OpenSSH 10.5 Fixes Security Flaws as Project Responds to AI-Assisted Bug Discovery
OpenSSH 10.5 ships with several security fixes, as developers say growing AI-assisted vulnerability research is prompting more frequent releases.
security
ClamAV 1.5.4 Open-Source Antivirus Fixes Eight Security Vulnerabilities
ClamAV 1.5.4 is now available with fixes for eight CVEs affecting ZIP, PDF, Mach-O, XAR, UnRAR, PE processing, and other components.
Arch Linux Disables AUR Package Adoption Amid Malicious Takeovers
The Arch Linux team has suspended package adoption in the AUR while it investigates malicious adoptions and follow-up commits.
GNOME Cuts Security Disclosure Deadline From 90 to 30 Days
GNOME will shorten its vulnerability disclosure deadline to 30 days starting August 1, citing the growing number of AI-generated security reports.
OpenSSH 10.4 Patches Multiple Security Issues in SSH, SCP, and SFTP
OpenSSH 10.4 is now available with fixes for sftp, scp, and sshd, plus experimental support for ML-DSA 44 and Ed25519 composite signatures.
GNU Guix Package Manager Hit by Four Security Flaws
The Guix team urges users to upgrade after vulnerabilities were found in its substitute handling and channel update mechanisms.
ClamAV 1.5.3 Open-Source Antivirus Fixes Multiple Security Vulnerabilities
ClamAV 1.5.3 open-source antivirus engine released with fixes for multiple security vulnerabilities affecting file parsing, archive scanning, and executable unpacking.
Tails 7.9.1 Fixes DirtyClone Kernel Flaw, Updates Tor Browser
The privacy-focused Tails 7.9.1 ships with Linux kernel 6.12.94, addressing DirtyClone and another privilege-escalation vulnerability.
Canonical Confirms Ubuntu Fixes for DirtyClone Linux Kernel Flaw
Canonical says Ubuntu kernel updates are available for DirtyClone, a high-severity Linux local privilege escalation flaw tracked as CVE-2026-43503.
Parrot OS 7.3 Is Out with Optimized ISOs for Modern Hardware
Parrot OS 7.3 is now available, bringing Linux kernel 7.0, optimized builds for newer CPUs, official Vagrant boxes, and refreshed security tools.