03 Giugno 2026

• Debian Oldstable php-twig Vulnerabilities for PHP Code Injection DSA-6320-1

  Multiple security vulnerabilities were discovered in Twig, a template engine for PHP, which could result in PHP code injection, sandbox bypass or cross-site scripting. For the oldstable distribution (bookworm), these problems have been fixed in version 3.5.1-1+deb12u3.
• Debian yelp Important Information Disclosure Sandbox Escape DSA-6319-1

  A vulnerability was discovered in yelp, the GNOME help browser, that allows a crafted help document to read files accessible to the user and exfiltrate them to a remote server through resources loaded by the embedded web view. When yelp is launched from a sandboxed application (for example via the Flatpak OpenURI portal), this also enables a
• Debian Trixie gst-plugins-good1.0 Critical DoS Code Exec DSA-6318-1

  Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For the stable distribution (trixie), these problems have been fixed in

• OpenShift Virtualization 4.21: Removing complexity from your virtual machine networking workflow
  Red Hat OpenShift Virtualization 4.21 introduces highly anticipated networking design flows to simplify network management. Tailored to VM network requirements, this complete workflow lets you more efficiently create networks, configure them on specific nodes, and provide reliable access to virtual machines (VMs). The new workflow helps create complex configurations by breaking them into smaller, simpler steps, while still providing the same functionality.Explore the highlights of these networking enhancements:Centralized physical networks pageA physical network is a logical entity that was ad
• Fragnesia and friends: When page cache vulnerabilities keep coming back
  A couple of weeks ago, I wrote about Copy-Fail (CVE-2026-31431) and how Red Hat OpenShift’s defense-in-depth approach prevented container escape despite a vulnerable kernel. I spent time actively trying to break out of an OpenShift container, achieved root inside the pod almost immediately, and still couldn’t escape to the host. The kernel vulnerability was real. The exploit path was real. The defenses still held. While I was wrapping up this article, another related variant, DirtyDecrypt (CVE-2026-31635), started circulating publicly alongside exploit discussion and proof-of-concept cover

03 Giugno 2026

• 7.1-rc6: mainline

  Version:	7.1-rc6 (mainline)
  Released:	2026-05-31
  Source:	linux-7.1-rc6.tar.gz
  Patch:	full (incremental)

• 7.0.11: stable

  Version:	7.0.11 (stable)
  Released:	2026-06-01
  Source:	linux-7.0.11.tar.xz
  PGP Signature:	linux-7.0.11.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-7.0.11

• 6.18.34: longterm

  Version:	6.18.34 (longterm)
  Released:	2026-06-01
  Source:	linux-6.18.34.tar.xz
  PGP Signature:	linux-6.18.34.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-6.18.34