Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 20.04 18.04 QEMU Medium DoS Vulnerability Backslide USN-8412-2

USN-8412-1 introduced a regression in QEMU

Linux

LinuxSecurity - Security Advisories

Ubuntu OpenStack Keystone Critical Roles Bypass Vulnern USN-8433-1

Several security issues were fixed in OpenStack Keystone.

Linux

LinuxSecurity - Security Advisories

Debian gsasl Critical Memory Exposure Resolution DSA-6348-1

It was discovered that missing input sanitising in the NTLM client of the GNU SASL library could result in memory disclosure For the stable distribution (trixi…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE OpenSSL-1_1 Important Buffer Overflow DoS Vuln 2026-2403-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 2026-2404-1 openssl-1_1 Important Buffer Overflow CVE-2026-45447

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Important openssl-1_1 Security Update Advisory 2026-2404-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.5 OpenSSL Important Security Update 2026-2405-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

SUSE qemu Important Heap Overflow Denial of Service Vuln 2026-2406-1

An update that solves three vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE perl-HTTP-Daemon Important OS Command Injection Fix 2026-2408-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Important Heap Overflow Fix 2026-2409-1

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 2026-2410-1 OpenSSL Important Heap Overflow Vuln

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Critical Buffer Overflow Update SUSE-2026-2411-1

An update that solves four vulnerabilities and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 2026-2412-1 Important openssl-1_1-livepatches Heap Use-After-Free

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 rabbitmq-c Critical Buffer Overflow and DoS Issues 8437-1

Several security issues were fixed in rabbitmq-c.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu Squid Important DoS Buffer Overflow Vulnerabilities USN-8435-1

Several security issues were fixed in Squid.

Linux

LinuxSecurity - Security Advisories Alerts

Ubuntu CA Certificates Important Update Advisory USN-8436-1

The CA certificates in the ca-certificates package were updated.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed python311-zeroconf Moderate Threat Fix 2026-11036-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed python311-aiosmtplib Moderate CVE-2026-53533 Update

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed google-osconfig-agent Moderate DoS Issue 2026-11032-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Important Heap Use-After-Free Vulnerability 2026-2409-1

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.6 openssl-1_1-livepatches Important DoS CVE-2026-45447

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Significant Denial of Service Heap Overflow 2026-2405-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.6 Critical OpenSSL Livepatches Buffer Overflow CVE-2025-15467

An update that solves four vulnerabilities and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE openssl-3 Important Buffer Overflow Patch SUSE-SU-2026-2397-1

An update that solves eight vulnerabilities can now be installed.

Linux OpenSSL

Back to Home

What it means for your servers

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

cPGuard: a hijacked update channel pushed a root backdoor to about 2,950 Linux servers

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

Ubuntu 20.04 18.04 QEMU Medium DoS Vulnerability Backslide USN-8412-2

Ubuntu OpenStack Keystone Critical Roles Bypass Vulnern USN-8433-1

Debian gsasl Critical Memory Exposure Resolution DSA-6348-1

SUSE OpenSSL-1_1 Important Buffer Overflow DoS Vuln 2026-2403-1

openSUSE 2026-2404-1 openssl-1_1 Important Buffer Overflow CVE-2026-45447

openSUSE Important openssl-1_1 Security Update Advisory 2026-2404-1

openSUSE 15.5 OpenSSL Important Security Update 2026-2405-1

SUSE qemu Important Heap Overflow Denial of Service Vuln 2026-2406-1

SUSE perl-HTTP-Daemon Important OS Command Injection Fix 2026-2408-1

openSUSE OpenSSL Important Heap Overflow Fix 2026-2409-1

openSUSE 2026-2410-1 OpenSSL Important Heap Overflow Vuln

openSUSE OpenSSL Critical Buffer Overflow Update SUSE-2026-2411-1

SUSE 2026-2412-1 Important openssl-1_1-livepatches Heap Use-After-Free

Ubuntu 26.04 rabbitmq-c Critical Buffer Overflow and DoS Issues 8437-1

Ubuntu Squid Important DoS Buffer Overflow Vulnerabilities USN-8435-1

Ubuntu CA Certificates Important Update Advisory USN-8436-1

openSUSE Tumbleweed python311-zeroconf Moderate Threat Fix 2026-11036-1

openSUSE Tumbleweed python311-aiosmtplib Moderate CVE-2026-53533 Update

openSUSE Tumbleweed google-osconfig-agent Moderate DoS Issue 2026-11032-1

openSUSE OpenSSL Important Heap Use-After-Free Vulnerability 2026-2409-1

openSUSE 15.6 openssl-1_1-livepatches Important DoS CVE-2026-45447

openSUSE OpenSSL Significant Denial of Service Heap Overflow 2026-2405-1

openSUSE 15.6 Critical OpenSSL Livepatches Buffer Overflow CVE-2025-15467

openSUSE openssl-3 Important Buffer Overflow Patch SUSE-SU-2026-2397-1