The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability can now be installed.
An update that solves 4 vulnerabilities can now be installed.
An update that solves 13 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
Tornado could be made to crash or expose sensitive information if it received specially crafted network traffic.
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.
An update that solves one vulnerability and has one bug fix can now be installed.
An update that solves one vulnerability and has 4 bug fixes can now be installed.
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.
An update that solves one vulnerability and has one bug fix can now be installed.
Multiple vulnerabilities have been found in expat. CVE-2025-59375 The patchset previously uploaded in DLA-4807-1 did not fully address the issue since a major …
Important: php security update
Critical: .NET 9.0 security, bug fix, and enhancement update
Critical: .NET 10.0 security, bug fix, and enhancement update
Critical: .NET 8.0 security, bug fix, and enhancement update
Important: golang security, bug fix, and enhancement update
Critical: .NET 9.0 security, bug fix, and enhancement update
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Several vulnerabilities were discovered in BIND, a DNS server implementation, which could result in denial of service or remote code execution. For the stable …
Several security issues were fixed in c-ares.
An update that solves two vulnerabilities can now be installed.