RedPatch
Headlines refreshed Sun Oct 11, 11:45 AM ET (2 h ago) · content checked against vendor docs

Daily feed

Today in security.

The last seven days from every source RedPatch watches — vendors, government CERTs and the security press. Refreshed every morning and evening; if a source is down you see its last good copy, never a blank.

Linux · 103 items

  1. perl-GD-SecurityImage-1.75-22.fc43Fedora security updates (Bodhi) · Oct 11
  2. perl-GD-SecurityImage-1.75-23.fc44Fedora security updates (Bodhi) · Oct 11
  3. perl-GD-SecurityImage-1.75-24.fc45Fedora security updates (Bodhi) · Oct 11
  4. perl-Net-Whois-Raw-2.99.044-1.fc45Fedora security updates (Bodhi) · Oct 11
  5. perl-Net-Whois-Raw-2.99.044-1.fc43Fedora security updates (Bodhi) · Oct 11
  6. perl-Net-Whois-Raw-2.99.044-1.fc44Fedora security updates (Bodhi) · Oct 11
  7. mkvtoolnix-96.0-2.fc43Fedora security updates (Bodhi) · Oct 11
  8. libebml-1.4.7-1.fc44 libmatroska-1.7.2-1.fc44 mkvtoolnix-102.0-1.fc44Fedora security updates (Bodhi) · Oct 11
  9. perl-Net-IDN-Encode-2.502-1.fc45Fedora security updates (Bodhi) · Oct 11
  10. perl-Net-IDN-Encode-2.502-1.fc44Fedora security updates (Bodhi) · Oct 11
  11. perl-Net-IDN-Encode-2.502-1.fc43Fedora security updates (Bodhi) · Oct 11
  12. rclone-1.75.2-2.el9Fedora security updates (Bodhi) · Oct 11
  13. rclone-1.75.2-1.fc45Fedora security updates (Bodhi) · Oct 11
  14. xapian-bindings-1.4.32-1.fc46 xapian-core-1.4.32-1.fc46Fedora security updates (Bodhi) · Oct 11
  15. ImageMagick-7.1.2.33-1.fc44Fedora security updates (Bodhi) · Oct 11
  16. ImageMagick-7.1.2.33-1.fc45Fedora security updates (Bodhi) · Oct 11
  17. ImageMagick-7.1.2.33-1.fc43Fedora security updates (Bodhi) · Oct 11
  18. ImageMagick-7.1.2.33-1.fc46Fedora security updates (Bodhi) · Oct 11
  19. libheif-1.23.6-1.fc43Fedora security updates (Bodhi) · Oct 10
  20. libheif-1.23.6-1.el10_4Fedora security updates (Bodhi) · Oct 10
  21. Why TLP should not replace your internal information classification, (Sat, Oct 10th)SANS Internet Storm Center · Oct 10
  22. DSA-6550-1 ghostscript - security updateDebian Security Advisories (DSA) · Oct 9
  23. RHSA-2026:79786: Important: kernel security updateRed Hat Security Advisories (RHSA) · Oct 9
  24. USN-8911-1: Linux kernel (OEM) vulnerabilitiesUbuntu Security Notices (USN) · Oct 9
  25. RHSA-2026:79784: Important: kernel security updateRed Hat Security Advisories (RHSA) · Oct 9
  26. RHSA-2026:79782: Important: kernel security updateRed Hat Security Advisories (RHSA) · Oct 9
  27. RHSA-2026:79783: Important: kernel security updateRed Hat Security Advisories (RHSA) · Oct 9
  28. USN-8887-3: Linux kernel vulnerabilitiesUbuntu Security Notices (USN) · Oct 9
  29. USN-8875-2: Linux kernel (NVIDIA) vulnerabilitiesUbuntu Security Notices (USN) · Oct 9
  30. USN-8903-2: Linux kernel vulnerabilitiesUbuntu Security Notices (USN) · Oct 9
  31. USN-8905-2: Linux kernel (GCP) vulnerabilitiesUbuntu Security Notices (USN) · Oct 9
  32. RHSA-2026:79778: Important: kernel security updateRed Hat Security Advisories (RHSA) · Oct 9
  33. ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)SANS Internet Storm Center · Oct 9
  34. CVE-2026-98384: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()Linux Kernel CVE Announce · Oct 9
  35. CVE-2026-98383: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCALLinux Kernel CVE Announce · Oct 9
  36. CVE-2026-98382: bpf: Reject dev-bound-only programs on other devicesLinux Kernel CVE Announce · Oct 9
  37. CVE-2026-98381: veth: manage XDP program pointers during channel resizeLinux Kernel CVE Announce · Oct 9
  38. CVE-2026-98380: net/sched: reject IDR error pointers when deleting actionsLinux Kernel CVE Announce · Oct 9
  39. CVE-2026-98379: netfilter: ip6t_rpfilter: reject routes without inet6_devLinux Kernel CVE Announce · Oct 9
  40. CVE-2026-98378: bpf: Skip unsettled links in link iteratorLinux Kernel CVE Announce · Oct 9
  41. CVE-2026-98377: vlan: require the MAC header to be present in __vlan_insert_inner_tag()Linux Kernel CVE Announce · Oct 9
  42. CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet headerLinux Kernel CVE Announce · Oct 9
  43. CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacementLinux Kernel CVE Announce · Oct 9
  44. USN-8908-1: BlueZ vulnerabilitiesUbuntu Security Notices (USN) · Oct 8
  45. RHSA-2026:73864: Important: OpenShift Container Platform 4.14.75 packages and security updateRed Hat Security Advisories (RHSA) · Oct 8
  46. RHSA-2026:73851: Important: OpenShift Container Platform 4.16.72 bug fix updateRed Hat Security Advisories (RHSA) · Oct 8
  47. RHSA-2026:73866: Important: OpenShift Container Platform 4.14.75 bug fix and security updateRed Hat Security Advisories (RHSA) · Oct 8
  48. RHSA-2026:79281: Moderate: glibc security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Oct 8
  49. USN-8910-1: libxml2 vulnerabilitiesUbuntu Security Notices (USN) · Oct 8
  50. RHSA-2026:79162: Important: bind security updateRed Hat Security Advisories (RHSA) · Oct 8
  51. RHSA-2026:78951: Moderate: kbd security updateRed Hat Security Advisories (RHSA) · Oct 8
  52. RHSA-2026:79160: Important: bind9.16 security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Oct 8
