Menu

Category Archives: GNU/Linux

Everything about GNU+Linux security

Moderate advisory for CVE-2023-45139 on python313-FontTools in openSUSE
openSUSE Tumbleweed Python313-CairoSVG Moderate Security Fix 2026-11989-1
openSUSE Tumbleweed Python313-Flask-Cors Security Alert 2026-11990-1
openSUSE python313-Brotli Moderate CVE-2020-8927 Vuln 2026-11988-1
openSUSE Tumbleweed libpng16 Moderate Security Update CVE-2026-46675
openSUSE Python313-Babel Moderate CVE-2021-42771 Advisory 2026-11986-1
openSUSE Tumbleweed Python313-Beaker Moderate Security Fix 2026-11987-1
openSUSE Tumbleweed logback Moderate Security Update for CVE-2026-104721
openSUSE Tumbleweed cpp13 Moderate Update Advisory 2026-11982-1
openSUSE Incus Advisory 2026-11983-1 Highlights Moderate Security Issues
Effective Nessus Vulnerability Scans for Data Center Linux Servers
Are you certain your data center Linux servers are free from vulnerabilities? If not, you need to scan them immediately! Learn how this can be done with Nessus.
AlmaLinux 9 Podman Moderate Security Fix CVE-2025-58183
AlmaLinux 9 oci-seccomp-bpf-hook Key Denial of Service Update 2026-33811
AlmaLinux 9 Delve Golang Moderate Update CVE-2025-58183
AlmaLinux 9 ALSA-2025-23336 gcc-toolset-13-binutils Moderate Heap Overflow
AlmaLinux 9 python3.9 Moderate Buffer Overflow Advisories 2024-5642
AlmaLinux 9 net-snmp Important Buffer Overflow CVE-2025-68615
AlmaLinux 9 mod_md Important Security Fix for CVE-2025-55753
AlmaLinux 9 OpenSSH Moderate Code Execution Vuln 2025-61984
AlmaLinux 9 git-lfs Important Symlink Arbitrary File Write CVE-2025-26625
AlmaLinux 9 libssh Moderate Security Issue CVE-2025-5987
AlmaLinux 9 Buildah Important Container Escape Vulnerability 2025-52881
AlmaLinux 9 java-17-openjdk Important Security Update 2026-22013
AlmaLinux 9 keylime Important Identity Takeover Issue CVE-2025-13609
AlmaLinux 9 Kernel Important Security Update ALSA-2026-0793 CVEs 2025-38703
AlmaLinux 9 Kernel Security Update Moderate IPv6 MAC Issue ALSA-2025-19409
AlmaLinux 9 go-rpm-macros Important Security Fix for CVE-2025-47906
AlmaLinux 9 tigervnc Important Use After Free CVE-2025-62229
AlmaLinux 9 Wireshark Important Access Issue Fix CVE-2025-13499
AlmaLinux 9 GIMP Important Remote Code Execution Fix for CVE-2025-10922
AlmaLinux 9 Kernel Update for Medium Security Issues ALSA-2025-22865
AlmaLinux 9 redis-7 Significant Security Update for RCE and DoS Issues
AlmaLinux 9 Galera MariaDB Moderate DoS Security Update ALSA-2025-19584
AlmaLinux 9 Haproxy Important DoS Vulnerability Fix ALSA-2025-21693
AlmaLinux 9 Tomcat Important Security Fixes for CVE-2025-31651
AlmaLinux 9 git-lfs Important Denial of Service Issues Fix 2025-61729
AlmaLinux 9 podman Important Security Issue CVE-2025-52881
AlmaLinux 9 libsoup Important Host Header Parsing Issue Fix 2025-14523
AlmaLinux 9 redis-7 Important RCE and DoS Flaws ALSA-2025-20955
AlmaLinux 9 Osbuild Composer Significant Denial of Service Vulnerabilities
AlmaLinux 9 ruby-4.0 Important DoS and Code Exec Threats ALSA-2026-20596
AlmaLinux 9 Firefox Important Security Update (ALSA-2025-23034)
AlmaLinux 9 MySQL Moderate DML and InnoDB Vulnerabilities ALSA-2025-23109
AlmaLinux 9 python-kdcproxy Major SSRF DoS Vulnerabilities ALSA-2025-21139
AlmaLinux 9 MySQL 8.4 Moderate DML InnoDB Threats ALSA-2025-23111
AlmaLinux 9 ALSA-2025-21462 Lasso Critical Type Confusion CVE-2025-47151
AlmaLinux 9 BIND Important Cache Poisoning Issues CVE-2025-40778
AlmaLinux 9 grafana Moderate Unbounded Allocation Issue ALSA-2025-23087
AlmaLinux 9 kernel Security Update CVE-2025-39806 Moderate Fixes
AlmaLinux 9 ALSA-2025-20963 qt5-qt3d Moderate Heap Overflow CVE-2025-11277
AlmaLinux 9 xorg-x11-server Moderate Use-After-Free CVE-2025-62229
AlmaLinux 9 Squid Important Info Disclosure 2025-20935 CVE-2025-62168
AlmaLinux 9 Introduces Moderate Update for open-vm-tools ALBA-2025-20841
AlmaLinux 9 Python3.12 Critical ALSA-2025-15007 CVE-2025-8194 Loop Fix
AlmaLinux 9 python3.11 Security Update of Moderate Severity CVE-2025-8194
AlmaLinux 9 Expat Important Memory Allocation Fix CVE-2025-59375
AlmaLinux 9 Unveils Key Sudo Update for Local Privilege Escalation Fix
AlmaLinux 9 Kernel Advisory CVE-2025-37823 Important Security Update
AlmaLinux 9 Kernel Important Security Update CVE-2025-22097
AlmaLinux 9 Kernel Important Security Update CVE-2025-37803
AlmaLinux 9 Security Update Released for GIMP – ALSA-2025-9162
DSA-6550-1 ghostscript – security update
Open Source Security: What 400+ Vulnerability Fixes Could Mean for Linux Users
IBM and Red Hat say their Lightwell initiative has identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries.
