News that matters, without the noise.

USN-8403-1: Kea DHCP vulnerability

Ali Norouzi discovered that Kea DHCP did not properly handle maliciously crafted messages over configured API sockets and

USN-8404-1: Transmission vulnerability

It was discovered that Transmission had a clickjacking weakness in the browser-facing WebUI and RPC response paths. An

DSA-6329-1 tomcat11 – security update

https://security-tracker.debian.org/tracker/DSA-6329-1

DSA-6328-1 tomcat10 – security update

https://security-tracker.debian.org/tracker/DSA-6328-1

CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access

USN-8402-1: systemd vulnerabilities

It was discovered that systemd-nspawn incorrectly handled certain optional configuration files. A local attacker could possibly use this

USN-8400-1: poppler vulnerability

It was discovered that poppler incorrectly handled certain malformed PDF tiling patterns in the Splash backend. An attacker

USN-8399-1: Pillow vulnerabilities

It was discovered that Pillow incorrectly handled large glyph advance values in fonts. An attacker could possibly use

USN-8397-1: libjxl vulnerability

It was discovered that libjxl did not properly handle certain crafted PBM images. An attacker could possibly use

USN-8398-1: nginx vulnerability

It was discovered that nginx incorrectly handled certain cookie headers in the HTTP/2 implementation. A remote attacker could

RHSA-2026:24470: Important: podman security update

An update for podman is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has

RHSA-2026:24500: Important: bind security update

An update for bind is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat