php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Critical wpa_supplicant Vulnerability...

A serious vulnerability has been discovered in the widely used wpa_supplicant package, potentially leaving millions of devices at risk. This flaw, tracked as CVE-2024-5290, poses a significant risk of privilege...

Ubuntu Addresses Multiple OpenJDK 8...

Several vulnerabilities have recently been identified in OpenJDK 8, which could potentially lead to denial of service, information disclosure, arbitrary code execution, or even the bypassing of Java sandbox restrictions....

Patching Recent Linux Kernel Vulnerabilities...

Several security vulnerabilities were discovered in the Linux kernel. These issues could potentially be exploited by malicious actors to compromise system integrity and steal sensitive data. In this article, we...

Addressing Tomcat Vulnerabilities in End-of-Life...

Apache Tomcat is a widely used open-source web server and servlet container, but like any software, it is not immune to vulnerabilities. Canonical has released security updates to address multiple...

Two krb5 Vulnerabilities Fixed in...

krb5, the MIT implementation of Kerberos, is a widely used protocol for network authentication. Recently, two critical vulnerabilities have been discovered in the GSS message token handling in krb5, which...

Ubuntu Fixes Two OpenVPN...

Two vulnerabilities were discovered in openvpn, a virtual private network software which could keep the closing session active or result in denial of service. Canonical released security updates to address...

Patch Squid Vulnerabilities Affecting Ubuntu...

Several security issues were discovered in Squid, a web proxy cache server. These vulnerabilities have a high severity score and could lead to denial of service or exposure of sensitive...

Multiple FreeImage Vulnerabilities Fixed in...

Multiple vulnerabilities were discovered in FreeImage, an open-source support library for graphic image formats. These vulnerabilities, when left unaddressed, could potentially lead to denial of service attacks. On 16th January...

Ubuntu 23.04 End of Life...

Canonical has officially marked the end-of-life date for Ubuntu 23.04, also known as “Lunar Lobster,” as January 25, 2024. As the sun sets on this interim release, users are encouraged...

High Severity Vulnerabilities Addressed in...

The Ubuntu security team has released new updates for Ubuntu 16.04 and Ubuntu 18.04, patching several high severity vulnerabilities discovered in the Linux kernel. Since both operating systems have reached...

TuxCare Announces Extended Lifecycle Support...

  PALO ALTO, Calif. – November 1, 2023 – TuxCare, a global innovator in enterprise-grade cybersecurity for Linux, today announced it now offers Extended Lifecycle Support (ELS) for CentOS Stream...