Articles about security
Several vulnerabilities were discovered in python-urllib3, a HTTP library with thread-safe connection pooling for Python3, which could result in denial of service or request forgery. For the oldstable distribution (bookworm), these problems have been fixed in version 1.26.12-1+deb12u2.
MGASA-2026-0012 – Updated gimp packages fix security vulnerabilities
MGASA-2026-0011 – Updated python-urllib3 packages fix security vulnerabilities
MGASA-2026-0010 – Updated libpng packages fix security vulnerabilities
MGASA-2026-0009 – Updated nodejs packages fix security vulnerabilities
MGAA-2026-0006 – Updated v4l2loopback packages fix bug
https://security-tracker.debian.org/tracker/DSA-6102-1
https://security-tracker.debian.org/tracker/DSA-6103-1
https://security-tracker.debian.org/tracker/DSA-6101-1
USN-7916-1 introduced a regression in python-apt
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
https://security-tracker.debian.org/tracker/DSA-6100-1
Should verified identities become the standard online? Australia’s social media ban for under-16s shows why the question matters.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
If your data is on the dark web, it’s probably only a matter of time before it’s abused for fraud or account hijacking. Here’s what to do.
Viral Vaghela discovered an SQL injection vulnerability in Parsl, a parallel scripting library for Python. For the stable distribution (trixie), this problem has been fixed in version 2025.01.13+ds-1+deb13u1. We recommend that you upgrade your python-parsl packages.
Version 2.9.3 – 2025-12-30 Security: Fixed ANSI sequence injection (GHSA-59pp-r3rg-353g / CVE-2025-67746) Fixed COMPOSER_NO_SECURITY_BLOCKING env var not being respected for updates done via the install command, and added –no-security-blocking flag to install as well (#12677)
New upstream release (147.0)
Update to 2.69.0
Version 2.9.3 – 2025-12-30 Security: Fixed ANSI sequence injection (GHSA-59pp-r3rg-353g / CVE-2025-67746) Fixed COMPOSER_NO_SECURITY_BLOCKING env var not being respected for updates done via the install command, and added –no-security-blocking flag to install as well (#12677)
Update to Upstream version 0.1.2 – https://github.com/complytime/complyctl/releases/tag/v0.1.2
https://security-tracker.debian.org/tracker/DSA-6099-1
https://security-tracker.debian.org/tracker/DSA-6098-1
An update that solves one vulnerability and contains one feature can now be installed.
An update that solves one vulnerability and contains one feature can now be installed.
An update that solves one vulnerability and contains one feature can now be installed.
An update that solves one vulnerability and contains one feature can now be installed.
An update that solves one vulnerability can now be installed.
Google Guest Agent could be made to crash if it received specially crafted network traffic.