Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 26.04 LTS Kernel Critical Privilege Escalation Issues USN-8593-1
Ubuntu 26.04 LTS addresses multiple vulnerabilities in the Linux kernel affecting IBM and Oracle Cloud systems, requiring users to update and possibly recompil…
Debian php-phpseclib Vulnerability DSA-6186-1 Critical Timing Attack Issue
It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable…
Debian Oldstable phpseclib Key Padding Attack Fix DSA-6185-1 CVE-2026-32935
It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable…
Mageia 2025-0069: python-cryptography & openssl Security Advisory Updates
Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. (CVE-2023-49083) Python-cryptography: bleichenbacher timing oracle attack against …
Fighting Back Against Hadooken Malware by Strengthening WebLogic Security
Cybercriminals have been relentlessly attacking the digital landscape, aiming to exploit vulnerabilities in well-known systems. One such exploit is the recentl…
Mageia 2023-0239: virtualbox security update
This update provides the upstream 7.0.10 maintenance release that fixes at least the following security vulnerabilities: Vulnerability in the Oracle VM Virtual…
Mageia 2023-0160: virtualbox security update
This update provides the upstream 7.0.8 maintenance release that fixes at least the following security vulnerabilities: Vulnerability in the Oracle VM VirtualB…
Serious Security: GnuTLS Follows OpenSSL, Fixes Timing Attack Bug
Last week, we wrote about a bunch of memory management bugs that were fixed in the latest security update of the popular OpenSSL encryption library. Along with…
Mageia 2022-0390: virtualbox security update
This update provides the upstream 6.1.40 maintenance release that fixes at least the following security vulnerabilities: Vulnerability in the Oracle VM Virtual…
Hackers Targeting WebLogic Servers and Docker APIs for Mining Cryptocurrencies
Malicious actors such as Kinsing are taking advantage of both recently disclosed and older security flaws in Oracle WebLogic Server to deliver cryptocurrency-m…
Mageia 2022-0265: virtualbox security update
This update provides the upstream 6.1.36 maintenance release that fixes at least the following security vulnerabilities: A vulnerability in the Oracle VM Virtu…
Linux Lands Fix For A Trivial Lockdown Bypass Bug
Merged yesterday afternoon to the mainline Linux 5.19 Git kernel and set for back-porting is a fix for a new security bug. Oracle made public CVE-2022-21505 on…
VirtualBox On Linux Affected By Security Vulnerability Leaking Host Data To Gues
Security researcher Jason Donenfeld who is known for leading the development of the WireGuard open-source software has outlined a new security vulnerability af…
Mageia 2021-0488: virtualbox security upda
This update provides the upstream 6.1.28 maintenance release that fixes atleast the following security vulnerabilities: Vulnerability in the Oracle VM VirtualB…
Mageia 2021-0385: virtualbox security upda
This update provides the upstream 6.1.24 maintenance release that fixes atleast the following security vulnerabilities: An easily exploitable vulnerability in …
Mageia 2021-0197: virtualbox security upda
This update provides the upstream 6.1.20 maintenance release that fixes atleast the following security vulnerabilities: A difficult to exploit vulnerability in…
Mageia 2020-0311: virtualbox security upda
Multiple security vulnerabilites in virtualbox allow unauthorized access to critical data or takeover of Oracle VM VirtualBox. See CVE references for details. …
Mageia 2020-0065: virtualbox security upda
This update provides the upstream 6.0.16 and fixes the following security vulnerabilities: An easily exploitable vulnerability allows high privileged attacker…
Debian LTS: DLA-2023-1: openjdk-7 security upda
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, informa…
Mageia 2019-0303: virtualbox security update
This update provides the upstream 6.0.14 and fixes the following security issues: An easily exploitable vulnerability allows high privileged attacker with log…