Menu

Category Archives: GNU/Linux

Everything about GNU+Linux security

DSA-6576-1 bind9 – security update
DSA-6575-1 nginx – security update
A patch only reduces risk when it runs in production
The patch was ready in days. It took months to ship. Why?I hear that question in nearly every customer conversation about vulnerability management. The [...]
Phala Attack Shows What Confidential Computing Does Not Protect
An attacker read logs and settings from a small set of Phala Cloud apps, the company says.
DSA-6534-3 webkit2gtk – regression update
DSA-6577-1 chromium – security update
Debian bind9 Update Addresses DNS Attacks and Service Outages
Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities
openSUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
SUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
SUSE libpng16 1.6.59 Fixes CVE-2026-46675 Security Vulnerability
openSUSE Leap 15.4 libheif Fixes Memory Errors and Security Issues
SUSE libheif Fixes Memory Access and Out of Bounds Errors
SUSE Poppler Moderate Integer Overflow and DoS Update 2026-4816-1
openSUSE Poppler Update Fixes PDF Processing Errors Across Systems
SUSE cyrus-sasl Update Resolves DIGEST-MD5 Heap Overflow Vulnerability
openSUSE cyrus-sasl Update Fixes DIGEST-MD5 Client Compromise
SUSE Mutt 1.10.1 Fixes Crafted Header Heap Write Vulnerability
openSUSE cifs-utils Fixes CIFS Credential Mount Injection
SUSE openssl-certs 2.92 Update Removes emSign Root Certificates
SUSE ca-certificates-mozilla Refreshes Trusted Root Certificates
SUSE Docker Important Update for Go Security Release and Fixes
SUSE rootlesskit Update Rebuilds Against Current Go Release
openSUSE rootlesskit Update for Current Go Security Release
SUSE rootlesskit Important Update for Go Security Release
SUSE OpenSSH Update Fixes SSH Forwarding and Policy Bypasses
openSUSE OpenSSH 9.6p1 Fixes SSH Forwarding and Agent Issues
SUSE OpenEXR Update Fixes Crafted EXR File Processing Issues
openSUSE libraw Update Fixes TIFF Processing Crash in Image Handling
SUSE libraw Update Fixes a Crash During TIFF Image Processing
openSUSE Kernel Live Patch Fixes Five Important Security Issues
SUSE Kernel Live Patch 22 Fixes Five Security Vulnerabilities
DSA-6572-1 ca-certificates – security update
Ubuntu NSS Update Removes Compromised Certificate Authority Roots
Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution
Arch Linux php-legacy Fixes a Remote Code Execution Vulnerability
Arch Linux PHP Critical Remote Code Execution ASA-202610-1
Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs
Oracle Linux 8 perl-URI Update Fixes Hostname Encoding Bypass
Fedora PHP Update Fixes OOM and Stale State RCE Vulnerabilities
Fedora 44 Updates rust-webpki-roots After eMudhra CA Compromise
Fedora 44 ca-certificates Update Adds Code-Signing Roots
Fedora 44 Updates rustls-webpki After eMudhra CA Compromise
Fedora 44 Updates Rust Certificate Roots After CA Compromise
Fedora 44 Dolphin Fixes Crafted Folder Command Execution
Fedora 44 linux-firmware 20261019 Hardware Firmware Update
Fedora 44 qdigidoc 4.11.1 Fixes Path Traversal Vulnerability
Fedora 44 GSConnect 73 Fixes Authenticated File Write Vulnerability
Fedora 44 Nicotine+ Update Fixes Decompression Bomb DoS
Fedora 44 Fixes DoS in perl-ExtUtils-Typemaps-Default 1.07
Fedora libdigidocpp 4.5.1 Fixes Signature Forgery Vulnerability
Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues
Rocky Linux 10 bubblewrap Update Blocks Sandbox File Writes
Rocky Linux 10 OpenSSH Update Fixes SFTP and GSSAPI Issues
