Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
streamlink 8.6.2 (2026-10-07) SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags (CVE-2026-TO-BE-ASSIGNED / GHSA-j7pf-m7gx-jr33) …
The 7.2.14 stable kernel update contains a number of important fixes across the tree.
Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUS…
Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUS…
Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities (RUSTSEC-2026-020…
Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities (RUSTSEC-2026-020…
Rebuild asciinema with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346…
Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0049, RUSTSEC-2026-0098, …
Rebuild rbspy with newer versions of the ruzstd, memmap2, anyhow, and quick-xml crates to address multiple security vulnerabilities (RUSTSEC-2026-0186, RUSTSEC…
Update to version 0.4.5. This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures.
Update to v1.4.3 (rhbz#2549665): Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switc…
streamlink 8.6.2 (2026-10-07) SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags (CVE-2026-TO-BE-ASSIGNED / GHSA-j7pf-m7gx-jr33) …
New version 4.0.9 is released. This new rpm contains several bug fixes in Onigumo regular expression compilation.
The 7.2.14 stable kernel update contains a number of important fixes across the tree.
Fix CVE-2026-111802
Security GHSA-h664-qxhh-gx3w CVE-2026-109545 GHSA-2q8j-chww-3pcq CVE-ID requested GHSA-5mqr-9575-x89w CVE-ID requested GHSA-rjg6-phr3-3rxw CVE-ID requested
Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUS…
Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUS…
Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities (RUSTSEC-2026-020…
Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities (RUSTSEC-2026-020…
Rebuild asciinema with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346…
A buffer overflow was found in the "Eye of GNOME" graphics viewer program, which could possibly result in the execution of arbitrary code when opening a malfor…
Multiple vulnerabilities were found and fixed in Vim, an enhanced version of the standard UNIX editor Vi (Vi IMproved). A remote attacker could trigger arbitra…
Upstream bugs (http://gcc.gnu.org/PRNNNNN) fixed: 88632, 98573, 99293, 104630, 105594, 107549, 110421, 114065, 114400, 115955, 116547, 117487, 118665, 120106, …
