Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 Flare-im Advisory 2026-67c5e97a79 Impersonation Fix
Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on- mobile/flare/-/r…
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary…
vLLM Vulnerability Update Fixes RCE and Server-Crashing Flaws
The vLLM project published security advisories on October 6, 2026, identifying version 0.31.0 as the fix for remote code execution (RCE), service crashes, and …
Cyber experts call on CISA to create mandatory federal OT rules
The Operational Technology Cybersecurity Coalition released a white paper urging the CISA to create a new directive centered around operational technology, whi…
Fedora 45 OCaml XML Light Critical Bugs Fix Advisory 2026-403bcf6fd8
This is a mass rebuild of the OCaml ecosystem with OCaml 5.5.1, which fixes two security bugs. See https://github.com/ocaml/ocaml/releases/tag/5.5.1 for detail…
Fedora 45 OCaml-Time-Now Critical Buffer Overflow Advisory 2026-403bcf6fd8
This is a mass rebuild of the OCaml ecosystem with OCaml 5.5.1, which fixes two security bugs. See https://github.com/ocaml/ocaml/releases/tag/5.5.1 for detail…
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem wa…
SUSE 15 SP6 Advisory SUSE-SU-2026-3961-2 suseconnect-ng Moderate Issues
# Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:3961-2 Release Date: 2026-10-04T20:34:47Z Rating: moderate References:
Mageia 10 PHP 8.5 Bugfix Advisory Updated for 2026-0145 Release
Security update
Rocky Linux 9 gvfs Important Buffer Overflow Advisory RLSA-2026-74370
Important: gvfs security update
Ubuntu Linux Kernel Critical Network Issues Advisory USN-8851-2
Several security issues were fixed in the Linux kernel.
Debian Thunderbird Critical Arbitrary Code Exec Advisory DSA-6536-1
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (trixie), these pro…
Debian WebKitGTK Important Heap Corruption Privilege Escalation DSA-6534-1
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
Rocky Linux Ruby Advisory RLSA-2026-73519 CVE-2026-80212 on DOS Risks
Important: ruby:2.5 security update
Ubuntu 22.04 LTS Advisory USN-8818-4 Important Privilege Escalation Patch
Several security issues were fixed in the Linux kernel.
Mageia 10 9 urpm-ng Bugfix Migration Advisory 2026-0139
Security update
Fedora 43 libxmp Medium Playback Bugfix Advisory 2026-47ffcebe44
Latest bugfix release. Full changelog: https://sourceforge.net/p/xmp/libxmp/ci/libxmp-4.7.3/tree/docs/Changelog . Fixes a medium-rated security issue: https://…
Mageia 10 9 Boomaga Bugfix GUI Issue Advisory 2026-0138
Security update
Ubuntu Atril USN-8839-1 Important Code Execution Risks Advisory
Several security issues were fixed in Atril.
Ubuntu catdoc Important Integer Overflow Exploit Advisory USN-8838-1
Several security issues were fixed in catdoc.
Fedora 45 python-urllib3 Urgent Advisory on TLS Memory Vulnerabilities 2026
Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high sever…
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real serv…
Slackware pcre2 Important Out-of-Bounds Write Fix Advisory 2026-271-02
New pcre2 packages are available for Slackware 15.0 and -current to fix a security issue.
Rocky Linux ruby Important Denial of Service Advisory RLSA-2026-72484
Important: ruby:4.0 security update