Security: Denial of Service in isns-utils (Red Hat)

Security: Denial of Service in isns-utils (Red Hat)

Security: Mehrere Probleme in erlang26 (SUSE)

Security: Zwei Probleme in iscsi-initiator-utils (Red Hat)

Security: Mehrere Probleme in domoticz (Fedora)

Security: Überschreiben von Dateien in python3-pip (SUSE)

Security: Preisgabe von Informationen in libidn (Fedora)

Security: Preisgabe von Informationen in libidn (Fedora)

Security: Denial of Service in gstreamer1-plugins-good (Red Hat)

Security: Zwei Probleme in iscsi-initiator-utils (Red Hat)

DSA-6433-1 xdg-dbus-proxy - security update

It was discovered that incorrect validation of broadcast policy rules in xdg-dbus-proxy (a filtering proxy for D-Bus connections) allowed a

DSA-6435-1 spip - security update

Several vulnerabilities were discovered in SPIP, a website engine for publishing, which could result in remote code execution, SQL

DSA-6434-1 lemonldap-ng - security update

It was discovered that the Lemonldap::NG web SSO system insufficiently enforced access when using the GitHub/Linkedin authentication

DSA-6432-1 flatpak - security update

Multiple security vulnerabilities were discovered in Flatpak, an application deployment framework for desktop apps, which could result

Owning your intelligence: SUSE joins the Open Secure AI Alliance

Key Takeaways: Relying exclusively on third-party API endpoints introduces unpredictable costs, context leakage and access risks.   True

USN-8627-1: Yelp vulnerability

It was discovered that Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security Policy.

These Open Source Devs Are Reverse-Engineering Xbox Game Pass for Linux

They have already cracked Xbox game downloads, and macOS support is also being worked on.

Intel’s Linux Vulkan Driver Adds AV1 Video Encoding for Arc Alchemist GPUs

by George Whittaker Intel’s open-source Linux graphics stack has taken another step forward with hardware-accelerated

Beyond CVEs: What the Hugging Face AI Intrusion Teaches Us About Modern Security

Key takeaways Beyond CVEs: CVE remediation is no longer sufficient against modern autonomous AI threats. Architectural containment: Defense

Local AI Weekly #1: It's Happening

The local AI scene is more fragmented than the Linux distro landscape.

Run Hermes on Raspberry Pi, Control It from Your Laptop

The idea is to use Raspberry Pi as an always-on Hermes backend while using it from the computer(s).

Linux Mint Teases A Kernel Cleanup Trick That Fedora Figured Out Years Ago

The work-in-progress feature would clear out old, unused kernels automatically every week.

Help Manage Rocky Linux Torrents

Every Rocky Linux release is a coordinated effort across engineering, testing, and infrastructure. One piece of that process that needs a

DSA-6431-1 openjdk-25 - security update

Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect validation of certificates or

DSA-6430-1 postfix - security update

Several vulnerabilities were discovered in postfix, a high-performance mail transport agent, which could result in denial of service or

DSA-6429-1 caddy - security update

Multiple security issues were discovered in Caddy, a web server with automatic HTTPS, which may result in the bypass of path- or

Security: Mehrere Probleme in perl (SUSE)

Security: Denial of Service in python-ujson (SUSE)

Security: Ausführen beliebiger Kommandos in gd (SUSE)

Security: Zwei Probleme in perl-Date-Manip (SUSE)

Distribution Release: SparkyLinux 8.4

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. SparkyLinux is a Debian-based distribution with a variety of desktop

USN-8592-1: ImageMagick vulnerabilities

Hao Ren discovered that ImageMagick incorrectly handled certain images when using the wavelet-denoise operation. An attacker could possibly

[Testing Update] 2026-08-10 - Kernels, Firefox, GStreamer, Python, Deepin, Haskell

Hello Manjaro user community, here we have another set of package updates. We are continuing our development of the upcoming release of

The Linux Kernel Dev Staging Area Now Rejects AI-Generated Patches

Unless a kernel patch is a valid security fix, it will be rejected if it was created using AI.

CachyOS is Laying Groundwork for The Server Edition

The CLI installer's new experimental profiles target the upcoming Server Edition, while Shelly gets a full rewrite.

Security: Denial of Service in postgresql (Red Hat)