Menu

Category Archives: All

Everything

# Security update for xwayland Announcement ID: SUSE-SU-2026:2426-1 Release Date: 2026-06-17T09:50:05Z Rating: important References:

An update that solves one vulnerability can now be installed.

njs could be made to crash or run programs if it received a specially crafted input.

Massive password-stealing attack hits 75k Fortinet firewalls
FishMonger’s arsenal upgraded: SprySOCKS for Windows

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness

Critical Joomla JCE RCE Added to CISA KEV as Attacks Target Linux Web Servers
Malicious JetBrains Plugins: The IDE Is Now a Supply-Chain Attack

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

QR Code Phishing Linux Quishing Risks and Mitigation Strategies
FreeRDP 3.27 Raises the Baseline for Secure Remote Access
SimpleHelp Authentication Bypass Exposes Remote Access Security Risk

Several security issues were fixed in GStreamer Bad Plugins.

Digital sovereignty needs an operating model
AWS targets software release bottlenecks with DevOps Agent update
Cisco adds another SD-WAN box to max-severity bug advisory

graphite2 could be made to crash or run programs if it opened a specially crafted file.

Homebrew 6.0 released with new security mechanism, Linux sandbox and more

Multiple security vulnerabilities were discovered in LibreOffice, which could result in denial of service or potentially the execution of arbitrary code if malformed files are opened. For Debian 12 bookworm, these problems have been fixed in version 4:7.4.7-1+deb12u13.

From RAG to ontology: Databricks bets on context as the key to trusted AI agents
Helpdesk scammers are making house calls to make their lies feel more real

The system could be made to run programs as an administrator.

Several security issues were fixed in the Linux kernel.

The system could be compromised under certain conditions.

Z.ai pitches GLM-5.2 for long-running software engineering tasks
Code like Hemingway
Designing frontend systems for cloud latency, not just cloud failure
10 tips for getting better R code from your AI coding agent

Update NSS to 3.124.0 Update Firefox to 152.0

Update NSS to 3.124.0 Update Firefox to 152.0

Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432

Update to 149.0.7827.114 CVE-2026-12007: Use after free Core CVE-2026-12008: Use after free DigitalCredentials CVE-2026-12009: Insufficient validation of untrusted input Accessibility CVE-2026-12010: Heap buffer overflow GPU

x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487] domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490] Arm: Completion of memory accesses not guaranteed by completion of a TLBI [XSA-493, CVE-2025-10263] x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488]

Update to 1.9.2 for CVE-2026-10846

Version 0.16.0 – 2026-06-08 Security Fix out-of-bounds read via undersized frames in amqp_handle_input (GHSA-9mmv-r8g3-qp46, #878) Fix client crash when server negotiates frame_max below the AMQP protocol

BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics

CVE-2026-34253 – fix arbitrary code execution via buffer underflow

33.0.5 Release

This release fixes CVE-2026-10725 (exhausting memory when decompressing request headers). It also improves examples.

Fix arbitrary memory write with crafted Ventana BIF file (CVE-2026-48977).

Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432

BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics

33.0.5 Release

This release fixes CVE-2026-10725 (exhausting memory when decompressing request headers). It also improves examples.

Fix arbitrary memory write with crafted Ventana BIF file (CVE-2026-48977).

Update to version 3.10.0

Security update

Security update

Security update

Cyberattack sees crops kept in the ground

# Security update for distribution Announcement ID: SUSE-SU-2026:2413-1 Release Date: 2026-06-16T12:20:29Z Rating: important References:

# Security update for runc Announcement ID: SUSE-SU-2026:2414-1 Release Date: 2026-06-16T12:22:39Z Rating: important References:

# Security update for buildah Announcement ID: SUSE-SU-2026:2415-1 Release Date: 2026-06-16T12:23:37Z Rating: important References:

# Security update for buildah Announcement ID: SUSE-SU-2026:2416-1 Release Date: 2026-06-16T12:24:12Z Rating: important References:

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:2420-1 Release Date: 2026-06-16T14:05:08Z Rating: important References:

An update that solves eight vulnerabilities can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves 60 vulnerabilities and has four fixes can now be installed.

An update that solves 107 vulnerabilities and has 11 fixes can now be installed.

An update that solves one vulnerability can now be installed.

https://security-tracker.debian.org/tracker/DSA-6349-1

https://security-tracker.debian.org/tracker/DSA-6350-1

Several security issues were fixed in OpenImageIO.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

USN-8412-1 introduced a regression in QEMU

https://security-tracker.debian.org/tracker/DSA-6347-1

https://security-tracker.debian.org/tracker/DSA-6346-1

https://security-tracker.debian.org/tracker/DSA-6345-1

Python dev saved from disaster by intuition… and AI
SpaceX’s planned $60 billion deal for Cursor raises questions for CIOs
Three critical Fortinet sandbox bugs splattered by unknown attackers

Several issues have been found in asterisk, an Open Source Private Branch Exchange (PBX). They are related to buffer under- or overflows, either on heap or on stack. Some are related to use-after-free or wrong processing of invalid or untrusted certificates. For Debian 11 bullseye, these problems have been fixed in version

EvilTokens: A phishing attack that doesn’t steal your password

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves three vulnerabilities can now be installed.

# Security update for containerized-data-importer Announcement ID: SUSE-SU-2026:2407-1 Release Date: 2026-06-16T07:47:27Z Rating: important References:

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves four vulnerabilities and has one security fix can now be installed.

An update that solves four vulnerabilities and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

Several security issues were fixed in rabbitmq-c.

Several security issues were fixed in Squid.

The CA certificates in the ca-certificates package were updated.

An update that solves one vulnerability can now be installed.