Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 tmux Important Use-After-Free Advisory 2026-5060f8da27
update to 3.7, remove upstreamed patch Upstream ChangeLog: https://raw.githubusercontent.com/tmux/tmux/3.7/CHANGES CHANGES FROM 3.6b TO 3.7 Add floating panes.…
Fedora 44 tmux Severe Use-After-Free Resolution FEDORA-2026-20eaa64d75
update to 3.7, remove upstreamed patch Upstream ChangeLog: https://raw.githubusercontent.com/tmux/tmux/3.7/CHANGES CHANGES FROM 3.6b TO 3.7 Add floating panes.…
Fedora 43 ClamAV Critical Multiple Issues Fix 2026-144f87ee92
Fixes for multiple CVEs https://github.com/Cisco- Talos/clamav/releases/tag/clamav-1.4.5
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in P…
Fedora 43 python-jupytext Important Denial Of Service Fix 2026-31e6b85f4e
See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-45736 and CVE-2026-48779.
Fedora 44 python-jupytext Important DoS Fix 2026-db770b7d7a
See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-45736 and CVE-2026-48779.
Fedora 44 Python-Django-Haystack Faces Critical Deserialization Risk
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
Linux Foundation Launches Akrites to Strengthen Software Supply Chain Security
The Linux Foundation has officially launched Akrites, a coordinated industry initiative designed to improve how critical open source vulnerabilities are valida…
Fedora 43 dotnet8.0 Important Security Fix CVE-2026-45490 2026-2f80369c73
Update to .NET SDK 8.0.128 and Runtime 8.0.28 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main/…
Fedora 43 dotnet9.0 Important Security Update Runtime Fixes 2026-2954cd11bd
Update to .NET SDK 9.0.118 and Runtime 9.0.17 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main/…
Fedora 44 dotnet8.0 Important Update Fix Multiple Issues 2026-041785a779
Update to .NET SDK 8.0.128 and Runtime 8.0.28 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main/…
Fedora 44 dotnet9.0 Important Security Update CVE-2026-45490 CVE-2026-45491
Update to .NET SDK 9.0.118 and Runtime 9.0.17 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main/…
Fix Critical Deserialization Issue in Fedora 43 python-django-haystack
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
Fedora 43 dotnet10.0 Significant Runtime Enhancement 2026-a424c1061e
Update to .NET SDK 10.0.109 and Runtime 10.0.9 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main…
Fedora 44 dotnet10.0 Critical Updates for CVE-2026-45490-45591
Update to .NET SDK 10.0.109 and Runtime 10.0.9 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main…
The New Rules for AI-Assisted Contributions: Ownership is Not Optional
AI-assisted patches are already showing up across open source. Small GitHub projects, package updates, kernel-adjacent tools, system libraries. It’s not a futu…
Rocky Linux 10 ipt-usb Vulnerability Details for Denial of Service Risk
Moderate: golang-github-openprinting-ipp-usb security update
Rocky Linux 10 RLSA-2026-27740 has a Moderate DoS in ipp-usb
Moderate: golang-github-openprinting-ipp-usb security update
Fedora 44 grout Denial of Service Advisory 2026-28949d21e5
New version of frr and grout. I am keeping libyang to version 3 at the moment due to recommendations from https://github.com/FRRouting/frr/blob/master/doc/deve…
Fedora 44 frr Denial of Service Security Advisory 2026-28949d21e5
New version of frr and grout. I am keeping libyang to version 3 at the moment due to recommendations from https://github.com/FRRouting/frr/blob/master/doc/deve…
Fedora 44 Tig Major Editor Command Injection Fix for 2026-5cb64cc909
Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432
Fedora 43 tig Command Injection Fix Advisory 2026-28df92c223
Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432
Compromised VS Code Extension Puts Linux Development Pipelines at Risk
The compromise of Nx Console shows how much infrastructure now sits behind a single developer account. GitHub repositories, CI/CD pipelines, container build sy…
OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that's targeting developers using OpenAI Codex through a legitimate-l…