linuxsecurity.com / .linuxsecurity-com-linuxsecurity-articles / Page 6

An npm package used throughout the SubQuery project was poisoned.

On an affected host, a second mount of the same NFSv4 share could alter SELinux label handling on the first.

Linux developers have merged a fix for a Linux kernel vulnerability that can leave Binder device creation writing to memory the kernel has already released.

Citrix has confirmed targeted attacks involving a Citrix NetScaler vulnerability and urged affected customers to update.

Stay informed with the latest in Linux security news & updates. Your trusted resource for staying ahead in the world of Linux security.

Apache released Thrift 0.25.0 on Sep 30, 2026 with memory checks for several C++, Java, and Python components.

Apache's release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.

OpenSSL issued fixes on Sep 29, 2026 for an OpenSSL vulnerability that can send unrelated program memory to another party during secure connection setup.

LiteLLM has patched a privilege-escalation flaw that can let an authenticated internal user forge an administrative session and reach command-execution features in some AI gateway deployments.

Apache released HTTP Server 2.4.69 on October 1, 2026, to fix security faults ranging from unwanted code execution to mishandled web responses.