  53. RHSA-2026:74797: Important: Red Hat build of MicroShift 4.20.41 security updateRed Hat Security Advisories (RHSA) · Oct 8
  54. RHSA-2026:79371: Important: dovecot security updateRed Hat Security Advisories (RHSA) · Oct 8
  55. USN-8909-1: libde265 vulnerabilityUbuntu Security Notices (USN) · Oct 8
  56. Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)SANS Internet Storm Center · Oct 8
  57. RHSA-2026:76739: Important: kernel security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Oct 8
  58. RHSA-2026:77689: Important: kernel security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Oct 8
  59. RHSA-2026:79122: Important: cjose security updateRed Hat Security Advisories (RHSA) · Oct 8
  60. RHSA-2026:79177: Important: mod_auth_openidc security updateRed Hat Security Advisories (RHSA) · Oct 8
  61. RHSA-2026:77690: Important: kernel security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Oct 8
  62. RHSA-2026:77534: Moderate: sssd security updateRed Hat Security Advisories (RHSA) · Oct 8
  63. RHSA-2026:77020: Important: python3.12 security updateRed Hat Security Advisories (RHSA) · Oct 8
  64. RHSA-2026:79121: Low: libxml2 security updateRed Hat Security Advisories (RHSA) · Oct 8
  65. RHSA-2026:79113: Important: bind9.16 security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Oct 8
  66. RHSA-2026:79119: Low: libxml2 security updateRed Hat Security Advisories (RHSA) · Oct 8
  67. RHSA-2026:79120: Low: libxml2 security updateRed Hat Security Advisories (RHSA) · Oct 8
  68. USN-8907-1: libgit2 vulnerabilityUbuntu Security Notices (USN) · Oct 8
  69. USN-8902-1: libarchive vulnerabilityUbuntu Security Notices (USN) · Oct 8
  70. KEV: CVE-2015-5477 — ISC BIND: ISC BIND Data Processing Errors VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
  71. KEV: CVE-2016-3081 — Apache Struts: Apache Struts Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
  72. KEV: CVE-2023-22894 — Strapi Strapi: Strapi Cleartext Storage of Sensitive Information VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
  73. KEV: CVE-2021-3199 — ONLYOFFICE Docs: ONLYOFFICE Docs Server Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
  74. KEV: CVE-2015-3306 — ProFTPD ProFTPD: ProFTPD Improper Access Control VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
  75. ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th)SANS Internet Storm Center · Oct 7
  76. Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)SANS Internet Storm Center · Oct 7
  77. CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tablesLinux Kernel CVE Announce · Oct 7
  78. CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()Linux Kernel CVE Announce · Oct 7
  79. ISC Stormcast For Wednesday, October 7th, 2026 https://isc.sans.edu/podcastdetail/10126, (Wed, Oct 7th)SANS Internet Storm Center · Oct 6
  80. DSA-6549-1 xz-utils - security updateDebian Security Advisories (DSA) · Oct 6
  81. More RMM Tools In the Wild, (Tue, Oct 6th)SANS Internet Storm Center · Oct 6
  82. ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)SANS Internet Storm Center · Oct 6
  83. CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeedsLinux Kernel CVE Announce · Oct 6
  84. CVE-2026-98369: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()Linux Kernel CVE Announce · Oct 6
  85. CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb fragsLinux Kernel CVE Announce · Oct 6
  86. CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_acceptLinux Kernel CVE Announce · Oct 6
  87. CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PDLinux Kernel CVE Announce · Oct 6
  88. CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB accessLinux Kernel CVE Announce · Oct 6
  89. CVE-2026-98364: xfrm: hold net_device reference under RCU in bundle creationLinux Kernel CVE Announce · Oct 6
  90. CVE-2026-98363: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPSLinux Kernel CVE Announce · Oct 6
  91. CVE-2026-98362: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rateLinux Kernel CVE Announce · Oct 6
  92. CVE-2026-98372: xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()Linux Kernel CVE Announce · Oct 6
  93. CVE-2026-98371: xfrm: iptfs: fix runt reassembly panic from short inner tot_lenLinux Kernel CVE Announce · Oct 6
  94. CVE-2026-98370: xfrm: fix compat ALLOCSPI request use-after-freeLinux Kernel CVE Announce · Oct 6
  95. CVE-2026-98361: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write pathsLinux Kernel CVE Announce · Oct 6
  96. DSA-6548-1 node-shell-quote - security updateDebian Security Advisories (DSA) · Oct 5
  97. DSA-6547-1 ruby-jwt - security updateDebian Security Advisories (DSA) · Oct 5
  98. DSA-6546-1 rails - security updateDebian Security Advisories (DSA) · Oct 5
  99. DSA-6545-1 roundcube - security updateDebian Security Advisories (DSA) · Oct 5
  100. ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)SANS Internet Storm Center · Oct 4
  101. TTY Logs and the Data it Captures, (Sun, Oct 4th)SANS Internet Storm Center · Oct 4
  102. DSA-6544-1 sabnzbdplus - security updateDebian Security Advisories (DSA) · Oct 4
  103. DSA-6543-1 libreoffice - security updateDebian Security Advisories (DSA) · Oct 4

