21 Luglio 2026

• Debian Linux Major Privilege Escalation Denial of Service Issues DSA-6393-1

  Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.96-1.
• Debian tiff Critical Denial of Service or Code Exec Advisory DSA-6392-1

  A flaw was discovered in tiff, a Tag Image File Format library, which may result in denial of service or the execution of arbitrary code if malformed image files are processed. For the stable distribution (trixie), this problem has been fixed in version 4.7.0-3+deb13u3.
• Debian Roundcube Critical Account Takeover Denial of Service Fix DSA-6391-1

  Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-site scripting, SSRF bypass, information disclosure or denial of service. For the stable distribution (trixie), these problems have been fixed in

• Why prompt-level guardrails aren't enough: The platform security layers production agents need
  An agent charged $4,000 to the wrong customer billing account. Nobody noticed until Monday. The agent wasn't broken—it was working exactly as designed. It had broad API credentials, the model picked a plausible but wrong account identifier, and nothing in the infrastructure stopped the call from going through. No identity boundary. No scope limit. No audit trail.I've seen teams react to failures like this by adding more checks inside the agent code—if-else blocks, hardcoded allowlists, manual credential rotation. That approach doesn't scale. When 3 failures hit a single AI agent deployment
• Preparing for Q-day: Four steps to prepare your hybrid cloud today
  The arrival of a cryptographically relevant quantum computer, often referred to as Q-day, is moving from a distant theoretical mathematical challenge to an urgent timeline that security teams must plan for today. Bad actors are already engaging in harvest now, decrypt later activities. This means they are capturing and storing encrypted enterprise traffic, intellectual property, and data logs today with the intention of running them through quantum hardware as soon as it becomes available.At Red Hat, we believe taking this threat seriously means acting before the crisis arrives. Rather than vi

21 Luglio 2026

• 7.2-rc4: mainline

  Version:	7.2-rc4 (mainline)
  Released:	2026-07-19
  Source:	linux-7.2-rc4.tar.gz
  Patch:	full (incremental)

• 7.1.4: stable

  Version:	7.1.4 (stable)
  Released:	2026-07-18
  Source:	linux-7.1.4.tar.xz
  PGP Signature:	linux-7.1.4.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-7.1.4

• 7.0.14: stable

  Version:	7.0.14 (EOL) (stable)
  Released:	2026-06-27
  Source:	linux-7.0.14.tar.xz
  PGP Signature:	linux-7.0.14.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-7.0.14