Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
vLLM Vulnerability Update Fixes RCE and Server-Crashing Flaws
The vLLM project published security advisories on October 6, 2026, identifying version 0.31.0 as the fix for remote code execution (RCE), service crashes, and …
Debian php8.2 Security Advisory DLA-4819-1 CVE-2025-1218 Denial of Service
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in in denial of service, informati…
Debian LTS evolution-data-server Critical File Deletion Advisory DLA-4796-1
An issue has been found in evolution-data-server, an evolution database backend server. A Flatpak application with D-Bus access to the addressbook service can …
CISA Warns of Active Attacks on a Critical Cisco ISE Flaw
Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login. Cisco disclosed CVE-2026-76460 o…
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wedn…
Fedora 43 Rest Security Advisory CVE-2026-16615 Weak Random Number Fix
Fix for https://access.redhat.com/security/cve/cve-2026-16615
Fedora 43 AusweisApp2 Software Update Advisory 2026-44f6d8f2e7
An update to AusweisApp2 version 2.5.5 is now available for Fedora 43, allowing online identification with German ID cards and providing access to stored data.
openSUSE Podman Security Advisory CVE-2026-55686 CVE-2026-57231 Guide
A security update for podman addresses two vulnerabilities in openSUSE Leap 15.3 and SUSE Enterprise Storage 7.1, allowing unauthorized host filesystem access …
Ubuntu Bind9 Security Advisory USN-8648-1 CVE-2026-10723 CVE-2026-10822
Multiple vulnerabilities in Bind9 affecting various Ubuntu LTS versions have been addressed, potentially allowing remote attacks leading to impersonation, deni…
Fedora 43 libnfs Security Advisory CVE-2026-57918 CVE-2026-53689
The Fedora 43 update for libnfs version 6.0.2 addresses CVE-2026-57918 and CVE-2026-53689 vulnerabilities, improving security for accessing NFS shares over a n…
Fedora 43 Lemonldap-ng Update Advisory CVE-2026-19349 Security Fix
Fedora 43 has updated lemonldap-ng to version 2.23.3, addressing CVE-2026-19349, enhancing its Web Single Sign On and Access Management features for improved s…
Oracle Linux 9 OpenSSH Important Security Advisory ELSA-2026-47756
Oracle Linux 9 has released updated packages for OpenSSH, addressing multiple security vulnerabilities through various fixes, including critical patches for re…
Gentoo HTTP-Daemon Normal Improper Header Handling GLSA-202608-10
Gentoo Linux's advisory warns of a vulnerability in HTTP-Daemon allowing header manipulation, potentially leading to unauthorized access. Users are urged to up…
Ubuntu Libgit2 Security Advisory USN-8628-1 Multiple Issues Fixed
Ubuntu released security updates for libgit2 addressing multiple vulnerabilities that could allow remote code execution, denial of service, and credential leak…
SUSE OpenSSL-3 Important DoS Impact Advisory 2026-23058-1
An important security update for OpenSSL 3 on SUSE Linux Micro 6.0 addresses a DoS vulnerability related to remote memory allocations, fixable via standard upd…
Fedora 43 pgAdmin4 Security Advisory New Fixes for Multiple Risks
Fedora has released an update for pgAdmin 4 to version 9.17, addressing various bugs and vulnerabilities such as unauthenticated data manipulation and remote c…
openSUSE openssl-3 Moderate DoS Risk Advisory 2026-3486-1
A security update for openssl-3 has been released for several SUSE products, addressing a remote denial of service vulnerability in the TLS ClientHello. Users …
Fedora 43 ProFTPD ACL Bypass Fix CVE-2026-35025 Advisory 2026-d314ce6051
The Fedora update for ProFTPD version 1.3.9c includes a new module, mod_procfs, which addresses a critical ACL bypass vulnerability by preventing certain file …
Mageia tdlib Bug Fix Security Advisory 2026-0072 for Telegram Client
The article announces updates for purple-telegram-tdlib in Mageia 10 and 9, addressing a chat access issue for group administrators and migrating to a new acti…
SUSE glib2 Important Out-of-Bounds Errors Advisory 2026-3235-1
A security update for glib2 addresses six vulnerabilities, enhancing the security of various SUSE products and improving protection against potential out-of-bo…
Mak’s Weekly Security Roundup: Linux Updates You Shouldn't Ignore This Week
Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not eve…
Fedora 43 perl-Archive-Tar Important Path Traversal CVE-2026-42496 Advisory
Fixed CVE-2026-42496 - Path traversal via crafted symlinks allows arbitrary file access Backported from 3.08
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild.The former, tracked…
Ubuntu Copy Fail High Local Privilege Escalation Threat Advisory 2026-31431
Most Linux hardening focuses on access. This vulnerability bypasses that entirely.