July 10, 2026
The new currency of enterprise velocity
Malicious Go Modules: Securing Your Linux Build Pipeline
July 10, 2026
https://security-tracker.debian.org/tracker/DSA-6385-1
July 10, 2026
ESET Threat Report H1 2026
A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.
July 9, 2026
An update that solves one vulnerability can now be installed.
July 9, 2026
SUSE Dracut Important Command Injection Issue Eased 2026-2803-1
An update that solves one vulnerability can now be installed.
July 9, 2026
An update that solves three vulnerabilities can now be installed.
July 9, 2026
Revving up Microsoft’s 10x faster TypeScript 7
July 9, 2026
Three keys to deploying AI agents
July 9, 2026
Several security issues were fixed in the Linux kernel.
July 9, 2026
Several security issues were fixed in the Linux kernel.
July 9, 2026
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 bookworm, this problem has been fixed in version 150.0.7871.100-1~deb12u1.
July 9, 2026
This package contains the Perl module CSS::Minifier::XS. Versions of the module before 0.14 have a memory leak when the entire document is minified away (CVE-2026-13593). This update brings version 0.15 which fixes this issue.
July 9, 2026
Update to opkssh 0.15.0. This release fixes several CVEs in bundled/vendored dependencies: CVE-2026-39829: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters CVE-2026-39835: golang.org/x/crypto/ssh: Denial of Service via crafted SSH
July 9, 2026
Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.
July 9, 2026
Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.
July 9, 2026
Improve GSS KEX algorithms documentation CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known- group validation that leads to client-side denial of service CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator
July 9, 2026
upower 1.91.3: Feature: up-device-battery: Prefer “Standard” over “Fast” charging (!316 (merged), #344 (closed)) Fix: Resolve potential leaks (!327 (merged)) Fix: Potential out-of-bound access (!328 (merged))
July 9, 2026
Update to opkssh 0.15.0. This release fixes several CVEs in bundled/vendored dependencies: CVE-2026-39829: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters CVE-2026-39835: golang.org/x/crypto/ssh: Denial of Service via crafted SSH
July 9, 2026
This package contains the Perl module CSS::Minifier::XS. Versions of the module before 0.14 have a memory leak when the entire document is minified away (CVE-2026-13593). This update brings version 0.15 which fixes this issue.
July 9, 2026
Update to 3.2.0 (final). Update PyO3 to 0.29, fixing RUSTSEC-2026-0176 and RUSTSEC-2026-0177.
July 9, 2026
Update to 0.3.6; this includes an update to PyO3 0.29, which fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177.
July 9, 2026
Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.
July 9, 2026
Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.
July 9, 2026
An update that solves 168 vulnerabilities, contains three features and has 14 security fixes can now be installed.
July 9, 2026
An update that solves 105 vulnerabilities, contains three features and has 12 security fixes can now be installed.
July 9, 2026
https://security-tracker.debian.org/tracker/DSA-6383-1
July 8, 2026
https://security-tracker.debian.org/tracker/DSA-6382-1
July 8, 2026
New xorg-server packages are available for Slackware 15.0 and -current to fix security issues.
July 8, 2026
New proftpd packages are available for Slackware 15.0 and -current to fix security issues.
July 8, 2026
New libXfont2 packages are available for Slackware 15.0 and -current to fix security issues.
July 8, 2026
mailcap could allow applications to escape sandbox restrictions
July 8, 2026
Guillaume Winter discovered that pgextwlist, an extension for PostgreSQL implementing a whitelist mechanism for PostgreSQL extensions, was susceptible to SQL injection via crafted schema and user names. For the stable distribution (trixie), this problem has been fixed in version 1.19-1+deb13u1.
July 8, 2026
An update that solves one vulnerability and has three security fixes can now be installed.
July 8, 2026