Product
Last Report

Click here to browse the Windows compatibility database

Click here to browse the Linux compatibility database

Click here to browse the macOS compatibility database

Date: 2026-06-10 16:52 | Last update:



2026-06-10

Ubuntu 7117 Published by Philipp Esselbach 0

Ubuntu 25.10 reaches end of life on July 9, 2026, meaning security patches and official repository access will vanish for anyone who stays on the interim release. Users should migrate to Ubuntu 26.04 well before the cutoff to avoid broken dependencies and missing package updates. Running the standard upgrade tool early keeps the system stable and prevents the usual command line headaches that come with chasing dead repositories. Waiting until the last moment only guarantees a rushed migration and a potentially broken desktop environment.

Software 44448 Published by Philipp Esselbach 0

Visual Studio Code 1.124 introduces a dedicated Agents window that lets developers queue background prompts and jump between sessions without losing their place. The update enables an advanced Autopilot mode that uses a utility model to decide when tasks are complete, capping iterations at three to save tokens. Practical tweaks like integrated browser history, single-file diff isolation, and direct folder creation streamline the daily editing workflow. Enterprise admins finally get centralized control over Copilot plugins through shared policy files that sync across the editor and CLI.

Software 44448 Published by Philipp Esselbach 0

Visual Studio Code 1.123.2 plugs a security hole that let automated file approvals bypass path expansion checks. The editor now forces full directory resolution before granting write access, which stops poorly written scripts from slipping through ambiguous shell tilde and Windows environment variables. Terminal command auto approval will validate the expanded destination instead of trusting broken absolute path logic. Restart the workspace after updating to ensure extensions adopt the stricter validation without throwing false write denials.

Software 44448 Published by Philipp Esselbach 0

MariaDB Server updates for versions 12.3, 11.8, 11.4, 10.11, and 10.6 prioritize query reliability over flashy features by fixing JSON parsing errors and replication state drift. The release patches critical Mroonga segmentation faults, tightens foreign key checks in Galera clusters, and standardizes Debian and Red Hat packaging paths to prevent deployment headaches. Administrators managing complex workloads will notice faster derived table queries, cleaner upgrade warnings, and a configure guard that blocks incompatible plugin builds before wasting cycles. Rolling out these updates during the next maintenance window stops silent data corruption and unexplained sync failures before they impact production traffic.

Security 10961 Published by Philipp Esselbach 0

IPFire 2.29 Core Update 203 finally kicks the old Unbound DNS resolver to the curb and replaces it with Knot Resolver, which delivers encrypted upstream forwarding, a native DNS firewall, and a persistent cache that actually survives reboots. The wireless access point gets long awaited 6 GHz support and a proper fix for the stubborn 40 MHz channel width bug that kept breaking connections. Cloud deployments get IMDSv2 compatibility, Intel microcode patches roll out, and a Perl encoding glitch that routinely broke non ASCII translations finally gets squashed. Admins who skip checking the DNS forwarding page before rebooting will watch their firewall drop all traffic until those fully qualified domain names get swapped to IP addresses.

Reviews 52660 Published by Philipp Esselbach 0

Here is a roundup of today's hardware reviews. The AMD Ryzen 9 9950X3D2 Dual Edition redefines desktop performance by doubling down on 3D V-Cache across both chiplets without any asymmetric complexity. Lian Li and Gigabyte both showcased matching dark walnut wood designs that prove premium aesthetics can coexist with serious hardware engineering. AOC pushes past the usual OLED competition by delivering a blistering 360 Hz Fast-IPS display optimized specifically for competitive esports through G-SYNC Pulsar technology. You will also find reviews for a new Secretlab office chair, a Razer microphone featuring both USB and XLR connectivity, and a Navman dashcam that captures everything around your vehicle.

Casing: LIAN LI LANCOOL 217 Black Genuine Walnut Wood Case Review
CPUs: AMD Ryzen 9 9950X3D2 Dual Edition Review - Maximum Cache
Displays: AOC AGON PRO AG276QSG2 Gaming Monitor Review: When G-SYNC Pulsar OLED suddenly looks outdated in e-sports
Furniture: Secretlab Atlas review: The one you’ve been waiting for
Microphones: Razer Seiren V3 Pro Review: USB, XLR, and 32-bit float
Motherboards: GIGABYTE X870E AERO X3D DARK WOOD Motherboard Review
Other: Navman MiVue Smart True 4K Surround Dashcam Review - Seeing In All Directions At Once

Alpine Linux 56 Published by Philipp Esselbach 0

Alpine Linux 3.24.0 delivers updated desktop environments, developer toolchains, and web server software while stripping out deprecated dependencies. System administrators must manually reinstall the bootloader for GRUB users and verify partition layouts before starting the upgrade process. The removal of GTK 2, Qt5, and libsoup 2 breaks older build scripts, and the new setuptools version forces Python projects to abandon the legacy pkg_resources module. Running apk upgrade --available and enabling the community repository keeps the transition smooth for users migrating to GNOME, KDE, COSMIC, or Sway.

