PHP team reportedly rejects claimed PHP 8.2–8.5 RCE
Canonical was told the Mastodon-reported issue is unrelated and not a real vulnerability.
Canonical was told the Mastodon-reported issue is unrelated and not a real vulnerability.
The blueprint needs Vera Rubin, Vera CPUs and BlueField-4, while BBVA and Santander are only reviewing it.
Ubuntu’s USN-8933-1 fixes RabbitMQ issues that could enable CSRF, XSS, and denial of service.
Ubuntu patched multiple Azure Linux kernel flaws that could let an attacker compromise the system.
Ubuntu patched curl flaws that could leak AWS SigV4 state or proxy credentials.
Ubuntu patched Bind flaws that could cause denial of service or DNS cache poisoning.
Ubuntu patched OpenSSH flaws that could allow unintended SFTP writes or leak GSSAPI credentials.
Ubuntu’s USN-8927-1 patches curl flaws that may leak data or reuse the wrong network interface.
Ubuntu patched YAML-LibYAML flaws that could delete files or run code on 16.04 and 18.04 LTS.
Ubuntu's USN-8908-2 fixes a BlueZ A2DP regression that stopped Bluetooth audio devices from reconnecting automatically.
Ubuntu patches old Linux kernel flaws that leak PIDs or crash via malicious XFS and f2fs images.
A DDoS attack disrupted Canonical’s Ubuntu websites and security APIs for just over four hours.
Ubuntu's USN-8915-1 fixes FFmpeg flaws, including possible code execution and several denial-of-service bugs.
Canonical's public websites were disrupted for over four hours by its second DDoS attack of 2026.
Ubuntu patched libX11 flaws that let a malicious X server crash clients or possibly run code.
Canonical websites including ubuntu.com experienced a DDoS attack causing approximately four hours of downtime, the second this year.
Ubuntu patched multiple Linux kernel flaws that could let an attacker compromise the system.
Ubuntu patched GCP Linux kernel vulnerabilities that could allow an attacker to compromise the system.
Ubuntu patched BlueZ flaws, including an A2DP stack overflow and an out-of-bounds memory read.
Ubuntu patched libxml2 flaws, including a heap overflow that could crash the library or allow code execution.
Ubuntu warns libde265 can crash on crafted H.265 bitstreams via a NULL pointer dereference.
Ubuntu's USN-8904-1 patches multiple Azure Linux kernel flaws that could let an attacker compromise the system.
Ubuntu's USN-8903-1 fixes multiple Linux kernel flaws across architectures and drivers that could allow system compromise.
Ubuntu patched Azure Linux kernels, including AMD SEV-SNP flaw CVE-2023-20585 that a local hypervisor attacker could abuse.
Ubuntu's USN-8887-2 patches AWS Linux kernels, including AMD SEV-SNP issue CVE-2023-20585 exploitable by a hypervisor attacker.
Ubuntu patches GStreamer Ugly Plugins flaws that could run code from crafted RealMedia or ASF files.
Ubuntu patches Go networking flaws that can hang HTTP/2 connections or exhaust resources via HPACK.
Ubuntu fixes lxml flaws that can bypass URL sanitization for XSS and leak local files via untrusted XML.
Ubuntu says Sudo time rules can be bypassed via TZ when timestamps omit a timezone.
Ubuntu live patch LSN-0122-1 fixes Linux kernel use-after-free and NULL-dereference bugs in DLM, brcmfmac, and padata.
Ubuntu Pro for WSL leaked subscription attach tokens in command-line arguments, risking unauthorized repository access.
Ubuntu fixed libsoup flaws that could cause denial of service, leak proxy data, or bypass security checks.
Ubuntu patches U-Boot flaws where crafted ZFS or ext4 metadata can cause code execution or denial of service.
Ubuntu patched FluidSynth flaws that could crash the synthesizer or allow arbitrary code execution.
Ubuntu’s USN-8882-1 fixes Tesseract flaws in crafted .traineddata models that can crash the engine or execute code.
Ubuntu fixed a FreeType CID font-loader flaw that can exhaust memory and CPU, causing denial of service.
Ubuntu's USN-8879-1 patches Oracle Linux kernels for an i.MX crash and an Arm TLB privilege flaw.
Ubuntu's USN-8878-1 patches GCP Linux kernels for an i.MX crash and an Arm TLB privilege flaw.
Ubuntu's USN-8877-1 patches GCP Linux kernels, including an i.MX clock-driver local denial of service.
Ubuntu warns RabbitMQ mishandles HTTP/2 headers, possibly letting attackers exhaust memory and cause a denial of service.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 663 readers · 810 views · 612 reads · all time 158K views