OpenSSH 10.6p2 Released to Fix Critical Password Authentication Bypass
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting certain Linux systems and includes several additional bug fixes.
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting certain Linux systems and includes several additional bug fixes.
IPFire releases Core Update 205 to address CVE-2026-98432, a serious use-after-free flaw in the Linux kernel's TCP stack.
Kali Linux 2026.3 arrives with KDE Plasma 6.7, Linux kernel 7.1.5, six new security tools, and major NetHunter improvements.
OpenSSL 4.1 adds DTLS 1.3 and GREASE support, improves post-quantum cryptographic performance, and introduces new APIs and encryption optimizations.
LibreSSL 4.4 improves TLS 1.3 security with hybrid key exchange, addresses OCSP vulnerabilities, and fixes handshake issues.
Let's Encrypt will reduce TLS certificate validity from 90 to 64 days starting February 10, 2027, with a further reduction to 45 days planned for 2028.
Microsoft releases LiteBox 0.1, an open-source Library OS written in Rust, designed to isolate applications and reduce security risks.
Truffle Security found 543,699 still-valid credentials across more than 224 million public GitHub repositories, including some exposed for over 16 years.
OpenSSH 10.6 is out with security fixes, the new hybrid post-quantum ssh-mldsa44-ed25519 algorithm, and several new SSH and SFTP features.
LibreSSL 4.3.3 addresses an OCSP responder authorization bypass, several DTLS issues, and improves portability across macOS and Windows.