Go 1.27.4 and 1.26.11 released with 12 security fixes
The forwarded note only begins a net/http HTTP/1 server issue and does not list the other fixes.
Stories per day · 30 days
2 RSS
Relatedphp5cvss3nodejs2open-source2oss-security2patch2cve1dns1elixir1go1hex1hexpm1ncsc1net-http1nsd1package-manager1pre-alert1rce1
25 stories, newest first · one card per story
Stories tagged #security-release
Node.js security releases for October 21 are out
The mailing-list reply says an URL lists the releases, but this excerpt names no issues or versions.
PHP Foundation to patch two critical vulnerabilities in PHP
The October 20, 2026 notice names no CVE identifiers, affected versions, fixed releases, or known exploitation.
PHP security team schedules critical release for October 21
Two flaws each scored 9.2 will be detailed with patched versions at 14:00 UTC, or sooner if they leak.
PHP flags an upcoming critical security release
The oss-security note only points to a PHP.net archive entry and gives no flaw details.
PHP team warns of two critical flaws ahead of October 21 release
Both issues are rated CVSS v4.0 9.2, and affected and fixed versions will be published with the 14:00 UTC release.
4
NSD 4.15.3 security release
NSD 4.15.3 fixes high-severity stack-overwrite bugs that could enable remote code execution.
Upcoming Node.js security release 2026/10/21
Node.js pre-announced security releases for 21 October 2026, with no CVE details yet.
Hex 2.5.2 released with security fixes
Hex 2.5.2 ships security fixes for the Elixir package manager, with advisories posted on GitHub.
Fwd: Go 1.27.2 and Go 1.26.9 are released
Go released 1.27.2 and 1.26.9 with security fixes, including an HTTP/2 net/http server issue.
tor-0.4.9.14 released
Tor 0.4.9.14 fixes high-severity bugs affecting relays, clients, onion services, and authorities.
WordPress 7.1.3 Security Release
WordPress 7.1.3 patches seven flaws, including unauthenticated comment leaks and stored XSS, and is not an emergency.
16
Django CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975
Django issued security releases for CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975.
Fwd: Tor Project Forum: Security Release 0.4.9.13
Tor Project releases security update 0.4.9.13 with several high-severity fixes affecting relays, clients, and onion services; immediate upgrade urged.
New OpenSSL Releases
OpenSSL plans security-fix releases, including 4.0.3 and 3.6.5, for 29 September 2026.
Exim Security Release 4.100.1
Exim released security update 4.100.1 addressing vulnerabilities in the widely used open-source mail transfer agent; details remain sparse.
WordPress 7.1.1 Maintenance and Security Release
WordPress 7.1.1 ships 11 security fixes including unauthenticated stored XSS in wpautop(), path traversal, and theme installation flaws; update immediately.
Multiple vulnerabilities in Jenkins plugins
Jenkins releases security fixes for multiple plugins including Bitbucket, GitLab, Gitee, Coverage, and Gradle integrations.
Homebrew 7.0.0 is out, here’s what changed for security
Homebrew 7.0.0 closes eight security advisories, including a High sudo execution bug fixed in 6.0.12, and ships brew vulns vulnerability scanning.
Datasette 1.0a39 and 0.65.4 security releases
Datasette shipped security patches 1.0a39 and 0.65.4 fixing subtle bugs in instances mixing public and private tables, found via an AI-assisted audit.
datasette 0.65.4
Datasette shipped the 0.65.4 security patch release for its stable branch, with fixes documented in the blog post covering 1.0a39 and 0.65.4.
Fwd: Tor Project Forum: Security Release 0.4.9.12
Tor released 0.4.9.12 with several high-severity fixes, some found via LLMs, plus recommended protocol updates and removal of TAP key acceptance.
Fwd: [mapserver-announce] security release available: MapServer 8.6.6
The MapServer team released 8.6.6 as an immediate security release fixing six vulnerabilities; administrators running older versions should upgrade.
Upcoming C-tor security release - 0.4.9.12
Tor Project announces an upcoming C-tor security release 0.4.9.12 addressing a security flaw.