The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves eight vulnerabilities and has one fix can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves five vulnerabilities and has one fix can now be installed.
fix HTTP/2 stream-dependency tree UAF (CVE-2026-10536) fix stale proxy password leak (CVE-2026-9079) fix wrong reuse for different services (CVE-2026-8458)
Fix HTTP/2 stream-dependency tree UAF (CVE-2026-10536) Fix Native CA trust persist (CVE-2026-11564) Fix stale proxy password leak (CVE-2026-9079) Fix wrong reu…
Beets could allow malicious media metadata to compromise its web interface.
An update that solves eight vulnerabilities and has one fix can now be installed.
When an authentication platform goes down, downstream applications go with it. Employees can't sign in, customers get locked out, and scheduled jobs quietly fa…
A security update for helm addresses three vulnerabilities, including privilege escalation and credential exfiltration issues, with a critical CVSS score of 9.…
Multiple vulnerabilities in the Caddy web server can lead to unauthorized access and other security issues; users are urged to upgrade to version 2.6.2-12+deb1…
Multiple vulnerabilities in the Icinga 2 monitoring system could lead to denial of service, information disclosure, privilege escalation, or the compromise of …
Multiple vulnerabilities in WebKitGTK have been identified, leading to process crashes, memory corruption, and potential data leaks; users are urged to upgrade…
An update that has one security fix can now be installed.
1.033 - CVE-2026-14454: Fix mishandling of large EXIF IFD entry count values — treated as negative numbers, could lead to allocation failure and program exit -…
1.033 - CVE-2026-14454: Fix mishandling of large EXIF IFD entry count values — treated as negative numbers, could lead to allocation failure and program exit -…
An update that solves 14 vulnerabilities can now be installed.
An update that solves one vulnerability and has one bug fix can now be installed.
Several security issues were fixed in Dnsmasq.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that fixes one vulnerability is now available.
upower 1.91.3: Feature: up-device-battery: Prefer "Standard" over "Fast" charging (!316 (merged), #344 (closed)) Fix: Resolve potential leaks (!327 (merged)) F…
This update, to the current upstream release, addresses a cryptographic flaw (modulo bias) in key generation that could lead to private key compromise (CVE-202…
This update, to the current upstream release, addresses a cryptographic flaw (modulo bias) in key generation that could lead to private key compromise (CVE-202…