14 Luglio 2026

• Debian Chromium Critical Code Exec Info Disclosure DSA-6387-1

  Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 150.0.7871.114-1~deb13u1.
• Debian opam Important Directory Traversal Fix DSA-6386-1 CVE-2026-57825

  Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install files did not check symlinks resolution on the target path, which could result in directory traversal out of the package area. For the stable distribution (trixie), this problem has been fixed in
• Debian pgextwlist SQL Injection Risk Fix DSA-6385-1 CVE-2023-39417

  Guillaume Winter discovered that pgextwlist, an extension for PostgreSQL implementing a whitelist mechanism for PostgreSQL extensions, was susceptible to SQL injection via crafted schema and user names. For the stable distribution (trixie), this problem has been fixed in version 1.19-1+deb13u1.

• Zero trust workload identity manager version 1.1 generally available on Red Hat OpenShift
  As modern applications expand across multiple clusters, clouds, and hybrid regions, traditional security mechanisms, such as long lived secrets, static certificates, or cloud provider specific identity and access management, struggle to keep up with the scale, velocity, and ephemeral nature of microservices. Red Hat’s zero trust workload identity manager is designed to resolve this by dynamically issuing temporary, cryptographically attested identities to workloads at runtime. This enables your applications to systematically prove what they are, not just where they run.Zero trust workload id
• Why the future of telco depends on open, ecosystem-led architectures
  Navigating the complexities of 5G and AI requires telecommunications service providers to move beyond the restrictive, vendor-locked vertical architectures of the past. Legacy, single-vendor vertical stacks, once the industry standard, have become the primary bottleneck to growth. These rigid architectures lock operators into slow innovation cycles and unsustainable operational expenditure (OpEx). As network complexity explodes at the edge, the traditional model of "one vendor per domain" creates isolated silos that are impossible to automate at scale and too expensive to maintain.To thrive, t

14 Luglio 2026

• 7.2-rc3: mainline

  Version:	7.2-rc3 (mainline)
  Released:	2026-07-12
  Source:	linux-7.2-rc3.tar.gz
  Patch:	full (incremental)

• 7.1.3: stable

  Version:	7.1.3 (stable)
  Released:	2026-07-04
  Source:	linux-7.1.3.tar.xz
  PGP Signature:	linux-7.1.3.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-7.1.3

• 7.0.14: stable

  Version:	7.0.14 (EOL) (stable)
  Released:	2026-06-27
  Source:	linux-7.0.14.tar.xz
  PGP Signature:	linux-7.0.14.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-7.0.14