Rocky Linux 10 rust-sequoia-sq Fixes DNS and DoS Issues
Rocky Linux 10 hostapd Update Fixes a Wi-Fi 7 DoS Vulnerability
Rocky Linux 10 Kernel Fixes for Networking and Memory Safety
Comparing Five Platforms for Continuous PCI Compliance in Linux
Maintaining PCI DSS compliance has gone from a sprint to a year-round marathon. Verizon’s 2022 Payment Security Report found only 43.4% of organizations [...]
What Is Tor Browser & How Does It Impact Linux Security Teams?
Tor Browser is a privacy-focused web browser that routes traffic through the Tor network to obscure a user’s identity and destination—and that design has [...]
Privilege Escalation: Five Linux Exploits Give Ordinary Users Root
Linux researcher Hyunwoo Kim has shown five ways to turn a limited account into root on tested Linux systems.
Zero-Day Vulnerability Gave Attackers Time to Plant Backdoors
Attackers broke into BeyondTrust Remote Support before a patch was ready, then left ways to return to the server.
AI Code Review Produces 28 Accepted Security Findings in Apache Camel
An artificial intelligence (AI) scanner helped find 28 security flaws in Apache Camel that led to fixes.
DSA-6573-1 firefox-esr – security update
DSA-6574-1 php8.4 – security update
openSUSE Podman 4.9.5 Rebuilt Against Current Go Security Release
SUSE Podman 4.9.5 Update Rebuilds Against Current Go Security Release
SUSE Linux Enterprise 15 SP5 Kernel Live Patch 34 Fixes Four Issues
SUSE Linux Micro 6.2 p11-kit Update Fixes RPC Parsing Issues
SUSE Linux Micro 6.2 Fixes 81 NVIDIA Driver Security Flaws
Ubuntu Refreshes CA Certificates Across Supported Releases
Rocky Linux 10 MariaDB 11.8 Update Fixes PCRE2 Memory Corruption
Rocky Linux 10 urllib3 Fixes DoS and HTTPS Proxy Security Risks
Rocky Linux 10 glibc Fixes DoS and Heap Overflow Issues
Rocky Linux 10 perl-URI Update Fixes Hostname Encoding Bypass
Rocky Linux 10 Wireshark Update Fixes DoS and Buffer Overflows
Rocky Linux 10 Emacs Update Fixes Image and TRAMP Exploits
Rocky Linux 10 OpenEXR Update Addresses EXR File Threats
Rocky Linux 10 Xwayland Fixes Code Execution and Escalation
Rocky Linux 10 librabbitmq Update Fixes Heap Overflow, CVE-2026-44236
Rocky Linux 9 environment-modules Fixes Bash Completion Injection
Rocky Linux perl-URI Fixes the Hostname Encoding Bypass
Rocky Linux 9 cockpit-files Fixes Symlink Ownership Flaws
Rocky Linux 9 Xwayland Fixes Code Execution and Escalation
Rocky Linux 9 xorg-x11-server Update Blocks Code Execution Risks
Rocky Linux 9 webkit2gtk3 Fixes Critical ANGLE Code Execution
Rocky Linux 9 Emacs Fixes the Flymake Code Execution Issue
Rocky Linux PostgreSQL Update Fixes pgvector Index Build Code Execution
Rocky Linux 9 Fixes urllib3 Memory and Proxy Security Risks
Rocky Linux 9 RESTEasy Fixes Image DoS and Origin Issues
Rocky Linux 9 PostgreSQL 18 Fixes pgvector Code Execution
Mageia 10 x11-server Fixes Memory Corruption Issues and Improves Stability
openSUSE Hashcat Important Fixes for Three Security Flaws
openSUSE python-joserfc Fixes Critical JWS Signature Bypass
CoreDNS Update Stops HTTP/2 Heap Exhaustion on openSUSE Leap 16.0
openSUSE Leap 16.0 gh Update Fixes File Write and HTTP/2 Risks
openSUSE tinyproxy Critical HTTP Header Fixes 2026-22133-1
openSUSE Leap 16.0 Varnish Update Fixes Request Smuggling
grok-build Update Resolves Pack Parsing DoS on openSUSE Leap 16.0
openSUSE libxls Update Fixes Memory Issues and Parser Errors
openSUSE Leap 16.0 PuTTY Update Fixes Remote Attack Vulnerabilities