LinuxSecurity.com

The new zlib release fixes memory errors in code used by many Linux applications.

AI researchers have found hundreds of Linux kernel vulnerabilities that let a limited account gain administrator power in tests.

An OpenSSH flaw could let attackers sign in to some Linux systems without knowing a password, even when an account was meant to use keys only.

A flaw in APT, the tool that installs software on Debian and Ubuntu, could let an attacker replace a package after it passed a security check.

Rails, a software framework used to build websites, has fixed flaws that could let an uploaded file do more than its owner intended.

A WordPress vulnerability is being used in attacks that target the moment a site updates its main software.

Two flaws in the Xen hypervisor can let a malicious virtual machine reach memory that belongs to other parts of the same computer. That includes the powerful management system used to control the other virtual machines. A break in that separation can put more than one virtual machine at risk. For people running several systems on the same computer, the concern is how far an attacker could reach from just one of them. The flaws were disclosed on November 3. Xen has published patches, and platf...

Chainlit helps developers turn an AI model into a chat app, but it no longer receives security updates.

Apache Arrow gives data tools a shared way to organize information.

Flaws in two open-source AI platforms could let code reach files outside the space meant to contain it.

To set an environment variable in a Bash session on Linux, enter an export command such as export EDITOR=vim.

David Goguen’s free chmod calculator shows what Linux permission numbers mean before you copy a command.