The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves two vulnerabilities, contains three features and has 20 security fixes can now be installed.
An update that solves seven vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
An update that solves one vulnerability can now be installed.
Update to 1.38.0 to address CVE-2026-21226
A heap-based buffer overflow was discovered in the RGBE/HDR parser of GEGL, a graph-based image processing library, which could result in denial of service or …
Update to latest upstream version.
An update that solves 3 vulnerabilities can now be installed.
Version 1.6.54 [January 12, 2026] Fixed CVE-2026-22695 (medium severity): Heap buffer over-read in png_image_read_direct_scaled. Fixed CVE-2026-22801 (medium s…
An update that solves two vulnerabilities and contains two features can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
This backports fixes for a couple CVEs: ** libgnutls: Fix NULL pointer dereference in PSK binder verification A TLS 1.3 resumption attempt with an invalid PSK …
https://github.com/aio-libs/aiohttp/blob/v3.13.3/CHANGES.rst
An update that fixes one vulnerability is now available.
An update that solves 4 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities, contains two features and has one fix can now be installed.
Update the time crate to version 0.3.47. Update the time-macros crate to version 0.2.27. Update the time-core crate to version 0.1.8. Update the num-conv crate…
Update the time crate to version 0.3.47. Update the time-macros crate to version 0.2.27. Update the time-core crate to version 0.1.8. Update the num-conv crate…
Update the time crate to version 0.3.47. Update the time-macros crate to version 0.2.27. Update the time-core crate to version 0.1.8. Update the num-conv crate…
An update that solves eight vulnerabilities can now be installed.
Titouan Lazard discovered a buffer overflow vulnerability in munge, an authentication service to create and validate credentials, which may allow local users t…