Debian 10949 Ubuntu 7117 Arch Linux 967 Published by Philipp Esselbach 0

Steven Barrett pushes Liquorix Linux Kernel 7.0-13 based on Kernel 7.0.12 to squash memory leaks, fix Thunderbolt property parsing race conditions, and clean up AMD and Intel graphics drivers. The update routes out of memory failures through proper cleanup paths and adds a hard recursion limit to prevent crafted peer devices from collapsing the kernel stack. Desktop users running external monitors or heavy GPU workloads will notice fewer random freezes and cleaner frame timing across interactive applications.

Software 44448 Published by Philipp Esselbach 0

The Pgpool-II project just pushed maintenance releases across five branches to patch a watchdog synchronization race that locks standby nodes during cluster restarts. Engineers also corrected how the middleware handles aborted transactions, debug logging, and query cache invalidation for PostgreSQL MERGE commands. Routing errors for read-only settings and temporary table cache leaks get fixed to stop stale data from hitting the wrong database nodes. System administrators managing PostgreSQL connection pools should apply these updates immediately to prevent silent failover failures and memory leaks under heavy load.

Ubuntu 7117 Published by Philipp Esselbach 0

Ubuntu published a series of security notices to patch critical flaws across dozens of widely deployed packages. The updates resolve severe vulnerabilities in OpenSSL, QEMU, Vim, and Netatalk that could let attackers bypass authentication or run malicious code on affected systems. Additional advisories target prototype pollution in Lodash, improper input handling in shell-quote, and memory exhaustion bugs within alsa-lib and nginx.

[USN-8395-1] Netatalk vulnerabilities
[USN-8410-1] shell-quote vulnerability
[USN-8044-2] alsa-lib vulnerability
[USN-8398-2] nginx regression
[USN-8415-1] Vim vulnerabilities
[USN-8414-1] OpenSSL vulnerabilities
[USN-8414-2] OpenSSL vulnerabilities
[USN-8416-1] Go Networking vulnerability
[USN-8411-1] Lodash vulnerabilities
[USN-8156-2] GDK-PixBuf vulnerability
[USN-8412-1] QEMU vulnerabilities
[USN-8413-1] Cyborg vulnerabilities

SUSE 5673 Published by Philipp Esselbach 0

SUSE have released a comprehensive batch of security patches that address numerous vulnerabilities across core operating system components and popular development libraries. High impact updates target the Linux kernel, Nginx web server, and Kubernetes to fix critical flaws like heap buffer overflows, infinite loops, and authorization bypasses that could lead to system crashes or unauthorized access. Enterprise administrators should deploy these fixes immediately using the zypper patch command or YaST interface to secure their infrastructure against over twenty tracked common vulnerabilities.

SUSE-SU-2026:2306-1: important: Security update for perl-Protocol-HTTP2
SUSE-SU-2026:2307-1: important: Security update for nginx
SUSE-SU-2026:2310-1: important: Security update for the Linux Kernel
SUSE-SU-2026:2311-1: moderate: Security update for avahi
openSUSE-SU-2026:20921-1: important: Security update for elemental-toolkit
openSUSE-SU-2026:20926-1: moderate: Security update for python-requests
openSUSE-SU-2026:20925-1: moderate: Security update for polkit
openSUSE-SU-2026:20919-1: moderate: Security update for agama-web-ui
openSUSE-SU-2026:20924-1: important: Security update for elemental-system-agent
openSUSE-SU-2026:20920-1: important: Security update for elemental-register
openSUSE-SU-2026:10965-1: moderate: ack-3.10.0-1.1 on GA media
openSUSE-SU-2026:10968-1: moderate: perl-CryptX-0.89.0-2.1 on GA media
openSUSE-SU-2026:10966-1: moderate: amazon-ssm-agent-3.3.4624.0-2.1 on GA media
openSUSE-SU-2026:10961-1: moderate: ggml-devel-9500-1.1 on GA media
SUSE-SU-2026:2325-1: important: Security update for kubernetes1.26

Rocky Linux 927 Published by Philipp Esselbach 0

Rocky Linux 8 administrators need to install the latest Samba security patch to close critical gaps in their file sharing infrastructure. This RLSA-2026:22644 advisory outlines exactly which system packages require immediate attention. Every single vulnerability carries its own Common Vulnerability Scoring System score to help you rank the urgency of each fix.

