02 Giugno 2026

• Debian yelp Important Information Disclosure Sandbox Escape DSA-6319-1

  A vulnerability was discovered in yelp, the GNOME help browser, that allows a crafted help document to read files accessible to the user and exfiltrate them to a remote server through resources loaded by the embedded web view. When yelp is launched from a sandboxed application (for example via the Flatpak OpenURI portal), this also enables a
• Debian Trixie gst-plugins-good1.0 Critical DoS Code Exec DSA-6318-1

  Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For the stable distribution (trixie), these problems have been fixed in
• Debian Symfony Important SQL Injection Denial Of Service Vuln DSA-6317-1

  Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of security controls, cross-site scripting, denial of service, SQL injection, email header injection, information disclosure or code execution via PHP object deserialization. For the oldstable distribution (bookworm), these problems have been fixed

• OpenShift Virtualization 4.21: Removing complexity from your virtual machine networking workflow
  Red Hat OpenShift Virtualization 4.21 introduces highly anticipated networking design flows to simplify network management. Tailored to VM network requirements, this complete workflow lets you more efficiently create networks, configure them on specific nodes, and provide reliable access to virtual machines (VMs). The new workflow helps create complex configurations by breaking them into smaller, simpler steps, while still providing the same functionality.Explore the highlights of these networking enhancements:Centralized physical networks pageA physical network is a logical entity that was ad
• Fragnesia and friends: When page cache vulnerabilities keep coming back
  A couple of weeks ago, I wrote about Copy-Fail (CVE-2026-31431) and how Red Hat OpenShift’s defense-in-depth approach prevented container escape despite a vulnerable kernel. I spent time actively trying to break out of an OpenShift container, achieved root inside the pod almost immediately, and still couldn’t escape to the host. The kernel vulnerability was real. The exploit path was real. The defenses still held. While I was wrapping up this article, another related variant, DirtyDecrypt (CVE-2026-31635), started circulating publicly alongside exploit discussion and proof-of-concept cover

02 Giugno 2026

• 7.1-rc6: mainline

  Version:	7.1-rc6 (mainline)
  Released:	2026-05-31
  Source:	linux-7.1-rc6.tar.gz
  Patch:	full (incremental)

• 7.0.11: stable

  Version:	7.0.11 (stable)
  Released:	2026-06-01
  Source:	linux-7.0.11.tar.xz
  PGP Signature:	linux-7.0.11.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-7.0.11

• 6.18.34: longterm

  Version:	6.18.34 (longterm)
  Released:	2026-06-01
  Source:	linux-6.18.34.tar.xz
  PGP Signature:	linux-6.18.34.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-6.18.34