Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 libevent Critical Security Fixes and Important Updates Released
Update to 2.1.13. The following security vulnerabilites are fixed in this update: GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/secur…
Fedora 44 DokuWiki Backport Remote Code Execution Advisory Resolution
Backport object injection RCE fix - see https://github.com/dokuwiki/dokuwiki/issues/4752
Fedora 44 opam Important Fix Buffer Overflow CVE-2026-57825
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.
Fedora 43 Opam Critical CVE-2026-57825 Advisory ID 2026-fb48505840
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.
Fedora 43 tmux Important Use-After-Free Advisory 2026-5060f8da27
update to 3.7, remove upstreamed patch Upstream ChangeLog: https://raw.githubusercontent.com/tmux/tmux/3.7/CHANGES CHANGES FROM 3.6b TO 3.7 Add floating panes.…
Fedora 44 tmux Severe Use-After-Free Resolution FEDORA-2026-20eaa64d75
update to 3.7, remove upstreamed patch Upstream ChangeLog: https://raw.githubusercontent.com/tmux/tmux/3.7/CHANGES CHANGES FROM 3.6b TO 3.7 Add floating panes.…
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in P…
Fedora 43 python-jupytext Important Denial Of Service Fix 2026-31e6b85f4e
See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-45736 and CVE-2026-48779.
Fedora 44 python-jupytext Important DoS Fix 2026-db770b7d7a
See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-45736 and CVE-2026-48779.
Linux Foundation Launches Akrites to Strengthen Software Supply Chain Security
The Linux Foundation has officially launched Akrites, a coordinated industry initiative designed to improve how critical open source vulnerabilities are valida…
Fedora 43 dotnet8.0 Important Security Fix CVE-2026-45490 2026-2f80369c73
Update to .NET SDK 8.0.128 and Runtime 8.0.28 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main/…
Fedora 43 dotnet9.0 Important Security Update Runtime Fixes 2026-2954cd11bd
Update to .NET SDK 9.0.118 and Runtime 9.0.17 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main/…
Fedora 44 dotnet8.0 Important Update Fix Multiple Issues 2026-041785a779
Update to .NET SDK 8.0.128 and Runtime 8.0.28 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main/…
Fedora 44 dotnet9.0 Important Security Update CVE-2026-45490 CVE-2026-45491
Update to .NET SDK 9.0.118 and Runtime 9.0.17 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main/…
Fedora 43 dotnet10.0 Significant Runtime Enhancement 2026-a424c1061e
Update to .NET SDK 10.0.109 and Runtime 10.0.9 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main…
Fedora 44 dotnet10.0 Critical Updates for CVE-2026-45490-45591
Update to .NET SDK 10.0.109 and Runtime 10.0.9 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: https://github.com/dotnet/core/blob/main…
The New Rules for AI-Assisted Contributions: Ownership is Not Optional
AI-assisted patches are already showing up across open source. Small GitHub projects, package updates, kernel-adjacent tools, system libraries. It’s not a futu…
Rocky Linux 10 ipt-usb Vulnerability Details for Denial of Service Risk
Moderate: golang-github-openprinting-ipp-usb security update
Fedora 44 Tig Major Editor Command Injection Fix for 2026-5cb64cc909
Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432
Fedora 43 tig Command Injection Fix Advisory 2026-28df92c223
Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432
Ubuntu 22.04 PyTorch 1.12.0 Major Security Patch 2026-a12bc3de45
update to 2.31.5: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA- gr92-w2r5-qw5p https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-i…
Debian 11 p7zip-rar DLA-4577-1 Memory Corruption DoS Risk CVE-2025-53816
Jaroslav Loba'evski from GitHub Security Lab discovered a memory corruption vulnerability in the RAR module of p7zip, a now unmaintained fork of 7-Zip, a file …
Fedora 43 dotnet10.0 Important Runtime Fix CVE-2026-40372
Update to .NET SDK 10.0.107 and Runtime 10.0.7 Fixes: CVE-2026-40372 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.7/10…
Fedora 42 Update on Key Dotnet 10.0 Runtime Vulnerability CVE-2026-40373
Update to .NET SDK 10.0.107 and Runtime 10.0.7 Fixes: CVE-2026-40372 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.7/10…