RLSA-2026:22644: Important: samba security update

Red Hat 9432 Published by Philipp Esselbach 0

Fedora Linux 9380 Published by Philipp Esselbach 0

Fedora 43 and Fedora 44 have both received a batch of critical security updates targeting essential system packages. The release includes version upgrades for the Xorg X11 server, Mozilla Firefox, Exim mail transfer agent, PuTTY client, and the Pacemaker configuration system. Developers addressed numerous vulnerabilities across these tools, including pre-authentication data leaks in Exim and several memory corruption flaws within PuTTY. System administrators can deploy these patches immediately by running the standard DNF upgrade command with the provided advisory identifiers.

Fedora 43 Update: xorg-x11-server-21.1.23-1.fc43
Fedora 43 Update: firefox-151.0.3-1.fc43
Fedora 43 Update: exim-4.99.4-1.fc43
Fedora 43 Update: putty-0.84-1.fc43
Fedora 43 Update: pcs-0.12.2-2.fc43
Fedora 44 Update: exim-4.99.4-1.fc44
Fedora 44 Update: putty-0.84-1.fc44
Fedora 44 Update: pcs-0.12.2-2.fc44

Debian 10949 Published by Philipp Esselbach 0

Debian issued a series of security advisories to address serious flaws in several key software packages. The OpenSSL updates tackle numerous vulnerabilities that could lead to denial of service or remote code execution, while Poppler receives patches to prevent data leaks and application crashes. Meanwhile, the Mistral workflow engine gets fixed for broken access controls, and Okular addresses a critical issue that could allow arbitrary code execution when opening damaged fax files.

[DLA 4624-1] openssl security update
[DSA 6335-1] openssl security update
[DSA 6334-1] poppler security update
[DSA 6333-1] mistral security update
[DSA 6332-1] okular security update

AlmaLinux 2579 Published by Philipp Esselbach 0

AlmaLinux issued two important security advisories for version 8 to patch critical flaws in BIND and libyang. The BIND update resolves memory exhaustion risks and denial of service vulnerabilities tied to GSS API negotiation. You will also need to address a dangerous libyang issue that allows arbitrary code execution through crafted binary blobs. Apply these patches right away to keep your DNS services and data modeling tools secure.

ALSA-2026:24339: bind security update (Important)
ALSA-2026:24545: libyang security update (Important)
2026-06-09

Debian 10949 Ubuntu 7117 Published by Philipp Esselbach 0

The XanMod Kernel 6.18.35 LTS and 7.0.12 drop into Debian-based systems with a heavy focus on fixing memory leaks in USB and Bluetooth drivers while tightening networking stack bounds checking. Official repositories make the five-minute installation straightforward, though users must register the GPG key and add the correct distribution codename before running the package manager. Systems relying on external kernel modules need the dkms and build dependency packages installed first to prevent driver compilation failures after the reboot. Verifying hardware detection and proprietary graphics modules on the first boot prevents silent failures, and the automated repository updates keep the optimized scheduler and memory tweaks current without manual intervention.

Linux 3372 Published by Philipp Esselbach 0

The latest Linux LTS kernel updates patch a stack overflow vulnerability in Thunderbolt drivers and stop USB devices from lingering after unplug. Serial console handling gets restored for legacy hardware while MPTCP and Intel pstate drivers finally stop miscounting memory and CPU frequencies. Memory allocator deadlock fixes and corrected GPU power state tracking keep heavy workloads from crashing under normal use. Rolling out these stable branches smooths out the most annoying hardware gremlins without forcing users to chase bleeding edge releases.

Linux 3372 Published by Philipp Esselbach 0

Linux Kernel 7.0.12 drops a tight batch of stability patches targeting Thunderbolt property parsing, AMD and Intel graphics drivers, and legacy serial port handling. The update squashes critical memory leaks and race conditions that previously caused ghost USB devices, display clock lockups, and kernel stack exhaustion on docked systems. Networking and storage drivers also get hardened against oversized protocol payloads, closing several remote and physical attack vectors. Users running hybrid laptops or relying on stable peripheral connections should apply the package to stop random hangs and restore proper hardware LED functionality.

