Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 22.04 PyTorch 1.12.0 Major Security Patch 2026-a12bc3de45
update to 2.31.5: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA- gr92-w2r5-qw5p https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-i…
Debian 11 p7zip-rar DLA-4577-1 Memory Corruption DoS Risk CVE-2025-53816
Jaroslav Loba'evski from GitHub Security Lab discovered a memory corruption vulnerability in the RAR module of p7zip, a now unmaintained fork of 7-Zip, a file …
Fedora 43 dotnet10.0 Important Runtime Fix CVE-2026-40372
Update to .NET SDK 10.0.107 and Runtime 10.0.7 Fixes: CVE-2026-40372 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.7/10…
Fedora 42 Update on Key Dotnet 10.0 Runtime Vulnerability CVE-2026-40373
Update to .NET SDK 10.0.107 and Runtime 10.0.7 Fixes: CVE-2026-40372 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.7/10…
Fedora 44 rust-openssl-sys Update Moderate Security Issues 2026-fc9d4b5520
Update the openssl crate to version 0.10.78 and the openssl-sys crate to version 0.9.114. Release notes: openssl 0.10.77 / openssl-sys 0.9.113: https://github.…
Fedora 44 JFrog-CLI Important Security Issue Fix 2026-6b87863841
Upstream release 2.98.0. https://github.com/jfrog/jfrog-cli/releases/tag/v2.98.0 Resolves the following security issues: CVE-2025-11579 CVE-2025-66564 CVE-2026…
Debian 11 Bullseye PolicyKit-1 Denial of Service Notice DLA-4553-1
Multiple vulnerabilities where identified in polkit, a toolkit for defining and handling the policy that allows unprivileged processes to speak to privileged p…
Fedora 44 libexif Update 0.6.26 Fixes DoS Info Leak FEDORA-2026-fd361a6f7f
Update to 0.6.26, fixing several CVEs https://github.com/libexif/libexif/releases/tag/v0.6.26
Fedora 42 libcap Important Security Patch Advisory FEDORA-2026-d4c643a2ba
An update to patch a security vulnerability. Advisory: https://github.com/AndrewGMorgan/libcap_mirror/security/advisories/GHS A-f78v-p5hx-m7hh Changelog * Mon …
Hat 43 python-xyz Significant Update 2026-123f4567e8 Now Available
Update to v1.36.0 Full changelog: https://github.com/AzureAD/microsoft-authentication-library-for- python/releases/tag/1.36.0
Fedora 42 Nix Critical Privilege Escalation Fix GHSA-g3g9-5vj6-r3gj
update to 2.31.4 fixes nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860) https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj
Fedora 43 libexif Medium Denial of Service Info Leak Vulnerability
Update to 0.6.26, fixing several CVEs https://github.com/libexif/libexif/releases/tag/v0.6.26
Fedora 43 Nix 2.31.4 Serious Privilege Escalation Flaw GHSA-g3g9-5vj6-r3gj
update to 2.31.4 fixes nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860): https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj
Fedora 42 python-cairosvg Moderate Exponential DoS Fix 2026-a2778fcae6
Security fix for CVE-2026-31899: https://nvd.nist.gov/vuln/detail/CVE-2026-31899 / https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c Ex…
OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident
OpenAI revealed a GitHub Actions workflow used to sign its macOS apps led to the download of the malicious Axios library on March 31, but noted that no user da…
Fedora 43 libcap Critical Security Patch Advisory 2026-ccc66d5ab4
An update to patch a security vulnerability. Advisory: https://github.com/AndrewGMorgan/libcap_mirror/security/advisories/GHS A-f78v-p5hx-m7hh Changelog * Mon …
Fedora 42 Domoticz Important XSS Security Flaw Advisory 2026-627f2db2b7
Too many changes to list. See: https://github.com/domoticz/domoticz/blob/2026.1/History.txt This also fixes a security vulnerability.
Fedora 42 cpp-httplib Critical TLS Bypass Fix CVE-2026-32627
Update to 0.37.2 Fixes silent TLS certificate verification bypass on HTTPS Redirect via proxy (CVE-2026-32627, rhbz#2448105) Source: https://github.com/yhirose…
Fedora 42 Security Update Addresses Timekeeping Service DoS Vulnerabilities
Update to version 1.7.1. Includes the fix for CVE-2026-26076: https://github.com/pendulum-project/ntpd- rs/security/advisories/GHSA-c7j7-rmvr-fjmv Release note…
Fedora 44 dotnet 8.0 Update 2026 - 702a03ac4d Release Information
This is the March 2026 release of .NET 8 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.25/8.0.125.md Runtime: https://git…
Fedora 44 dotnet9.0 Update March 2026 FEDORA-2026-624e30e8a7
This is the March 2026 release of .NET 9. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/9.0/9.0.14/9.0.115.md Runtime: https://gi…
Fedora 44 dotnet10.0 Update March 2026 FEDORA-2026-956fc306c4
This is the March 2026 release of .NET 10. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.4/10.0.104.md Runtime: https:/…
Fedora 43 dotnet10.0 Critical ASP.NET Core DoS Issue FEDORA-2026-854e553ffa
This is the March 2026 release of .NET 10. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.4/10.0.104.md Runtime: https:/…
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours
A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim's clo…