GNU Guix Package Manager Hit by Four Security Flaws
The Guix team urges users to upgrade after vulnerabilities were found in its substitute handling and channel update mechanisms.
security
ClamAV 1.5.3 Open-Source Antivirus Fixes Multiple Security Vulnerabilities
ClamAV 1.5.3 open-source antivirus engine released with fixes for multiple security vulnerabilities affecting file parsing, archive scanning, and executable unpacking.
Tails 7.9.1 Fixes DirtyClone Kernel Flaw, Updates Tor Browser
The privacy-focused Tails 7.9.1 ships with Linux kernel 6.12.94, addressing DirtyClone and another privilege-escalation vulnerability.
Canonical Confirms Ubuntu Fixes for DirtyClone Linux Kernel Flaw
Canonical says Ubuntu kernel updates are available for DirtyClone, a high-severity Linux local privilege escalation flaw tracked as CVE-2026-43503.
Parrot OS 7.3 Is Out with Optimized ISOs for Modern Hardware
Parrot OS 7.3 is now available, bringing Linux kernel 7.0, optimized builds for newer CPUs, official Vagrant boxes, and refreshed security tools.
Kali Linux 2026.2 Released with GNOME 50, KDE Plasma 6.6, Kernel 6.19
Kali Linux 2026.2 arrives with major desktop updates, new tools, faster VM boots, and APT source changes.
Linux Foundation Launches Akrites to Improve Open Source Vulnerability Response
AWS, Anthropic, Google, Microsoft/GitHub, Red Hat, NVIDIA, and others are backing a new effort to coordinate OSS security response.
Arch Linux Blocks New AUR Registrations Amid Malware Cleanup
Arch Linux’s AUR is still operational, while new account registration appears blocked during ongoing cleanup work.
Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages
Arch contributors are cleaning up a malware incident in the AUR after suspicious updates appeared across several user-maintained packages.
New HTTP/2 Bomb DoS Attack Hits Nginx, Apache, IIS, Envoy, and Pingora
A new HTTP/2 Bomb DoS attack can exhaust memory on major web servers, causing denial-of-service in seconds.