Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.
Update to 1.3.13 (minor packaging changes); backport unreleased fix for cross- side scripting via unescaped HTML
New version of jupyter-server fixing various security vulnerabilities.
upstream upgrade with security fixes: CVE-2026-53612 - libmount: TOCTOU attack via ancestor directory swap during mount CVE-2026-53613 - libmount: SUID bypass …
Update to 1.9.2 for CVE-2026-10846
Moderate: python-wheel security update
Moderate: python-wheel security update
Moderate: python-wheel security update
Moderate: python-wheel security update
Moderate: python-wheel security update
Moderate: python-wheel security update
Moderate: python-wheel security update
Moderate: freeradius:3.0 security update