26 Maggio 2026

• Debian Samba Critical Access Bypass Remote Code Exec Advisory DSA-6297-1

  Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix, which might result in bypass of access checks, overwrite of files in unintended situations using the WORM vfs module, installing CA certificates over http without verification when auto-enrollment GPO is enabled, denial of service or remote code
• Debian Trixie SPIP Critical Remote Code Exec Vulnerabilities DSA-6296-1

  Multiple vulnerabilities were discovered in SPIP, a website engine for publishing, which may result in remote code execution or an open redirect. For the stable distribution (trixie), these problems have been fixed in version 4.4.15+dfsg-0+deb13u1.
• Debian Trixie Linux Major Denial of Service Privilege Escalation DSA-6295-1

  Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.90-1. Additionally this update includes a fix for a

• Convert and upgrade your RHEL-like system to RHEL in one go
  For years, migrating to Red Hat Enterprise Linux (RHEL) meant a 2-step dance: first, you needed to convert the OS to a corresponding RHEL version, then perform an in-place RHEL upgrade. This meant that going from CentOS Stream 9 to RHEL 10 required a conversion from CentOS Stream 9 to RHEL 9 and a subsequent upgrade from RHEL 9 to RHEL 10. Different utilities and thus processes were used for each of those steps: Convert2RHEL for the conversion and Leapp for the upgrade. Having distinct utilities and separate processes introduces complexity, and requires separate automation workflows and care
• The new reality of supply chain trust: Why platform-native security is non-negotiable
  Recent high-profile security events have created a cause for concern through the DevSecOps community. We have witnessed a sophisticated shift in the threat landscape: attackers are no longer just targeting the applications you build. They’re targeting the very tools you use to protect them.By compromising the service accounts and version tags of popular third-party security "actions" and scanners, threat actors have successfully turned security tools into delivery vehicles for malware. In these scenarios, the moment a continuous integration/continuous delivery (CI/CD) pipeline triggers a sec

26 Maggio 2026

• 7.1-rc5: mainline

  Version:	7.1-rc5 (mainline)
  Released:	2026-05-24
  Source:	linux-7.1-rc5.tar.gz
  Patch:	full (incremental)

• 7.0.10: stable

  Version:	7.0.10 (stable)
  Released:	2026-05-23
  Source:	linux-7.0.10.tar.xz
  PGP Signature:	linux-7.0.10.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-7.0.10

• 6.18.33: longterm

  Version:	6.18.33 (longterm)
  Released:	2026-05-23
  Source:	linux-6.18.33.tar.xz
  PGP Signature:	linux-6.18.33.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-6.18.33