News · via Ubuntu Security
USN-8956-1: Brotli vulnerability
It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
Linux
Coverage tagged "Linux".
News · via Ubuntu Security
USN-8955-1: nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash…
News · via Infosecurity Magazine
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Six Linux flaws were made public, including one with a working root exploit and no merged fix
News · via Canadian Centre for Cyber Security
Red Hat security advisory (AV26-1084)
Serial number: AV26-1084 Date: October 26, 2026 As of October 20, 2026, Red Hat is affected by vulnerabilities in the following products: Red Hat Enterprise Linux 10 All versions Red Hat Enterprise…
News · via Help Net Security
Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3
The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments…
News · via SOCRadar
Node2Shell: Brotli Flaw Hits Python Packages
The Node2Shell Brotli flaw (CVE-2026-111497), disclosed alongside Node.js fixes on October 21, 2026, also reaches Python through the PyPI Brotli and brotlicffi packages. Both compile Google’s…
News · via BleepingComputer
Kali Linux 2026.3 released with 7 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more.
News · via BleepingComputer
Kali Linux 2026.3 released with 6 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more.
News · via Help Net Security
AI slop is piling up highest on the biggest open-source projects
The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than…
News · via Debian Security
DSA-6585-1 thunderbird - security update
https://security-tracker.debian.org/tracker/DSA-6585-1
News · via Debian Security
DSA-6584-1 varnish - security update
https://security-tracker.debian.org/tracker/DSA-6584-1
News · via Debian Security
DSA-6583-1 libheif - security update
https://security-tracker.debian.org/tracker/DSA-6583-1
News · via Chrome Releases
Chrome Dev for Desktop Update
The Dev channel has been updated to 158.0.8117.2 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release channels?
News · via Rapid7
Metasploit Wrap Up: Langflow, MongoDB, and More
This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an authentication bypass (CVE-2026-93680)…
News · via Security Affairs
PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet
PHP2Shell attacks have surged into the millions, but no successful exploitation is confirmed. Patch it immediately. On October 21, PHP released emergency patches for two critical vulnerabilities…
News · via The Hacker News
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran…
News · via CERT/CC
VU#763488: Memory corruption vulnerabilities in PHP
Overview Two critical memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network access to PHP…
News · via Debian Security
DSA-6580-1 erlang - security update
https://security-tracker.debian.org/tracker/DSA-6580-1
News · via Debian Security
DSA-6579-1 roundcube - security update
https://security-tracker.debian.org/tracker/DSA-6579-1
News · via Debian Security
DSA-6581-1 unbound - security update
https://security-tracker.debian.org/tracker/DSA-6581-1