The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Moderate: libmicrohttpd security update
Update goose to 1.36.0
nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-fancyindex: Rebuild for 1.30.3 nginx-mod-vts:
Important: flac security update
Important: flac security update
Important: flac security update
Apache MINA could be made to run programs if it received specially crafted network traffic.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Security update
An update that solves 19 vulnerabilities can now be installed.
Important: 389-ds:1.4 security update
Important: dracut security update
Important: 389-ds-base security, bug fix, and enhancement update
An update that solves 11 vulnerabilities can now be installed.
It was discovered that beets, a media library management system, is vulnerable to run arbitrary JavaScript code in the victim browser, exfiltrate viewable data…
A newly disclosed FFmpeg vulnerability, known as PixelSmash (CVE-2026-8461), affects the MagicYUV decoder and can be triggered by specially crafted video files.
Important: rsync security update
Important: dracut security update
Important: dracut security update
Important: 389-ds:1.4 security update
Important: valkey security update
Resolves: CVE-2026-9064
Update to 3.001000, fixes CVE-2026-11527
Important: rsync security update