Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

Ubuntu 26.04 Nginx Severe Denial of Service Regressions USN-8563-2

USN-8563-1 introduced a regression in nginx

Linux Nginx

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 FreeType Important Denial of Service CVE-2026-50811

FreeType could be made to crash if it opened a specially crafted file.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 FreeRDP Important Code Execution Vulnern 8561-1

Several security issues were fixed in FreeRDP.

Linux

LinuxSecurity - Security Advisories

Ubuntu 26.04 nginx Critical Denial of Service Vuln 8563-1

Several security issues were fixed in nginx.

Linux Nginx

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 PHP Significant Denial of Service Flaws USN-8564-1

Several security issues were fixed in PHP.

Linux PHP

LinuxSecurity - Security Advisories

Ubuntu 26.04 SQLite Critical DoS Buffer Overread USN-8565-1

Several security issues were fixed in SQLite.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE shibboleth-sp Important SQL Injection Vulnerability CVE-2025-9943

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE gstreamer-plugins-bad Important Buffer Overflow Issues 2026-3125-1

An update that solves seven vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories

Ubuntu libXfont Important Denial Of Service Heap Overflow Vuln 8560-1

Several security issues were fixed in libXfont.

Linux

LinuxSecurity - Security Advisories

Ubuntu 26.04 LTS rlottie Critical Denial of Service USN-8559-1

rlottie could be made to crash if it received specially crafted input.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Containerized Data Importer Moderate Threat Advisory 2026-11305-1

An update that solves 13 vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed kubevirt-container-disk Moderate CVE-2026-35469

An update that solves one vulnerability can now be installed.

Linux Docker

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed php-composer2 Moderate CVE-2026-45793 Security Fix

An update that solves one vulnerability can now be installed.

Linux PHP

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed wget Moderate Access Control Risk CVE-2026-15146

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories

Fedora 44 python-uv-build Update Security Hardening FEDORA-2026-be84487fdd

Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.

Linux

LinuxSecurity - Security Advisories

Fedora 44 rust-astral_async_zip Key Update on ZIP Handling 2026-be84487fdd

Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.

Linux

LinuxSecurity - Security Advisories

Fedora 43 uv Update 0.11.28 Security Zip Handling Fix 2026-8893ec1aeb

Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.

Linux

LinuxSecurity - Security Advisories

Fedora 43 rust-astral_async_zip Important Zip Handling Fix 2026-8893ec1aeb

Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Chromedriver Moderate Update 2026-11309-1

An update that solves 7 vulnerabilities can now be installed.

Linux Chrome

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE libsuricata8 Moderate Update Advisory 2026-11308-1

An update that solves 5 vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Chromium Important Use After Free Vulnerabilities Vuln 2026-0254-1

An update that fixes 7 vulnerabilities is now available.

Linux Chrome

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 python-asyncssh Critical Unauthorized Access Fix 2026-574496d9ae

import asyncssh 2.23.1 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via pat…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 python-asyncssh Important Unauthorized File Write CVE-2026-54590

update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via p…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 mbedtls 3.6.7 Critical Update DoS Buffer Overflow Fixes

Update to 3.6.7 Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-…

Linux

Back to Home

What it means for your servers

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

Ubuntu 26.04 Nginx Severe Denial of Service Regressions USN-8563-2

Ubuntu 26.04 FreeType Important Denial of Service CVE-2026-50811

Ubuntu 26.04 FreeRDP Important Code Execution Vulnern 8561-1

Ubuntu 26.04 nginx Critical Denial of Service Vuln 8563-1

Ubuntu 26.04 PHP Significant Denial of Service Flaws USN-8564-1

Ubuntu 26.04 SQLite Critical DoS Buffer Overread USN-8565-1

openSUSE shibboleth-sp Important SQL Injection Vulnerability CVE-2025-9943

openSUSE gstreamer-plugins-bad Important Buffer Overflow Issues 2026-3125-1

Ubuntu libXfont Important Denial Of Service Heap Overflow Vuln 8560-1

Ubuntu 26.04 LTS rlottie Critical Denial of Service USN-8559-1

openSUSE Containerized Data Importer Moderate Threat Advisory 2026-11305-1

openSUSE Tumbleweed kubevirt-container-disk Moderate CVE-2026-35469

openSUSE Tumbleweed php-composer2 Moderate CVE-2026-45793 Security Fix

openSUSE Tumbleweed wget Moderate Access Control Risk CVE-2026-15146

Fedora 44 python-uv-build Update Security Hardening FEDORA-2026-be84487fdd

Fedora 44 rust-astral_async_zip Key Update on ZIP Handling 2026-be84487fdd

Fedora 43 uv Update 0.11.28 Security Zip Handling Fix 2026-8893ec1aeb

Fedora 43 rust-astral_async_zip Important Zip Handling Fix 2026-8893ec1aeb

openSUSE Tumbleweed Chromedriver Moderate Update 2026-11309-1

openSUSE libsuricata8 Moderate Update Advisory 2026-11308-1

openSUSE Chromium Important Use After Free Vulnerabilities Vuln 2026-0254-1

Fedora 43 python-asyncssh Critical Unauthorized Access Fix 2026-574496d9ae

Fedora 44 python-asyncssh Important Unauthorized File Write CVE-2026-54590

Fedora 44 mbedtls 3.6.7 Critical Update DoS Buffer Overflow Fixes