Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43214 shandikri discovered that processing maliciously crafted web con…
CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex
Update to 0.37.1 (rbhz#2445943) Fixes Denial of Service via malformed Content-Length header (CVE-2026-31870 Reenables 32-bit build Update to 0.37.0 (rhbz#24416…
Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect)
Add patch for CVE-2026-0988 (Integer overflow in g_buffered_input_stream_peek() leads to segmentation fault)
Update to 0.37.0 (rhbz#2441656) Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663) Update to 0.35.0 Payload size limit bypass…
Rebuilt for improvements of %python_wheel_inject_sbom in python-rpm- macros-3.14-11. Security fix for CVE-2025-12084
An update that solves two vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves five vulnerabilities, contains one feature and has one security fix can now be installed.
An update that solves nine vulnerabilities can now be installed.
An update that solves eight vulnerabilities can now be installed.
An update that solves seven vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex
Fix CVE-2026-31812: Bump quinn-proto to 0.11.14 - Closes rhbz#2446359
Update to 146.0.7680.80 * CVE-2026-3909: Out of bounds write in Ski
patchlevel 148 Security fixes for CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422 Security fix for CVE-2026-32249
Update to 0.37.1 Fixes Denial of Service via malformed Content-Length header (CVE-2026-31870) Reenable 32b builds Update to 0.37.0 (rhbz#2441656)
backport of significant upstream patches
