The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves 7 vulnerabilities can now be installed.
An update that solves 3 vulnerabilities can now be installed.
Brotli could be made to crash or run programs if it received specially crafted input.
An update that solves five vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves nine vulnerabilities and contains one feature can now be installed.
An update that solves nine vulnerabilities and contains one feature can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves eight vulnerabilities and has one security fix can now be installed.
An update that solves eight vulnerabilities and has one security fix can now be installed.
An update that fixes 52 vulnerabilities is now available.
Several security issues were fixed in .NET
Updated to latest upstream (159.0)
Brotli 1.2.1 update which is security fix for CVE-2026-111497
Brotli 1.2.1 update which is security fix for CVE-2026-111497
Update to certifi-2026.10.18.
Changes with Apache Traffic Server 10.2.1 #13553 - origin_server_auth: Improve log messages #13567 - Metrics: Revert added locking and annotations #13505 - Add…
Update to certifi-2026.10.18.
New upstream release containing various security fixes. See release notes for more details.
Changes with Apache Traffic Server 10.2.1 #13553 - origin_server_auth: Improve log messages #13567 - Metrics: Revert added locking and annotations #13505 - Add…
KDE Plasma 6.8.1 + Gear 28.08.2 (And related rebuilds) CVE-2026-110236 Arbitrary command execution via crafted folder name
KDE Plasma 6.8.1 + Gear 28.08.2 (And related rebuilds) CVE-2026-110236 Arbitrary command execution via crafted folder name
KDE Plasma 6.8.1 + Gear 28.08.2 (And related rebuilds) CVE-2026-110236 Arbitrary command execution via crafted folder name
KDE Plasma 6.8.1 + Gear 28.08.2 (And related rebuilds) CVE-2026-110236 Arbitrary command execution via crafted folder name