Everything published on xtralinux.org — news, desk notes and guides, newest first.https://xtralinux.org/enhttps://xtralinux.org/news/sap-november-2026-patch-day-four-cvss-10-flaws/https://xtralinux.org/news/sap-november-2026-patch-day-four-cvss-10-flaws/SAP fixed four unauthenticated CVSS 10.0 flaws on November Patch Day — ICM, Web Dispatcher, SAP Gateway and SAML2 service provider, including two pre-auth RCE paths Onapsis researchers call ICM2SHELL and PROXYGATE.Tue, 10 Nov 2026 13:25:00 GMTnewssecuritysapnetweaverpatch-dayhttps://xtralinux.org/news/n-able-n-central-able2shell-zero-days-cloud-offline/https://xtralinux.org/news/n-able-n-central-able2shell-zero-days-cloud-offline/Researcher Sean Bales published Able2Shell — 30+ unpatched N-central vulnerabilities with PoC scripts reaching root — and N-able took its hosted N-central offline and told on-prem customers to shut servers down.Tue, 10 Nov 2026 13:15:00 GMTnewssecurityzero-dayn-centralrcehttps://xtralinux.org/news/chrome-zero-day-cve-2026-125350-exploited-in-the-wild/https://xtralinux.org/news/chrome-zero-day-cve-2026-125350-exploited-in-the-wild/Chrome 157.0.8103.50/.51 fixes CVE-2026-125350, a high-severity use-after-free in the XML component that Google says is already exploited in the wild; reported anonymously on November 6.Tue, 10 Nov 2026 13:05:00 GMTnewssecuritychromezero-daycvehttps://xtralinux.org/news/mozilla-firefox-161-public-beta-testing/https://xtralinux.org/news/mozilla-firefox-161-public-beta-testing/Firefox 161 beta is out with a customizable shortcut for copying the current tab's URL, better WebRTC call quality, Chrome history import keeping visit frequency, and CSS random() support — final release due November 24.Tue, 10 Nov 2026 01:02:00 GMTnewslinuxfirefoxmozillabrowserreleasehttps://xtralinux.org/news/linux-tcp-cve-2026-98432-ubuntu-proposed/https://xtralinux.org/news/linux-tcp-cve-2026-98432-ubuntu-proposed/A 9.8/10 use-after-free in the kernel's IPv4 TCP handling lets unauthenticated remote attackers reach code execution; RHEL errata are out, and Ubuntu's fixes sit in -proposed for 22.04-26.04.Tue, 10 Nov 2026 01:02:00 GMTnewssecuritylinux-kernelcve-2026-98432red-hatubuntuhttps://xtralinux.org/news/web3auth-keplr-social-login-wallet-theft/https://xtralinux.org/news/web3auth-keplr-social-login-wallet-theft/Users of Keplr wallets created with Google or Apple sign-in had money stolen through a Web3Auth flaw both companies confirmed; Web3Auth swept at-risk wallets into recovery wallets and its login service is still degraded.Tue, 10 Nov 2026 01:02:00 GMTnewssecuritycryptoweb3authkeplrhttps://xtralinux.org/news/debian-dsa-6617-symfony-security-update/https://xtralinux.org/news/debian-dsa-6617-symfony-security-update/Debian issued DSA-6617-1 for the symfony PHP framework on November 9, 2026, lifting the package in trixie from 6.4.41+dfsg-0+deb13u1 to 6.4.50+dfsg-0+deb13u1 to address sixteen tracked vulnerabilities.Tue, 10 Nov 2026 00:55:00 GMTnewssecuritydebiansymfonyupdateshttps://xtralinux.org/news/mesa-26-3-open-source-graphics-stack-released/https://xtralinux.org/news/mesa-26-3-open-source-graphics-stack-released/Mesa 26.3 lands Vulkan 1.3 on PanVK for Arm Mali v6/v7 chips, brings new Mali and PowerVR coverage, and a wide list of game-specific improvements. The project still calls it a development release; 26.3.1 follows.Tue, 10 Nov 2026 00:55:00 GMTnewsmesagraphicsvulkanlinuxhttps://xtralinux.org/news/mozilla-firefox-160-builds-published/https://xtralinux.org/news/mozilla-firefox-160-builds-published/Final Firefox 160 builds are on Mozilla's download server ahead of the November 10 unveiling, introducing Mini Window, Picture-in-Picture speed control, MKV playback, and on-by-default Local Network Access restrictions on Android.Tue, 10 Nov 2026 00:55:00 GMTnewsfirefoxmozillabrowserlinuxreleasehttps://xtralinux.org/news/claude-code-dont-ask-again-leaks-secrets-on-github/https://xtralinux.org/news/claude-code-dont-ask-again-leaks-secrets-on-github/A scan of public GitHub found 1,122 copies of Claude Code's saved-approval