Main menu
You are here
LinuxSecurity.com
The central voice for Linux and Open Source security news.
Përditësimi: 1 ditë 6 orë më parë
Anthropic Launches AI Vulnerability Scanner for Open-Source Projects
Open-source maintainers can now apply for free security scans from Anthropic.
Go Security Update Fixes 15 Flaws in Servers and Toolchains
Go 1.27.2 and 1.26.9 arrived on Oct 8, 2026 with corrections for 15 security flaws.
CI/CD Security Flaw in AWS CDK Could Pull Host Files Into Builds
A file on a build machine could end up in a cloud deployment bundle because of a flaw disclosed by Amazon Web Services (AWS) on Oct 8, 2026.
OpenStack Fixes Zaqar Flaw Exposing Other Tenants’ Queues
OpenStack disclosed a Zaqar security flaw on Oct 7, 2026 that lets an authenticated user access another project’s messaging queues.
Linux Security Update Fixes 12 X.Org and Xwayland Flaws
X.Org has issued fixes for 12 vulnerabilities in its display software.
Linux TCP Fast Open Use After Free Leaves a Packet Pointer Behind
A bug in Linux’s TCP Fast Open code can leave it reading memory that has already been released.
Apache Jackrabbit Fixes Critical WebDAV Session Hijacking Flaw
Apache disclosed a critical Apache Jackrabbit session hijacking flaw on Oct 7, 2026.
Open Source Security: What 400+ Vulnerability Fixes Could Mean for Linux Users
IBM and Red Hat say their Lightwell initiative has identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries.
Defense in Depth Cybersecurity: How to Build Effective Layers
Why is the orders application talking to the backup server?
vLLM Vulnerability Update Fixes RCE and Server-Crashing Flaws
The vLLM project published security advisories on October 6, 2026, identifying version 0.31.0 as the fix for remote code execution (RCE), service crashes, and request-handling flaws.
Linux Filesystem Bug Lets Crafted JFS Names Overwrite Memory
Deepanshu Kartikey has submitted a patch for a Linux filesystem bug that lets a crafted JFS disk image overwrite kernel memory during a directory listing.
Linux NTFS Bug Copies Crafted Index Data Before Checking Its Size
Andrey Misiurov has proposed a patch for a Linux NTFS bug that lets a crafted disk image make the kernel read beyond a memory buffer.
NFC Security Bug Lets Linux Reuse Freed UART Memory During Shutdown
Shubham Antil has submitted a revised two-patch series addressing an NFC security bug in Linux's device-shutdown code.
Nftables Interval Bug Can Leave Linux Using a Freed Chain Reference
Jérémy Jean has confirmed that a maintainer's proposed patch stops the reproduced failure behind an nftables interval bug.
Security Configuration Management: Build a Linux Baseline Your Team Can Maintain
“Which settings are we supposed to use?” is a reasonable question from an administrator building a server.
Apache Struts Fixes Four Flaws Including Possible Remote Code Execution
Apache published four Struts security notices on October 5, 2026. The fixes are in the new 6.12.0 and 7.4.0 releases.
SubQuery Supply Chain Attack Targeted Cloud and CI Credentials
An npm package used throughout the SubQuery project was poisoned.
SELinux NFS Security Update Fixes File Labeling Problems Effectively
On an affected host, a second mount of the same NFSv4 share could alter SELinux label handling on the first.
Linux Kernel Vulnerability Fixed in Binder Device Creation
Linux developers have merged a fix for a Linux kernel vulnerability that can leave Binder device creation writing to memory the kernel has already released.
Citrix NetScaler Vulnerability Is Being Exploited: Check SAML Systems
Citrix has confirmed targeted attacks involving a Citrix NetScaler vulnerability and urged affected customers to update.