LinuxSecurity.com

A Linux security protection can appear to be available but still be switched off when a system needs it.

Microsoft shipped Azure Linux 3.0.2022 on November 7.

When a Linux server's kernel crashes, applications can go offline until the machine starts again.

The new zlib release fixes memory errors in code used by many Linux applications.

AI researchers have found hundreds of Linux kernel vulnerabilities that let a limited account gain administrator power in tests.

An OpenSSH flaw could let attackers sign in to some Linux systems without knowing a password, even when an account was meant to use keys only.

A flaw in APT, the tool that installs software on Debian and Ubuntu, could let an attacker replace a package after it passed a security check.

Rails, a software framework used to build websites, has fixed flaws that could let an uploaded file do more than its owner intended.

A WordPress vulnerability is being used in attacks that target the moment a site updates its main software.

Two flaws in the Xen hypervisor can let a malicious virtual machine reach memory that belongs to other parts of the same computer. That includes the powerful management system used to control the other virtual machines. A break in that separation can put more than one virtual machine at risk. For people running several systems on the same computer, the concern is how far an attacker could reach from just one of them. The flaws were disclosed on November 3. Xen has published patches, and platf...