Sources

SourceStatusNewest item
CISA Cybersecurity Advisories ● live Oct 8
CISA ICS Advisories ● live Oct 8
CISA Known Exploited Vulnerabilities (KEV) ● live Oct 8
The Hacker News ● live Oct 11
Krebs on Security ● live Oct 9
GBHackers ● live Oct 10
MITRE ATT&CK ● live —
WIRED Security ● live Oct 10
SecurityWeek ● live Oct 10
Schneier on Security ● live Oct 9
NSA Cybersecurity Advisories & Guidance ● live —
Microsoft Security Blog ● live Oct 8
CERT/CC Vulnerability Notes ● live Oct 1
Infosecurity Magazine ● live Oct 9
Dark Reading ● live Oct 9
BleepingComputer ● live Oct 11
Unit 42 (Palo Alto Networks) ● live Oct 7
The Record ● live Oct 9
Cisco Talos ● live Oct 8
Google Security Blog ● live —
Apple Security Research ● link only —
Apple Developer Releases (OS updates) ● live Oct 6
Apple Security Releases ● link only —
MSRC Blog ● link only —
Microsoft Security Update Guide ● live Oct 9
Windows Release Health ● live Oct 9
Cloudflare Blog - Security ● live Oct 7
AWS Security Blog ● live Oct 7
Hacker News ● live Oct 11
Anthropic Research ● live Oct 8
HiddenLayer Research ● link only —
LLM Security ● link only —
Ubuntu Security Notices (USN) ● live Oct 9
Debian Security Advisories (DSA) ● live Oct 9
Red Hat Security Advisories (RHSA) ● live Oct 9
Linux Kernel CVE Announce ● live Oct 9
NVD (NIST) CVE API 2.0 ● live —
SANS Internet Storm Center ● live Oct 10
Apple Developer news ● live Oct 6
macOS Security Compliance Project releases ● live —
Microsoft Security Baselines blog (Tech Community) ● live Oct 8
Fedora security updates (Bodhi) ● live Oct 11

Go deeper

networks.jelia.nycHow the internet actually moves your data — packets, DNS, routing, TLS. waves.jelia.nycElectromagnetism explained — Wi-Fi, 2.4 GHz, Bluetooth and why RF leaks. lib.jelia.nycThe library — security, Linux, assembly and networking books on the shelf. blog.redpatch.usRedPatch field notes.