The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This is a mass rebuild of the OCaml ecosystem with OCaml 5.5.1, which fixes two security bugs. See https://github.com/ocaml/ocaml/releases/tag/5.5.1 for detail…
This is a mass rebuild of the OCaml ecosystem with OCaml 5.5.1, which fixes two security bugs. See https://github.com/ocaml/ocaml/releases/tag/5.5.1 for detail…
Update to .NET SDK 10.0.112 and Runtime 10.0.12 Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026- 69806,CVE-2026-71328 Release Notes…
Update to .NET SDK 10.0.112 and Runtime 10.0.12 Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026- 69806,CVE-2026-71328 Release Notes…
Update to .NET SDK 8.0.131 and Runtime 8.0.31 Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-71328 Release Notes: SDK: https://git…
Update to .NET SDK 9.0.121 and Runtime 9.0.20 Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026- 69806,CVE-2026-71328 Release Notes: …
Update to .NET SDK 8.0.131 and Runtime 8.0.31 Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-71328 Release Notes: SDK: https://git…
Update to .NET SDK 9.0.121 and Runtime 9.0.20 Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026- 69806,CVE-2026-71328 Release Notes: …
Latest bugfix release. Full changelog: https://sourceforge.net/p/xmp/libxmp/ci/libxmp-4.7.3/tree/docs/Changelog . Fixes a medium-rated security issue: https://…
Update to .NET SDK 10.0.112 and Runtime 10.0.12 Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026- 69806,CVE-2026-71328 Release Notes…
Latest security bugfix release from upstream. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.4 . Resolves a number of vulnerabilities. Split…
Latest security bugfix release from upstream. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.4 . Resolves 3 high impact and 3 medium impact …
As of September 17, Red Hat had documented a flaw in a Red Hat Quay build workflow that could expose container registry credentials to code retrieved from a mu…
Update to 2.1.13. The following security vulnerabilites are fixed in this update: GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/secur…
Update to 2.1.13. The following security vulnerabilites are fixed in this update: GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/secur…
Backport object injection RCE fix - see https://github.com/dokuwiki/dokuwiki/issues/4752
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.
update to 3.7, remove upstreamed patch Upstream ChangeLog: https://raw.githubusercontent.com/tmux/tmux/3.7/CHANGES CHANGES FROM 3.6b TO 3.7 Add floating panes.…
update to 3.7, remove upstreamed patch Upstream ChangeLog: https://raw.githubusercontent.com/tmux/tmux/3.7/CHANGES CHANGES FROM 3.6b TO 3.7 Add floating panes.…
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in P…
See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-45736 and CVE-2026-48779.
See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-45736 and CVE-2026-48779.
The Linux Foundation has officially launched Akrites, a coordinated industry initiative designed to improve how critical open source vulnerabilities are valida…