KDE 1734 Published by Philipp Esselbach 0

The digiKam 9.1.0 update fixes the database layer that has made search filters crawl and MariaDB migrations break photo libraries for months. This build adds native support for Google Pixel motion photos, corrects time zone tracking across different machines, and patches the face recognition crashes that have annoyed power users. Developers also cleaned up video playback hangs, XMP metadata overwrites, and several packaging issues that previously blocked updates on Windows 11 and newer Linux distributions. Anyone managing a growing collection of raw files or networked backups should install this build immediately to keep their workflow from grinding to a halt.

Reviews 52660 Published by Philipp Esselbach 0

The latest hardware roundup highlights the be quiet! Dark Rock 6 and Pro 6 CPU coolers, which rely on dense fin arrays and intelligent switching to rival liquid cooling solutions. Keyboard enthusiasts will appreciate the IQUNIX Magi96 Pro for its robust aluminum chassis and satisfying typing acoustics in a compact low profile design. Performance seekers can look toward Patriot Viper Elite 5 Ultra DDR5 RAM, which delivers blistering 8000 MT/s speeds while keeping voltage requirements modest. The collection wraps up with mixed results for mobile connectivity and data management, pointing out the Travlfi JourneyGo hotspot as budget friendly but feature heavy, while praising the Intel powered QNAP TS-855eU NAS for its versatile storage and virtualization capabilities.

Cooling: be quiet! Dark Rock 6 & Dark Rock Pro 6 CPU Coolers Review
Input: IQUNIX Magi96 Pro Aluminum Low Profile Mechanical Keyboard Review - Premium Build, Satisfying Sound
Memory: Patriot Viper Elite 5 Ultra RGB DDR5-8000 48 GB CL36 Review
Networking: Travlfi JourneyGo 5G mobile hotspot review – Affordably priced, but lacking in performance and features
Storage: QNAP TS-855eU NAS in review - Intel C5125, 8+2 bays and virtualization, is this still a network storage device?

SUSE 5673 Published by Philipp Esselbach 0

The openSUSE Leap 16.1 Beta arrives with its proven hybrid model, blending enterprise-grade core packages with community desktop improvements for a system that refuses to break during routine updates. Users who have wrestled with rolling releases will appreciate the extended support window, which gives administrators and home users plenty of time to verify hardware compatibility before committing to the final release. The beta ships with a refreshed package manager that catches dependency conflicts early, preventing the kind of silent system breaks that usually force a full reinstall. Anyone looking for a reliable daily driver or a stable server base should test this release, though gamers and cutting edge developers might want to stick to dedicated testing branches until the official launch.

Bazzite 39 Published by Philipp Esselbach 0

Bazzite Linux 44.20260608 prioritizes handheld stability and NVIDIA driver compatibility by pinning a patched kwin build to prevent Wayland session crashes. The release also adjusts Sunshine for better gamepad capture on KDE desktops and aligns session shortcuts closer to SteamOS behavior. Rather than introducing flashy new features, the update delivers routine package bumps for core components like libinput, Steam, and selinux-policy to quietly fix known friction points. Current users can switch to this version quickly using the bazzite-rollback-helper, which handles the ostree transaction and preserves existing Flatpak containers without requiring a fresh install.

Software 44448 Published by Philipp Esselbach 0

Godot 4.7 RC 1 locks in the feature set and patches the animation deadlocks, Android toolchain links, and 3D lighting bugs that have been plaguing beta testers. The update ships HDR output, drawable textures, and a native asset download hub that actually work without breaking existing project files. The engine team still insists on full backups or version control commits before anyone touches production builds, which is exactly how it should be. Running this release on a spare machine and feeding crash reports back to the official tracker will speed up the path to a stable final release.

Software 44448 Published by Philipp Esselbach 0

Apache HTTP Server 2.4.68 drops a heavy batch of security fixes that target memory corruption, credential leaks, and denial of service bugs across several legacy modules. The most pressing updates address a privilege escalation flaw in .htaccess expressions and a mod_http2 memory allocation trap that routinely crashes busy production servers. Administrators running active reverse proxies or WebDAV setups should prioritize this patch because the unpatched versions allow attackers to bypass standard access controls or exhaust system resources with a single crafted request. Skipping the upgrade leaves the web stack exposed to known exploitation paths that security researchers have already mapped out.