Defense in Depth Cybersecurity: How to Build Effective Layers
Why is the orders application talking to the backup server?
vLLM Vulnerability Update Fixes RCE and Server-Crashing Flaws
The vLLM project published security advisories on October 6, 2026, identifying version 0.31.0 as the fix for remote code execution (RCE), service crashes, [...]
Linux Filesystem Bug Lets Crafted JFS Names Overwrite Memory
Deepanshu Kartikey has submitted a patch for a Linux filesystem bug that lets a crafted JFS disk image overwrite kernel memory during a directory listing.
Linux NTFS Bug Copies Crafted Index Data Before Checking Its Size
Andrey Misiurov has proposed a patch for a Linux NTFS bug that lets a crafted disk image make the kernel read beyond a memory buffer.
NFC Security Bug Lets Linux Reuse Freed UART Memory During Shutdown
Shubham Antil has submitted a revised two-patch series addressing an NFC security bug in Linux’s device-shutdown code.
Nftables Interval Bug Can Leave Linux Using a Freed Chain Reference
Jérémy Jean has confirmed that a maintainer’s proposed patch stops the reproduced failure behind an nftables interval bug.
DSA-6549-1 xz-utils – security update
OpenStack Fixes Zaqar Flaw Exposing Other Tenants’ Queues
OpenStack disclosed a Zaqar security flaw on Oct 7, 2026 that lets an authenticated user access another project’s messaging queues.
Linux Security Update Fixes 12 X.Org and Xwayland Flaws
X.Org has issued fixes for 12 vulnerabilities in its display software.
Linux TCP Fast Open Use After Free Leaves a Packet Pointer Behind
A bug in Linux’s TCP Fast Open code can leave it reading memory that has already been released.
Apache Jackrabbit Fixes Critical WebDAV Session Hijacking Flaw
Apache disclosed a critical Apache Jackrabbit session hijacking flaw on Oct 7, 2026.
DSA-6548-1 node-shell-quote – security update
DSA-6547-1 ruby-jwt – security update
DSA-6546-1 rails – security update
Search Exposure Linux Security Threats Impacting Personal Data
Search-indexed personal data increases security risk in Linux environments. When email addresses, usernames, phone numbers, and role information are easy [...]
Understanding Internal vs External Pen Testing for Your Business
Penetration tests are like fire drills for your network. They expose weak spots, test defenses, and help prevent real damage when threats come knocking. [...]
Linux Kernel Vulnerability Fixed in Binder Device Creation
Linux developers have merged a fix for a Linux kernel vulnerability that can leave Binder device creation writing to memory the kernel has already released.
Citrix NetScaler Vulnerability Is Being Exploited: Check SAML Systems
Citrix has confirmed targeted attacks involving a Citrix NetScaler vulnerability and urged affected customers to update.
OpenOffice Vulnerability Can Run Code From Malicious Documents
Apache is asking OpenOffice users to turn off its Java integration after warning that a malicious document could run code on their computer.
Apache Thrift 0.25.0 Adds Memory Limits for Network Messages
Apache released Thrift 0.25.0 on Sep 30, 2026 with memory checks for several C++, Java, and Python components.
Apache Directory LDAP API 2.1.9 Security Update for CVE-2026-103877
Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.
OpenSSL Vulnerability Can Leak Server Memory Through DTLS
OpenSSL issued fixes on Sep 29, 2026 for an OpenSSL vulnerability that can send unrelated program memory to another party during secure connection setup.
Fedora version 43 Kernel 7.2.9 Critical System Upgrade 2026-754bab2c40
Fedora 43 Update on Security Improvements for Python 3.12 Release
Fedora 43 fixes a critical Type Confusion Buffer Overflow flaw in Chromium
Fedora 45 virt-v2v Critical Buffer Overflow Remote Exec CVE-2026-28364
Fedora 45 zenon Security Advisory CVE-2026-28364 Integrity Bypass
Fedora 45 Kernel 7.2.9 Important Fixes Advisory 2026-8dc7d1def3
Fedora 45 z3 High Critical Integrity Bypass And Proof Fixes 2026-403bcf6fd8
Fedora 45 Xen Critical OCaml Fix for Multiple CVEs 2026-403bcf6fd8
Fedora 45 why3 Essential Fixes for Critical Remote Code Execution and Flaws
Fedora 45 virt-top Critical Buffer Over-read Vulnerability 2026-403bcf6fd8
Fedora 45 Celestial Security Patch for OCaml 5.5.1 RCE Fix 2026-403bcf6fd8
Fedora 45 opam Critical Buffer Over-Read Fixes 2026-403bcf6fd8
Fedora 45 Prooftree Significant RCE Update 2026-403bcf6fd8 Released
Fedora 45 Unison Critical Remote Code Exec Vuln 2026-403bcf6fd8
Fedora 45 rocq-stdlib Critical Code Execution Bugs Vuln 2026-403bcf6fd8