Linux kernel dispute over swap slots and persistent swap files
Two competing proposals address the link between swap cache slots and space in persistent swap files in the Linux kernel, with no agreement yet for mainline integration.
Read articleKnowledge you can apply
Cyber
Security for teams connecting data, documents and agents to AI.
USN-8907-1: IP address SubjectAltName check flaw in libgit2
Ubuntu Security advisory describes a flaw in libgit2 TLS certificate validation that could allow a man-in-the-middle attack and exposure of confidential information, according to the text dated October 8, 2026.
Read articleUSN-8902-1: signed integer overflow vulnerability in libarchive when processing encrypted ZIP entries
Ubuntu Security notice on a signed integer overflow in the libarchive ZIP writer when processing encrypted entries, with risk of crash or arbitrary code execution.
Read articleThursday security updates for Linux distributions and software packages
Summary of security updates published by AlmaLinux, Debian, Fedora, Mageia, Oracle, Slackware, SUSE and Ubuntu for packages such as kernel, glibc, firefox, bind, sudo and vim, based on a machine-translated news feed.
Read articleUSN-8906-1: Linux kernel vulnerabilities fixed (IBM)
Ubuntu Security notice USN-8906-1 describes an update that fixes numerous Linux kernel flaws, including a TLB invalidation issue on some Arm processors (CVE-2025-10263).
Read articleAdvisory USN-8905-1: fixes for multiple Linux kernel flaws (GCP)
Ubuntu Security published advisory USN-8905-1, an update fixing several security issues in the Linux kernel across architecture, drivers, filesystems and networking. The advisory lists many CVE identifiers.
Read articleUSN-8904-1: Linux kernel fixes for Azure
Ubuntu notice USN-8904-1 describes a Linux kernel update for Azure that fixes several security issues across subsystems, drivers, file systems and network components. The received text is truncated, so the full list of identifiers should be checked in the original source.
Read articleUSN-8903-1: Linux kernel vulnerabilities fixed by Ubuntu
An Ubuntu Security notice describes an update fixing several Linux kernel flaws across drivers, file systems, networking, memory and KVM. The received text is truncated, so the full number of CVE identifiers cannot be counted here.
Read articleCVE-2026-59265 in Apache OpenOffice: open question about LibreOffice impact
A message on the oss-sec list, published October 7, 2026, asks whether the CVE-2026-59265 flaw in Apache OpenOffice, which may allow system control through a malicious document, also affects LibreOffice.
Read articleCVE-2026-71896: Apache DolphinScheduler exposes user account information
Security advisory on an authorization flaw in Apache DolphinScheduler before version 3.4.3, rated critical, that lets authenticated users obtain other users' account data.
Read articleCVE-2026-71895: Apache DolphinScheduler exposes kubeconfig to non-administrator users
Important-severity advisory: authenticated users without administrator roles can access kubeconfig data containing Kubernetes credentials. Affected versions run from 3.1.0 up to before 3.4.3.
Read articleCVE-2026-71183: Apache DolphinScheduler authorization flaw exposes data sources and passwords
Advisory published on October 7, 2026 on the oss-sec feed: authenticated users can obtain data source connection details without authorization in versions before 3.4.3 of Apache DolphinScheduler.
Read articleISC Stormcast for October 8, 2026: episode announced in the feed
Feed item announcing the ISC Stormcast episode for Thursday, October 8, 2026, with the episode address. The body gives no description or summary of topics.
Read articleCVE-2026-66087: authorization bypass in task instance stop and savepoint endpoints in Apache DolphinScheduler
Moderate-severity advisory for Apache DolphinScheduler: authenticated users can stop task instances and create savepoints in projects they are not authorized to access. Versions before 3.4.3 are affected.
Read articleCVE-2026-66084: authorization bypass in Apache DolphinScheduler (with-upstream endpoint)
Published on the oss-sec feed by Wenjun Ruan on 7 October, the moderate-severity flaw lets authenticated users modify task definitions in projects they are not authorized to access. Versions before 3.4.3 are affected.
Read articleCVE-2026-66082: Apache DolphinScheduler allows cross-project authorization bypass in the API
Moderate-severity advisory: authenticated users of Apache DolphinScheduler before 3.4.3 can operate schedules, workflow definitions and task instances in other projects.
Read articleLWN.net weekly edition of October 8, 2026: kernel, Rust, Python and security
Public summary of the LWN.net weekly edition of October 8, 2026, covering kernel flaws, the Gentoo Chromium package, Rust smart pointers, the LAVD scheduler and security updates.
Read articleTor 0.4.9.14 released with high-severity security fixes
Tor version 0.4.9.14, published on 7 October 2026, includes important high-severity bug fixes across relay, client, onion service and authority components, and maintainers strongly recommend prompt updating.
Read articleOSSN-0109: metric association bypass across projects in Gnocchi
Advisory OSSN-0109, published on October 7, 2026 in the oss-sec feed by maintainer Goutham Pacha Ravi: authenticated users can associate metrics with other users' resources by supplying resource_id to the Gnocchi metric creation endpoint.
Read articleErrata 1 of OSSA-2026-043: flaw in OpenStack Zaqar allows queue access across projects
Errata 1 of advisory OSSA-2026-043 assigns CVE-2026-107363 to a flaw in the Zaqar WebSocket, the OpenStack queue service, that allows access to queues of other projects through project substitution. The advisory lists versions from 1.0.0 as affected.
Read articleRota Nacional
Bring privacy into your workflow.
30 days, no card, with a starting quota. After that, Pix credit from R$ 10,00.