Let’s Encrypt to Cut Certificate Lifetimes to 45 Days by 2028
Let’s Encrypt begins a multi-year transition to shorter certificate validity, moving from 90-day to 45-day certificates.
security
ClamAV to Cut Signature Database Size by 50%
ClamAV will retire outdated signatures on December 16, reducing both databases by about 50% to improve performance and trim update costs.
KeePassXC Clarifies AI Policy: Used Only in Development, Never in the App
KeePassXC’s developers explain that AI helps with code reviews and small pull requests, but never appears in the KeePassXC codebase.
IPFire 2.29 Core Update 198 Released with Suricata 8 and Real-Time IPS Email Reporting
IPFire 2.29 Core Update 198 open-source firewall ships with Suricata 8 and real-time IPS email alerts for faster threat detection and better network insight.
Pangolin Reverse Proxy Moves to Dual Licensing With New Enterprise Edition
The open-source Pangolin tunneled reverse proxy adopts dual licensing, adding a paid Enterprise tier with premium support and features.
User Flags Possible Malware Incident on Xubuntu.org
A Reddit user reports that Xubuntu.org may have been compromised, serving a ZIP file containing a Trojan instead of the real installer.
OpenSSH 10.2 Released with Key Bugfix for ControlPersist Issue
OpenSSH 10.2 addresses bugs and prepares to deprecate SHA1 SSHFP records, pushing for stronger, SHA256-based security.
OpenSSH 10.1: New DSCP Handling, SHA1 SSHFP Deprecation Announced
OpenSSH 10.1 is now available, featuring DSCP handling changes, security fixes, and plans to deprecate SHA1 SSHFP.
How to Get Notified on SSH Logins on Linux
Learn how to set up SSH login notifications on Linux and get real-time alerts whenever someone connects to your server.
OpenSSL 3.6 Released with New FIPS, LMS Signatures
OpenSSL 3.6 adds LMS signatures, new FIPS features, and advanced key management tools for modern cryptography.