Menu

Category Archives: All

Everything

Version 0.16.0 – 2026-06-08 Security Fix out-of-bounds read via undersized frames in amqp_handle_input (GHSA-9mmv-r8g3-qp46, #878) Fix client crash when server negotiates frame_max below the AMQP protocol

BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics

CVE-2026-34253 – fix arbitrary code execution via buffer underflow

33.0.5 Release

This release fixes CVE-2026-10725 (exhausting memory when decompressing request headers). It also improves examples.

Fix arbitrary memory write with crafted Ventana BIF file (CVE-2026-48977).

Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432

BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics

33.0.5 Release

This release fixes CVE-2026-10725 (exhausting memory when decompressing request headers). It also improves examples.

Fix arbitrary memory write with crafted Ventana BIF file (CVE-2026-48977).

Update to version 3.10.0

Security update

Security update

Security update

Cyberattack sees crops kept in the ground

# Security update for distribution Announcement ID: SUSE-SU-2026:2413-1 Release Date: 2026-06-16T12:20:29Z Rating: important References:

# Security update for runc Announcement ID: SUSE-SU-2026:2414-1 Release Date: 2026-06-16T12:22:39Z Rating: important References:

# Security update for buildah Announcement ID: SUSE-SU-2026:2415-1 Release Date: 2026-06-16T12:23:37Z Rating: important References:

# Security update for buildah Announcement ID: SUSE-SU-2026:2416-1 Release Date: 2026-06-16T12:24:12Z Rating: important References:

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:2420-1 Release Date: 2026-06-16T14:05:08Z Rating: important References:

An update that solves eight vulnerabilities can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves 60 vulnerabilities and has four fixes can now be installed.

An update that solves 107 vulnerabilities and has 11 fixes can now be installed.

An update that solves one vulnerability can now be installed.

https://security-tracker.debian.org/tracker/DSA-6349-1

https://security-tracker.debian.org/tracker/DSA-6350-1

Several security issues were fixed in OpenImageIO.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

USN-8412-1 introduced a regression in QEMU

https://security-tracker.debian.org/tracker/DSA-6347-1

https://security-tracker.debian.org/tracker/DSA-6346-1

https://security-tracker.debian.org/tracker/DSA-6345-1

Python dev saved from disaster by intuition… and AI
SpaceX’s planned $60 billion deal for Cursor raises questions for CIOs
Three critical Fortinet sandbox bugs splattered by unknown attackers

Several issues have been found in asterisk, an Open Source Private Branch Exchange (PBX). They are related to buffer under- or overflows, either on heap or on stack. Some are related to use-after-free or wrong processing of invalid or untrusted certificates. For Debian 11 bullseye, these problems have been fixed in version

EvilTokens: A phishing attack that doesn’t steal your password

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves three vulnerabilities can now be installed.

# Security update for containerized-data-importer Announcement ID: SUSE-SU-2026:2407-1 Release Date: 2026-06-16T07:47:27Z Rating: important References:

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves four vulnerabilities and has one security fix can now be installed.

An update that solves four vulnerabilities and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

Several security issues were fixed in rabbitmq-c.

Several security issues were fixed in Squid.

The CA certificates in the ca-certificates package were updated.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves 3 vulnerabilities can now be installed.

Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic
Cisco SD-WAN Vulnerability: Why Security Starts With the Management Plane
Databricks pitches LTAP as a new foundation for agentic applications

An update that solves one vulnerability can now be installed.

Cardiac monitor maker’s security skips a beat as data thieves go for the jugular

Several security issues were fixed in FreeRDP.

Ruby could allow unintended access to network services.

USN-8349-1 introduced regressions in rsync.

Nvidia PCs don’t need cloud for AI
Develop smarter AI agents with data fabrics
Shipping enterprise-quality code with AI agents
DocLang aims to make documents readable by AI, not humans

Security update

Security update

Security update

Fixes CVE-2026-48092: Information disclosure in 32-bit builds Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler Fixes CVE-2026-48101: Information disclosure in UEFI capsule parser Fixes CVE-2026-48102: Information disclosure and DOS via crafted UDF image

Update to 0.162.1 (rhbz#2455512)

This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

Fixes CVE-2026-48092: Information disclosure in 32-bit builds Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler Fixes CVE-2026-48101: Information disclosure in UEFI capsule parser Fixes CVE-2026-48102: Information disclosure and DOS via crafted UDF image

Update to version 3.10.0

Update to 0.162.1 (rhbz#2455512)

This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

An update that solves one vulnerability can now be installed.

An update that solves three vulnerabilities and has one security fix can now be installed.

An update that solves seven vulnerabilities and has one security fix can now be installed.

An update that solves eight vulnerabilities can now be installed.

An update that solves eight vulnerabilities can now be installed.

An update that solves seven vulnerabilities and has one security fix can now be installed.

An update that solves seven vulnerabilities can now be installed.

An update that solves seven vulnerabilities can now be installed.

https://security-tracker.debian.org/tracker/DSA-6348-1

Cisco SD-WAN make-me-root bug under attack
Feds freaked over Fable 5 after simple ‘fix this code’ prompt, not jailbreak, says researcher