Ubuntu 7117 Published by Philipp Esselbach 0

Ubuntu delivered a broad wave of security patches to address critical flaws across numerous system packages. Attackers could potentially exploit these weaknesses to execute unauthorized code, bypass authentication controls, or crash essential services like nginx and Pillow. Administrators should run standard system updates immediately to patch affected software across all supported Ubuntu releases. Delaying these patches leaves servers vulnerable to remote exploitation and unexpected downtime.

[USN-8399-1] Pillow vulnerabilities
[USN-8400-1] poppler vulnerability
[USN-8398-1] nginx vulnerability
[USN-8397-1] libjxl vulnerability
[USN-8405-1] CUPS vulnerabilities
[USN-8387-1] Inetutils vulnerabilities
[USN-8404-1] Transmission vulnerability
[USN-8402-1] systemd vulnerabilities
[USN-8403-1] Kea DHCP vulnerability
[USN-8408-1] Twig vulnerability
[USN-8407-1] strongSwan vulnerability
[USN-8406-1] Net::CIDR::Lite vulnerabilities
[USN-8401-1] Netty vulnerabilities
[USN-8349-2] rsync regression

SUSE 5673 Published by Philipp Esselbach 0

SUSE Linux has rolled out a broad collection of security advisories targeting numerous system packages and development libraries. The patch list includes critical fixes for the Chromium browser alongside important updates for the Linux kernel, ffmpeg, and epiphany. Moderate severity patches also address networking utilities like NetworkManager and firewalld while updating several Perl and Python dependencies. Administrators must apply these releases without delay to safeguard their servers against active threats and maintain system reliability.

openSUSE-SU-2026:0193-1: important: Security update for epiphany
openSUSE-SU-2026:20914-1: important: Security update for ffmpeg-4
openSUSE-SU-2026:20916-1: critical: Security update for chromium
openSUSE-SU-2026:20911-1: moderate: Security update for NetworkManager
openSUSE-SU-2026:20908-1: important: Security update for perl-XML-LibXML
openSUSE-SU-2026:20910-1: moderate: Security update for uriparser
openSUSE-SU-2026:20909-1: moderate: Security update for dpkg
openSUSE-SU-2026:20912-1: important: Security update for the Linux Kernel
SUSE-SU-2026:2298-1: moderate: Security update for python311
SUSE-SU-2026:2297-1: moderate: Security update for avahi
openSUSE-SU-2026:0194-1: important: Security update for chromium
openSUSE-SU-2026:10956-1: moderate: libopenvswitch-3_7-0-3.7.1-34.1 on GA media
openSUSE-SU-2026:10953-1: moderate: gleam-1.17.0-1.1 on GA media
openSUSE-SU-2026:10957-1: moderate: perl-HTML-Parser-3.850.0-1.1 on GA media
openSUSE-SU-2026:10958-1: moderate: chromedriver-149.0.7827.53-2.1 on GA media
openSUSE-SU-2026:10955-1: moderate: libmozjs-140-0-140.10.1-2.1 on GA media
openSUSE-SU-2026:10954-1: moderate: kernel-devel-7.0.11-1.1 on GA media
openSUSE-SU-2026:10951-1: moderate: perl-Net-CIDR-Set-0.210.0-1.1 on GA media
openSUSE-SU-2026:0195-1: important: Security update for keybase-client
SUSE-SU-2026:2302-1: moderate: Security update for firewalld
SUSE-SU-2026:2301-1: moderate: Security update for mutt

Red Hat 9432 Published by Philipp Esselbach 0

Red Hat has rolled out a fresh batch of security advisories that address vulnerabilities across RHEL 8, 9, and 10. You will want to apply the important-rated fixes for the kernel, Podman, and Firefox right away because those patches tackle serious flaws. Several other essential packages like Bind, Unbound, and Kerberos also get updated alongside specialized releases for .NET and libarchive. Rushing these installations through your standard or extended support channels will keep your infrastructure secure and fully compliant.

RHSA-2026:24381: Important: kernel security update
RHSA-2026:24470: Important: podman security update
RHSA-2026:24383: Moderate: libarchive security update
RHSA-2026:24368: Important: bind9.18 security update
RHSA-2026:24365: Important: unbound security update
RHSA-2026:24343: Important: kernel security update
RHSA-2026:24339: Important: bind security update
RHSA-2026:24336: Important: .NET 9.0 security update
RHSA-2026:24508: Important: firefox security update
RHSA-2026:24510: Important: firefox security update
RHSA-2026:24509: Important: firefox security update
RHSA-2026:24500: Important: bind security update
RHSA-2026:24386: Important: podman security update
RHSA-2026:24371: Important: frr security update
RHSA-2026:24370: Important: frr10 security update
RHSA-2026:24369: Important: unbound security update
RHSA-2026:24367: Important: bind security update
RHSA-2026:24683: Important: krb5 security update
RHSA-2026:24686: Important: krb5 security update
RHSA-2026:24685: Important: krb5 security update
RHSA-2026:24545: Important: libyang security update
RHSA-2026:24516: Important: firefox security update
RHSA-2026:24511: Important: firefox security update

