25 Maggio 2026

• Debian Trixie Linux Major Denial of Service Privilege Escalation DSA-6295-1

  Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.90-1. Additionally this update includes a fix for a
• Debian libgcrypt Denial of Service Security Advisory DSA-6294-1

  It was discovered that an incorrect implementation of ECDH encryption (with NIST, Brainpool, X448, or X25519 curves) within Libgcrypt could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 1.10.1-3+deb12u1.
• Debian krb5 Important NegoEx Denial of Service Vuln DSA-6293-1

  Cem Onat Karagun discovered two vulnerabilities in the NegoEx parsing in krb5, the MIT implementation of Kerberos. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 1.20.1-2+deb12u5.

• The new reality of supply chain trust: Why platform-native security is non-negotiable
  Recent high-profile security events have created a cause for concern through the DevSecOps community. We have witnessed a sophisticated shift in the threat landscape: attackers are no longer just targeting the applications you build. They’re targeting the very tools you use to protect them.By compromising the service accounts and version tags of popular third-party security "actions" and scanners, threat actors have successfully turned security tools into delivery vehicles for malware. In these scenarios, the moment a continuous integration/continuous delivery (CI/CD) pipeline triggers a sec
• Context-aware advisor recommendations in Red Hat Lightspeed
  In distributed system management, defining the "ideal state" of a server is rarely black and white. Different operational goals often create tension between performance tuning and security hardening, where optimizing for one can inadvertently break the other. To resolve this friction, Red Hat Lightspeed has introduced a new cross-service validation capability between our advisor and compliance services.Red Hat Lightspeed advisor: Recommendations for misconfigurations and best practices to improve stability, performance, and availability.Compliance: Monitors compliance with security baselines t

25 Maggio 2026

• 7.1-rc5: mainline

  Version:	7.1-rc5 (mainline)
  Released:	2026-05-24
  Source:	linux-7.1-rc5.tar.gz
  Patch:	full (incremental)

• 7.0.10: stable

  Version:	7.0.10 (stable)
  Released:	2026-05-23
  Source:	linux-7.0.10.tar.xz
  PGP Signature:	linux-7.0.10.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-7.0.10

• 6.18.33: longterm

  Version:	6.18.33 (longterm)
  Released:	2026-05-23
  Source:	linux-6.18.33.tar.xz
  PGP Signature:	linux-6.18.33.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-6.18.33