Coverage tagged "Open source".
TIL: Using Parseable with Datasette for OpenTelemetry traces I saw Parseable in a Show HN today - it's a new observability platform with both an open source (AGPL) Rust implementation (a single…
The maker of the open source document editor says it has no plans to add AI to its software's default configuration, citing user privacy.
The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers
Posted by Damien Miller on Oct 06 OpenSSH 10.6 has just been released. It will be available from the mirrors listed at https://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH protocol 2.0…
View CSAF Summary Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out…
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit…
arXiv:2610.04243v1 Announce Type: new Abstract: Active Directory (AD) remains the predominant identity and access management infrastructure in enterprise environments, and its compromise represents…
Posted by Timothy Legge on Oct 05 CVE-2026-104380 CPAN Security Group CVE ID: CVE-2026-104380 Distribution: Punk Versions: from 0.48 before 0.55 MetaCPAN: https://metacpan.org/dist/Punk Punk versions…
Posted by Chad Dougherty on Oct 05 Forwarded Message Subject: [Freeipmi-announce] FreeIPMI 1.6.20 Released Date: Mon, 5 Oct 2026 20:56:51 +0000 From: Chu, Al via Freeipmi-announce Reply-To: Chu, Al…
Posted by Sebastian Pipping on Oct 05 Hello oss-security, just a quick note that libexpat 2.9.0 (or "Expat 2.9.0") released today is fixing two vulnerabilities: - CVE-2026-77214 - CVE-2026-102633 The…
AI-assisted research uncovered a critical Rejetto HFS flaw that enables authentication bypass and remote code execution, now exploited in the wild. A Rejetto HFS vulnerability, tracked as…
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.0.0 through 2.3.37 - Apache Struts 2.5.0 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts…
Posted by Lukasz Lenart on Oct 05 Severity: important Affected versions: - Apache Struts 2.1.8 through 2.3.37 - Apache Struts 2.5.0 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts…
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.5.14 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts 7.0.0 through 7.3.0 Description…
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.0.0 through 2.3.37 - Apache Struts 2.5.0 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts…
Posted by Robert Rothenberg on Oct 05 CVE-2026-19954 CPAN Security Group CVE ID: CVE-2026-19954 Distribution: Net-Whois-Raw Versions: before 2.99044 MetaCPAN: https://metacpan.org/dist/Net-Whois-Raw…
Posted by Security @ Red Eagle Tech on Oct 05 Hello, OpenJPEG's reversible (5/3) forward wavelet transform reads and writes past the end of a heap allocation when a tile's lower resolution levels…
Companies like Google and Microsoft are find much bigger numbers of vulnerabilities in their own products as a result of AI. But the same technology is leading to public reporting programs becoming…
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP).
We celebrated our 16th birthday last week by sharing how we’re building a better Internet for today’s world. As Matthew and Michelle reflected in this year’s Founders’ Letter, this year saw some of…