Oracle Linux 6493 Published by Philipp Esselbach 0

Oracle has issued a comprehensive set of security and bug fix advisories for Linux versions 7, 8, and 9 to address critical vulnerabilities across multiple core packages. These updates patch dangerous flaws in the system kernel, BIND DNS server, Samba file sharing, the Go programming toolset, Vim editor, ImageMagick, and GRUB2 bootloader. System administrators must deploy the provided RPM packages immediately to mitigate risks involving remote code execution, memory corruption, and unauthorized file access. Each advisory includes detailed change logs and links to source code repositories for both standard and ARM-based server architectures.

ELSA-2026-22112 Important: Oracle Linux 8 go-toolset:ol8 security update
ELSA-2026-22644 Important: Oracle Linux 8 samba security update
ELSA-2026-23360 Important: Oracle Linux 8 bind9.16 security update
ELSA-2026-23258 Important: Oracle Linux 8 kernel security update
ELSA-2026-22730 Moderate: Oracle Linux 8 vim security update
ELSA-2026-24339 Important: Oracle Linux 8 bind security update
ELBA-2026-50303 Oracle Linux 9 grub2 bug fix update
ELSA-2026-17618 Moderate: Oracle Linux 7 ImageMagick security update

Fedora Linux 9380 Published by Philipp Esselbach 0

Fedora has released a batch of critical security updates for both Fedora 43 and Fedora 44 that target several essential system packages. The patch rollout includes version upgrades for objfw, its MinGW variant, tailscale, and sentencepiece to address multiple vulnerabilities and resolve lingering stability issues. Notable fixes include patches for CVE-2026-34165 and CVE-2026-33762 in tailscale alongside a memory access flaw in sentencepiece that could allow arbitrary code execution. Administrators should apply these changes immediately by running the appropriate dnf upgrade commands tied to each specific advisory number.

Fedora 43 Update: objfw-1.5.5-1.fc43
Fedora 43 Update: mingw-objfw-1.5.5-1.fc43
Fedora 44 Update: mingw-objfw-1.5.5-1.fc44
Fedora 44 Update: objfw-1.5.5-1.fc44
Fedora 44 Update: tailscale-1.98.4-1.fc44
Fedora 44 Update: sentencepiece-0.2.1-1.fc44

Debian 10949 Published by Philipp Esselbach 0

Debian system administrators should immediately apply security patches for Tomcat 10, Tomcat 11, Jackson Core, libxml2, and Keystone to address numerous critical vulnerabilities. Attackers could exploit these flaws to bypass authorization controls, expose sensitive data, or trigger denial of service conditions through malicious XML and JSON inputs. Fixed package versions are now available across both stable and extended maintenance releases, though upgrading related libraries might be necessary to prevent build failures. System operators must verify their current software versions and follow the official Debian tracking pages to ensure all identified CVEs are properly resolved on their servers.

[DSA 6329-1] tomcat11 security update
[DSA 6328-1] tomcat10 security update
[DLA 4623-1] jackson-core security update
[DLA 4622-1] libxml2 security update
[DSA 6331-1] keystone security update

AlmaLinux 2579 Published by Philipp Esselbach 0

AlmaLinux has issued a batch of critical security patches for versions eight and ten that target serious vulnerabilities across the Linux kernel and several essential network services. These updates address dangerous flaws in BIND and Unbound DNS resolvers that could allow attackers to crash servers or exhaust system memory. Administrators should prioritize applying the kernel fixes immediately because the patches resolve numerous memory corruption bugs and privilege escalation risks that threaten system stability. You can download the corrected packages and review the full technical documentation through the official AlmaLinux errata portal.

ALSA-2026:24365: unbound security update (Important)
ALSA-2026:18134: kernel security update (Moderate)
ALSA-2026:23329: kernel security update (Important)
ALSA-2026:21557: kernel security update (Important)
ALSA-2026:24338: bind security update (Important)
ALSA-2026:19569: kernel security update (Important)
ALSA-2026:24340: frr security update (Important)

[ Archive ]