News
NewsUSN-8968-1: Ubuntu 14.04 patches 2021 Bluetooth flaw, Legacy add-on only
Ubuntu fixes CVE-2021-3640 on Trusty Tahr kernel 3.13: patch available only with Ubuntu Pro Legacy Support add-on.
NewsUSN-8967-1: Ubuntu patches kernel DoS on AWS 16.04, reboot required
Ubuntu has released a patch for CVE-2021-28714 on the linux-aws kernel for 16.04 LTS: requires reboot and recompilation of third-party kernel modules.
NewsUSN-8960-1: Ubuntu patches over 150 kernel flaws in OEM 7.0 on 26.04 LTS
Canonical released USN-8960-1 advisory on 3 November 2026 for the linux-oem-7.0 kernel on Ubuntu 26.04 LTS: reboot and third-party module recompilation required.
NewsUSN-8966-1: Ubuntu patches two 2021 kernel vulnerabilities in 14.04 and 16.04
Ubuntu closes two 2021 vulnerabilities in the Linux kernel for 14.04 and 16.04 ESM: Xen netback DoS and Bluetooth use-after-free. Reboot required.
NewsUSN-8965-1: Ubuntu patches NVIDIA BlueField DPU kernel
Ubuntu 20.04 LTS fixes ten vulnerabilities in the linux-bluefield kernel for NVIDIA DPUs. Requires reboot and recompilation of third-party kernel modules.
NewsUSN-8962-1: Ubuntu fixes over 300 CVEs in Azure confidential VM kernel
Canonical patches linux-azure-fde, the 22.04 LTS kernel for Azure confidential VMs: over 300 CVEs, requires reboot and third-party module recompilation.
NewsGrafana links application traces to database queries: trace linkage now GA
Grafana Cloud makes trace linkage generally available: trace application requests directly to slow database queries.
NewsGrafana Alloy v1.21: OpenTelemetry engine moves to Public Preview
With Alloy v1.21.0, the OTel engine now stands alongside the default engine: standard YAML collector configuration, no Alloy syntax required.
NewsHTTP2Shell: Critical Brotli Flaw (CVE-2026-111497) and WordPress Risk
Wordfence explains what to check with your hosting provider for CVE-2026-111497, the critical Brotli vulnerability known as HTTP2Shell, now listed in CISA KEV.
NewsGo blocks compromised eMudhra CAs: what to do for CVE-2026-111943
Go 1.26.10 and 1.27.3 block eight eMudhra intermediates with weak keys. Command to verify version and impacts on AWS CloudFront/ALB.
NewsMariaDB HyperLogLog plugin adds distinct count sketches
The type_hll plugin adds a HyperLogLog data type and sketch functions to MariaDB. Currently requires a server built from a development branch, not a stable release.
NewsMariaDB 10.6 out of maintenance: six critical CVEs no longer patched
MariaDB 10.6 reaches end-of-life on 6 July 2026: six flaws from October, two with CVSS 9.9, will receive no fixes on that branch.
NewsCVE-2026-98432: critical kernel flaw in CloudLinux without full patch
Use-after-free in kernel TCP IPv4, CVSS 9.8. CloudLinux has no patch available for all versions yet: here's the status by stream.
NewsWordPress 7.1.4 patches unauthenticated RCE in update window
WordPress 7.1.4 closes 22 vulnerabilities, the most critical being an unauthenticated RCE during updates. Patchstack rates it as difficult to exploit.
NewsWordfence: 1,077 vulnerabilities reported in July 2026, down from May
Wordfence's monthly report logs 1,077 WordPress vulnerability disclosures in July 2026, declining from the previous two months.
NewsNIST Elliptic Curves: Seed Mystery Solved, $36,864 Bounty to Let's Encrypt
An Anthropic team has determined how the NIST curve seeds used in TLS were generated. Filippo Valsorda's bounty of $36,864 goes to ISRG/Let's Encrypt.
NewsMariaDB pursues parallel query execution: initial results, no release date
MariaDB is developing parallel query execution on InnoDB. Internal testing shows up to 7× performance gains on TPC-H, but the feature remains unreleased.
NewsPHP2Shell: Wordfence Confirms No WordPress Breaches After One Week
Wordfence confirms as of 28 October: no WordPress sites compromised via PHP2Shell, but 77,600 suspicious requests in 5 days. PHP patches still pending.
NewsLiteSpeed Cache for WordPress: CVE-2026-114190 vulnerability, update to v7.9.2
LiteSpeed confirms data exposure flaw in LiteSpeed Cache plugin, patched in September. Affects sites with REST API caching and plain permalinks enabled.
NewsMariaDB fixes 2020 InnoDB regression: up to 2.8× more queries
A regression introduced in MariaDB 10.5 penalised InnoDB workloads that fit entirely in RAM. The patch is confirmed for versions 11.8.10, 12.3.4 and 13.1.2.