The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: resource-agents security update
Important: thunderbird security update
Moderate: libsoup security update
Update to xwayland 24.1.11 Update to xwayland 24.1.10, CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003
Security fix for CVE-2026-39881
Update to 3.8.13, fixes, like 13 CVEs.
fix CVE-2026-6842 and CVE-29026-6843 Resolves: CVE-2026-6842 Resolves: CVE-2026-6843 Resolves: rhbz#2455127 Resolves: rhbz#2455314
updated to 2.4.3 which includes several security fixes
Update to 2.92.0 and make telemetry sending opt in.
Multiple vulnerabilities have been discocvered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary …
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves five vulnerabilities can now be installed.
nghttp2 could be made to crash if it received specially crafted network traffic.
EditorConfig could be made to crash if it opened a specially crafted file.
An update that solves 6 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 4 vulnerabilities can now be installed.
Update to 5.0.4 Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritativ…
Dynaconf could be made to execute arbitrary code.
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in remote code execution, privilege escalation, denial of service or …
Several security issues were fixed in WebKitGTK.