February 8, 2026
Update to 144.0.7559.132 * CVE-2026-1861: Heap buffer overflow in libvpx * CVE-2026-1862: Type Confusion in V8
February 8, 2026
Update to version 0.50.18
February 8, 2026
Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.
February 8, 2026
Update to version 1.9.2. Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.2
February 8, 2026
Release notes for xrdp v0.10.5 (2026/01/27) Security fixes CVE-2025-68670: Improper bounds checking of domain string length leads to Stack- based Buffer Overflow New features
February 8, 2026
Release notes for xrdp v0.10.5 (2026/01/27) Security fixes CVE-2025-68670: Improper bounds checking of domain string length leads to Stack- based Buffer Overflow New features
February 8, 2026
Study confirms experience beats youthful enthusiasm
February 7, 2026
Denis Skvortsov discovered that xrdp, a Remote Desktop Protocol (RDP) server, was susceptible to an unauthenticated stack-based buffer overflow vulnerability, which may result in remote execution of arbitrary code. For the oldstable distribution (bookworm), this problem has been fixed
February 7, 2026
What Is TLS (Transport Layer Security) in Linux Security?
February 7, 2026
Update to 9.18.44 (rhbz#2431609) Security Fixes: Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878) Bug Fixes: Allow glue in delegations with QTYPE=ANY.
February 7, 2026
Update to 9.18.44 (rhbz#2431609) Security Fixes: Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878) Bug Fixes: Allow glue in delegations with QTYPE=ANY.
February 7, 2026
Update to 13.0.10.
February 7, 2026
An update that fixes one vulnerability, contains one feature is now available.
February 7, 2026
https://security-tracker.debian.org/tracker/DSA-6123-1
February 7, 2026
Sudo, a program designed to allow a sysadmin to give limited root privileges to users and log root activity, was affected by multiple vulnerabilities. CVE-2023-28486 Sudo did not escape control characters in log messages.
February 6, 2026
Microsoft bumps .NET Framework 3.5 from Windows installers
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6122-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6121-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6120-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6119-1
February 6, 2026
Flickr emails users about data breach, pins it on 3rd party
February 6, 2026
DDoS deluge: Brit biz battered as botnet blitzes break records
February 6, 2026
Claude AI finds 500 high-severity software vulnerabilities
February 6, 2026
Windows PCs fade away
February 6, 2026
Python everywhere—but are we there yet?
February 6, 2026
MGASA-2026-0032 – Updated python-django packages fix security vulnerabilities
February 6, 2026
MGAA-2026-0011 – Updated yt-dlp packages fix bugs
February 6, 2026
Google unveils API and MCP server for developer documentation
February 6, 2026
This update bumps the bundled lodash to 4.17.23 to ensure openQA is protected against CVE-2025-13465. It likely was not vulnerable in any case, though, as I don’t believe the vulnerable codepaths were exposed by openQA’s use of lodash.
February 6, 2026
Regenerate vendor tarball. Fixes CVE-2025-13465.
February 6, 2026
Regenerate vendor tarball. Fixes CVE-2025-13465.
February 6, 2026
Version 12.5.8 – 2026-01-27 Changed To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs
February 6, 2026
OpenClaw reveals meaty personal information after simple cracks
February 5, 2026
Visual Studio Code update shines on coding agents
February 5, 2026
OfferUp scammers are out in force: Here’s what you should know
The mobile marketplace app has a growing number of users, but not all of them are genuine. Watch out for these common scams.
February 5, 2026
Multiple vulnerabilities were discovered in containerd, an open-source container runtime, used by e.g. Docker or Kubernetes. CVE-2024-25621 Overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri`
February 5, 2026
What’s new in post-quantum cryptography in RHEL 10.1
February 5, 2026
n8n security woes roll on as new critical flaws bypass December fix
February 5, 2026
Cloud sovereignty is no longer just a public sector concern
February 5, 2026