News
NewsWordfence 9.1.0: Security widget, faster firewall rules, configurable thresholds
Wordfence 9.1.0 released on 9 November: security news widget, WAF alert threshold controls and PHP 8.6 fixes.
NewsKoapanel: hosting reseller panel for Ubuntu 24.04, how it works and pricing
Control panel for Ubuntu 24.04 designed for hosting resellers: three tiers, white label included, from free to £24.90 per month per server.
NewsNGINX Ingress Controller 5.7.0: configurable HTTP version to backends per service
Release 5.7.0 lets you choose HTTP/1.0, 1.1 or 2 to backend pods via Service, Ingress annotation or VirtualServer field.
NewsMariaDB 13.0: optimizer hints with MySQL-compatible syntax
MariaDB Server 13.0, stable from September 2026, introduces optimizer hints with MySQL 8.0 syntax and the ability to use them inside views.
NewsUbuntu kernel USN-8875-1 updates and vulnerabilities: PHP 8.6 due 19 November
Advisory USN-8875-1 affects Ubuntu 20.04 and 22.04 Linux kernels on linux, linux-aws, linux-azure, linux-gke and other cloud variants. PHP 8.6 arrives 19 November.
NewsGrafana Watchers: always-on AI agents for monitoring, free until 1 December
Grafana Assistant's "Watchers" AI agents cost an average of under $5 per month per monitored service. Free until 1 December 2026.
NewsCVE-2026-98276: Linux kernel UDP vulnerability leads to root on CloudLinux
Race condition in Linux kernel UDP socket code: exploited on 4 November on CloudLinux 8 server. No mitigation available, only patching or livepatch.
NewsPHP 8.6: RC4 with two critical flaws fixed, RC5 on 5 November, GA on 19
Two weeks before the 19 November GA, PHP 8.6 is at RC4 (with two critical RCE fixes) and awaits RC5 on 5 November. Checklist for testing in staging.
NewsUSN-7230-3: FRR January 2025 patch broke RPKI validation
Ubuntu fixes a regression from USN-7230-2: FRR stopped reprocessing RPKI updates after the first received.
NewsUSN-8955-2: nginx patch extended to Ubuntu 20.04, 18.04, 16.04 and 14.04
Ubuntu extends the nginx fix already released on 26 October to ESM versions, including CVE-2026-42533 vulnerability with public PoC.
NewsUSN-9001-1: Ubuntu fixes Java keystore, eMudhra CA remained trusted
Ubuntu releases USN-9001-1: the JKS keystore wasn't aligned with the system trust store, leaving previously revoked CAs trusted, including eMudhra.
NewsCloudLinux: CRIU snapshots speed up Node.js restarts after idle
Beta for cPanel on CloudLinux: Passenger resumes from a snapshot instead of a cold start, saving 15–60% on first request after idle.
NewsWordPress: RCE flaw in core during updates, in CISA KEV since 3 November
CVE-2026-119977 affects WordPress Core 4.7–7.1.3: attack window during upgrade only. Patch in 7.1.4, CISA mandates fix by 6 November.
NewsPHP 8.6.0 RC5 released: final test run before 19 November GA
The PHP team has released RC5 of PHP 8.6.0, the final release candidate before the stable version expected on 19 November 2026.
NewsUSN-8972-2: HAProxy patch on Ubuntu 22.04 was causing 502 errors on chunked responses
Ubuntu fixes a regression in the HAProxy security patch from 3 November: on 22.04 LTS it was causing intermittent 502 errors on chunked responses.
NewsSovereign Tech Agency invests over €1m in Let's Encrypt post-quantum certificates
Germany's Sovereign Tech Agency funds Merkle Tree Certificate development at Let's Encrypt with over €1 million through to end of 2027.
NewsNGINX Gateway Fabric: AccessPolicy filters traffic by IP on Kubernetes
New AccessPolicy resource in NGINX Gateway Fabric 2.8.0: allow and deny lists for IP and CIDR on Gateway and Kubernetes routes, without manual NGINX snippets.
NewsWordfence raises prices from 3 December: Premium to $199, Response to $1,900
From 3 December, Premium increases to $199, Care to $890, Response to $1,900. Early renewals up to one year ahead are available at current pricing.
NewsUbuntu fixes 11 vulnerabilities in libsoup: crash and proxy credential theft
USN-8975-1 of 3 November 2026 patches 11 CVEs in libsoup2.4 and libsoup3: WebSocket overflow, data URI, proxy credentials.
NewsUSN-8976-1: Ubuntu patches HTTP response splitting flaw in apt-cacher from 2017
Ubuntu releases USN-8976-1 for apt-cacher on 16.04 LTS: CVE-2017-7443 patched nine years after original discovery.