The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves 18 vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.
Multiple issues were found in libde265, an open source implementation of the H.265 video codec, which potentially may result in denial of service, heap/buffer …
An update that solves one vulnerability can now be installed.
An update that solves 63 vulnerabilities can now be installed.
Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver, which could result in denial of service, cache poi…
ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. JWT.decode(token, '', true, algorithm: 'HS256') accepts an attacker-forged tok…
Add a patch to validate clickable preview elements in the Mail. Fixes CVE-2026-88859.
Patch stb_sprintf: security fix for CVE-2026-79516
Update to 153.0.8010.36, it fixes 230 CVEs: CVE-2026-87429 - CVE-2026-87658
3.2.6
Add a patch to validate clickable preview elements in the Mail. Fixes CVE-2026-88859.
This rpm updates included resolv gem to 0.7.2 to resolve CVE security issues.
Patch stb_sprintf: security fix for CVE-2026-79516
An update that solves 63 vulnerabilities can now be installed.
An update that solves 63 vulnerabilities can now be installed.
An update that solves four vulnerabilities can now be installed.
An update that solves 143 vulnerabilities can now be installed.
An update that solves 143 vulnerabilities can now be installed.
Update to 153.0.8010.36, it fixes 230 CVEs: CVE-2026-87429 - CVE-2026-87658
Latest security bugfix release from upstream. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.4 . Resolves 3 high impact and 3 medium impact …
Patch stb_sprintf: security fix for CVE-2026-79516
updated to 2.4.5, many security fixes
Most administrators do not think about BIND, browser engines, or cloud kernels until one of them fails.