The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to pip-26.1.2.
An update that solves four vulnerabilities can now be installed.
An update that solves seven vulnerabilities can now be installed.
An update that solves 14 vulnerabilities and has one security fix can now be installed.
An update that solves 14 vulnerabilities and has one security fix can now be installed.
Several security issues were fixed in libde265.
Update to 5.3.2 for CVE-2026-14957 (with newsources)
FreeType could be made to crash if it opened a specially crafted file.
Several security issues were fixed in FreeRDP.
Several security issues were fixed in PHP.
An update that solves one vulnerability can now be installed.
An update that solves seven vulnerabilities can now be installed.
An update that solves 13 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 7 vulnerabilities can now be installed.
An update that solves 5 vulnerabilities can now be installed.
An update that fixes 7 vulnerabilities is now available.
import asyncssh 2.23.1 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via pat…
update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via p…
Update to 3.6.7 Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-…
A flaw was discovered in tiff, a Tag Image File Format library, which may result in denial of service or the execution of arbitrary code if malformed image fil…
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-…