security patches Archives - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

2026 Apache Kafka Security: Best...

Key Takeaways Many security vulnerabilities arise from relying on Kafka’s default configurations, which are not designed for production use. Running end-of-life (EOL) Kafka versions exposes your systems to new, unpatched...

ELS for Grafana: What Grafana...

Key Takeaways Dependencies multiply the end-of-life (EOL) risk surface, as Grafana’s Go backend, TypeScript/React frontend, and bundled libraries add vulnerability exposure that stops being patched once Grafana reaches EOL. Rushed...

Secure Ubuntu End of Life...

Key Takeaways Is your Ubuntu system approaching the end of life? Once a version reaches its end of life (EOL), it stops receiving security patches — leaving your system vulnerable...

Ubuntu Vulnerabilities To Be Aware...

Key Takeaways Ubuntu vulnerabilities can lead to privilege escalation, remote code execution, and full system compromise if left unpatched. Attackers target kernel flaws, outdated packages, and weak configurations, making regular...

Ubuntu Fixes Multiple Python 2.7...

Ubuntu has recently addressed multiple security vulnerabilities affecting Python 2.7 in both the 22.04 LTS and 20.04 LTS releases. These vulnerabilities, if exploited, could potentially allow attackers to execute arbitrary...

Ubuntu Fixes Multiple BusyBox...

BusyBox, often referred to as the “Swiss Army knife of embedded Linux,” is a compact suite of Unix utilities combined into a single executable. It’s widely used in small and...

Critical wpa_supplicant Vulnerability...

A serious vulnerability has been discovered in the widely used wpa_supplicant package, potentially leaving millions of devices at risk. This flaw, tracked as CVE-2024-5290, poses a significant risk of privilege...

Ubuntu Addresses Multiple OpenJDK 8...

Several vulnerabilities have recently been identified in OpenJDK 8, which could potentially lead to denial of service, information disclosure, arbitrary code execution, or even the bypassing of Java sandbox restrictions....

Patching Recent Linux Kernel Vulnerabilities...

Several security vulnerabilities were discovered in the Linux kernel. These issues could potentially be exploited by malicious actors to compromise system integrity and steal sensitive data. In this article, we...

Addressing Tomcat Vulnerabilities in End-of-Life...

Apache Tomcat is a widely used open-source web server and servlet container, but like any software, it is not immune to vulnerabilities. Canonical has released security updates to address multiple...

Two krb5 Vulnerabilities Fixed in...

krb5, the MIT implementation of Kerberos, is a widely used protocol for network authentication. Recently, two critical vulnerabilities have been discovered in the GSS message token handling in krb5, which...