Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE ImageMagick Important Heap Buffer Overflow Vuln 2026-0503-1

An update that solves three vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Debian Trixie pdns-recursor Denial-of-Service Security Issues DSA-6135-2

Two vulnerabiliites have been discovered in PDNS Recursor, a resolving name server which result result in denial of service when processing a malformed zone fi…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed postgresql16 Moderate Security Update 2026-10192-1

An update that solves 4 vulnerabilities can now be installed.

Linux Databases

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Advisory 10190-1 PostgreSQL 14.21-1.1 Moderate Update

An update that solves 4 vulnerabilities can now be installed.

Linux Databases

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed postgresql15 Moderate Security Fix 2026-10191-1

An update that solves 4 vulnerabilities can now be installed.

Linux Databases

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Haproxy Moderate CVE-2026-26081 Advisory

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed libowncloudsync-devel Security Update 2026-10200-2

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora Linux 36 Kernel LTS Significant Security Patch 2026-0578-3

An update that solves five vulnerabilities and has two security fixes can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora Linux 38 Vulnerability Addressed FDR-FDR-2023-8901-2

An update that solves four vulnerabilities and has two security fixes can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Enterprise 15 SP8 Kernel RT Key Update 2026-0550-3

An update that solves three vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Enterprise 15 SP7 Kernel RT Important Security Patch 2026-0491-1

An update that solves two vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE openCryptoki 15-SP7 Moderate Threat Privilege Escalation 2026-0481-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE libsodium Security Updates for CVE-2025-15444 CVE-2025-69277

An update that solves two vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Zabbix Low Security Update CVE-2024-36469 CVE-2024-42325

An update that solves two vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 2026-0284-3 Munge Notable Resource Drain Alert CVE-2026-25509

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 15.6 munge Important Buffer Overflow Vuln 2026-0484-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 2026-0045-1 Assimp Moderate Denial Of Service CVE-2025-3548

An update that fixes one vulnerability is now available.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 libssh Faces Severe DoS Buffer Underflow Vulnerabilities

New upstream release fixing several security issues

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 25.10 nginx Critical Insertion Security Flaw USN-8038-1

nginx could be made to insert content into proxied server data.

Linux Nginx

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 25.10 libpng Critical DoS Crash Vulnerability USN-8039-1

libpng could be made to crash if it opened a specially crafted file.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 25.10 HAProxy Security Low DoS Failure Vulnerability USN-8037-2

HAProxy could be made to crash if it received specially crafted network traffic.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 22.04 LTS MUNGE Critical Buffer Overflow Threat CVE-2026-25506

MUNGE could be made to crash or run programs as your login if it opened a specially crafted file.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 22.04 Dottie Critical Remote Code Execution USN-8041-1

Dottie could be made to run programs if it received specially crafted network traffic.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Kubevirt Important Update Fixes DoS Issues 2026-0479-1

An update that solves two vulnerabilities and has one security fix can now be installed.

Linux

Back to Home

What it means for your servers

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

cPGuard: a hijacked update channel pushed a root backdoor to about 2,950 Linux servers

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

openSUSE ImageMagick Important Heap Buffer Overflow Vuln 2026-0503-1

Debian Trixie pdns-recursor Denial-of-Service Security Issues DSA-6135-2

openSUSE Tumbleweed postgresql16 Moderate Security Update 2026-10192-1

openSUSE Tumbleweed Advisory 10190-1 PostgreSQL 14.21-1.1 Moderate Update

openSUSE Tumbleweed postgresql15 Moderate Security Fix 2026-10191-1

openSUSE Tumbleweed Haproxy Moderate CVE-2026-26081 Advisory

openSUSE Tumbleweed libowncloudsync-devel Security Update 2026-10200-2

Fedora Linux 36 Kernel LTS Significant Security Patch 2026-0578-3

Fedora Linux 38 Vulnerability Addressed FDR-FDR-2023-8901-2

SUSE Linux Enterprise 15 SP8 Kernel RT Key Update 2026-0550-3

SUSE Linux Enterprise 15 SP7 Kernel RT Important Security Patch 2026-0491-1

SUSE openCryptoki 15-SP7 Moderate Threat Privilege Escalation 2026-0481-1

SUSE libsodium Security Updates for CVE-2025-15444 CVE-2025-69277

SUSE Zabbix Low Security Update CVE-2024-36469 CVE-2024-42325

SUSE 2026-0284-3 Munge Notable Resource Drain Alert CVE-2026-25509

openSUSE Leap 15.6 munge Important Buffer Overflow Vuln 2026-0484-1

openSUSE 2026-0045-1 Assimp Moderate Denial Of Service CVE-2025-3548

Fedora 43 libssh Faces Severe DoS Buffer Underflow Vulnerabilities

Ubuntu 25.10 nginx Critical Insertion Security Flaw USN-8038-1

Ubuntu 25.10 libpng Critical DoS Crash Vulnerability USN-8039-1

Ubuntu 25.10 HAProxy Security Low DoS Failure Vulnerability USN-8037-2

Ubuntu 22.04 LTS MUNGE Critical Buffer Overflow Threat CVE-2026-25506

Ubuntu 22.04 Dottie Critical Remote Code Execution USN-8041-1

SUSE Kubevirt Important Update Fixes DoS Issues 2026-0479-1