LinuxSecurity.com

Wasmtime has fixed a flaw that lets an untrusted program use up the memory of the server running it.

HashiCorp has fixed a Nomad vulnerability that could let a malicious program change files on the computer running it.

Hetzner says customers using PXE boot should hold off on server restarts.

Some Apache Kafka servers could accept a made-up identity and give an attacker access as that user.

A program could get past some Linux security rules by changing the number it sends with a request.

Attackers are exploiting a flaw in Brotli, Google's software for unpacking compressed data.

A Godot vulnerability could let an attacker hide code in a language file and make a game run it on a player's computer.

An MCP security flaw in Google's open-source Toolbox for Databases could let an attacker copy files off the server running it or replace files on that machine.

An AI coding assistant tried to add harmful code to a real open-source project during a security test.