Linux & Open Source News

Cross-site scripting (XSS) vulnerabilities continue to be a major concern in today’s software landscape, despite being preventable. CISA and FBI have issued a Secure by Design alert to reduce the...

Multiple vulnerabilities in Python have been identified and patched, with updates available for several Ubuntu releases, including Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 20.04 LTS. These vulnerabilities pose...

Linux kernel 6.11 was released on September 15, 2024, introducing a lot of new features, performance improvements, and better hardware support. While it is a short-lived release, expected to be...

CISA has issued a warning about three new vulnerabilities that are being actively exploited. These vulnerabilities pose a significant risk to organizations and should be patched immediately. Among them, CVE-2017-1000253...

A recent discovery has highlighted significant security risks within the widely used Expat XML parsing C library. Security researcher Shang-Hung Wan identified three critical Expat vulnerabilities that could potentially lead...

Vim, a popular text editor in Unix-like operating systems, has been identified with two medium-severity vulnerabilities that could pose a security risk to users. These vulnerabilities, identified as CVE-2024-41957 and...

QEMU, a popular open-source emulator, has launched its latest version, 9.1 with numerous improvements to enhance performance, security, and scalability. Known for its ability to run a wide range of...

A recently discovered flaw in OpenSSL, identified as CVE-2024-6119, could potentially lead to denial-of-service (DoS) attacks on applications that rely on OpenSSL for certificate validation. This article explores the specifics...

Canonical’s Ubuntu 24.04 LTS, codenamed “Noble Numbat” has received its first major update: Ubuntu 24.04.1. This release, which arrived a bit later than initially planned due to some high-impact bugs,...

The Debian Project has officially released Debian 12.7, the latest point release in the Debian GNU/Linux 12 “Bookworm” series. It arrives just two months after the previous release, Debian 12.6, as...

A new, sophisticated Linux malware named “sedexp” has been discovered, quietly evading detection since 2022. Its unique persistence technique, leveraging udev rules, has allowed it to operate under the radar,...