LinuxSecurity.com

23.01.2026 01:40 An update that solves 7 vulnerabilities can now be installed.

23.01.2026 01:40 An update that solves 2 vulnerabilities can now be installed.

22.01.2026 19:32 An update that solves three vulnerabilities can now be installed.

22.01.2026 19:32 Kyu Neushwaistein discovered that telnetd from inetutils does not sanitize the USER environment variable before passing it on to login. A remote attacker can take advantage of this flaw to login as root, bypassing normal authentication processes. For the oldstable distribution , this problem has been fixed

22.01.2026 19:32 The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

22.01.2026 19:32 The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

22.01.2026 19:32 The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

22.01.2026 19:32 The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

22.01.2026 13:31 rpki-client 9.7 The Canonical Cache Representation underwent a breaking change after the adoption of https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpki-ccr/ as a SIDROPS working group item. Apart from several CMS-related cosmetics it now uses a IANA-assigned content type. As a result, rpki-client 9.7 cannot parse rpki-

22.01.2026 13:31 Update to 0.30.1 Denial of service using zip bomb CRLF injection in http headers Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust https://github.com/yhirose/cpp-httplib/releases/tag/v0.30.1

22.01.2026 13:31 Backport proposed fix for CVE-2025-13836.

22.01.2026 13:31 Backport fix for CVE-2025-11731 and proposed fix for CVE-2025-10911

22.01.2026 13:31 Update to 4.21.0, fixes CVE-2025-13151.

22.01.2026 13:31 MariaDB 11.8.5 Release notes: https://mariadb.com/docs/release-notes/community- server/11.8/11.8.5

22.01.2026 07:30 OpenCC could be made to crash if it received specially crafted input.