file holding real secrets — database passwords, SSH logins, CI tokens; rotate every credential before cleaning history.Mon, 09 Nov 2026 23:13:00 GMTnewssecuritysupply-chaindeveloperssecrets-leakclaude-codehttps://xtralinux.org/news/qubole-cross-account-iam-roles-abused-customer-aws-accounts/https://xtralinux.org/news/qubole-cross-account-iam-roles-abused-customer-aws-accounts/Wiz says a threat actor spent two October weeks assuming customers' Qubole-integration IAM roles from Qubole's own AWS account, harvesting secrets and draining S3; runners should check CloudTrail back to October 1.Mon, 09 Nov 2026 23:13:00 GMTnewssecurityawscloudsupply-chainiamhttps://xtralinux.org/news/zyxel-gs1900-patch-2-bypass-rce-cve-2026-107441/https://xtralinux.org/news/zyxel-gs1900-patch-2-bypass-rce-cve-2026-107441/Binarly found the June patch for an exploited Zyxel GS1900 switch flaw leaves the same pre-auth root RCE open; firmware 2.90 Patch 3, fixing it as CVE-2026-107441, is out for ten models after roughly 996 switches were looted.Mon, 09 Nov 2026 23:13:00 GMTnewssecuritycverouters-switchesrcepatchinghttps://xtralinux.org/news/xen-xsa-523-grant-copy-vm-memory-read-write/https://xtralinux.org/news/xen-xsa-523-grant-copy-vm-memory-read-write/XSA-523: two grant-copy flaws (CVE-2026-102703/102704) let a malicious VM read and write other VMs’ memory including dom0 across Xen 4.6+; no mitigation, fixed upstream for 4.18–4.19 and via XCP-ng/Qubes builds.Mon, 09 Nov 2026 23:12:00 GMTnewssecurityxenvirtualizationcvehttps://xtralinux.org/news/cisa-fbi-joint-warning-industrial-refrigeration-controller-attacks/https://xtralinux.org/news/cisa-fbi-joint-warning-industrial-refrigeration-controller-attacks/A joint US government fact sheet says threat actors are exploiting unpatched or internet-exposed refrigeration and cold chain controllers to alter temperatures and spoil inventory — with concrete hardening steps.Mon, 09 Nov 2026 23:10:00 GMTnewssecuritycisaicsoperational-technologyhttps://xtralinux.org/news/apt-cve-2026-109518-on-path-package-rce/https://xtralinux.org/news/apt-cve-2026-109518-on-path-package-rce/A high-severity APT flaw (CVE-2026-109518, CVSS 7.7) lets an on-path attacker swap verified packages and run code as root on Debian 12+ and Ubuntu 22.04+ defaults. Fixed builds are out for all supported Ubuntu releases.Mon, 09 Nov 2026 23:08:00 GMTnewssecurityaptdebianubuntucvehttps://xtralinux.org/news/rails-activestorage-imagemagick-ghsa-f3w6-w445-fwh9/https://xtralinux.org/news/rails-activestorage-imagemagick-ghsa-f3w6-w445-fwh9/A 9.8 flaw in Rails Active Storage lets unauthenticated uploads drive ImageMagick to write — and read — files outside the image; fixed in 8.1.4.1 and 8.0.5.2 alongside an 8.8 sibling; default Debian/Ubuntu policies do not stop it.Mon, 09 Nov 2026 23:08:00 GMTnewssecurityruby-on-railsimagemagickhttps://xtralinux.org/news/lnbits-tells-operators-stop-servers-amid-active-exploit-waves/https://xtralinux.org/news/lnbits-tells-operators-stop-servers-amid-active-exploit-waves/Citing a wave of attacks and unreleased security patches, the LNbits project told all operators to shut down their open-source Bitcoin Lightning wallet servers now; one operator reported funds drained hours before the warning.Mon, 09 Nov 2026 23:06:00 GMTnewssecuritybitcoinlightning-networkself-hostinghttps://xtralinux.org/news/openssh-sshole-password-bypass-alpine/https://xtralinux.org/news/openssh-sshole-password-bypass-alpine/OpenSSH flaw CVE-2026-123158 ("SSHole") lets an oversized password log into passwordless accounts on musl-based systems like Alpine. Exploitation began within hours of disclosure; update to 10.6p2 and restart sshd.Mon, 09 Nov 2026 23:05:00 GMTnewssecurityopensshsshalpine-linuxcvehttps://xtralinux.org/news/wordpress-cve-2026-119977-update-race-rce/https://xtralinux.org/news/wordpress-cve-2026-119977-update-race-rce/CVE-2026-119977 — a WordPress updater race now on CISA KEV — is fixed in 7.1.4 and branch backports to 4.7.39; the fixing update itself unpacks with old code, so block wp-content/upgrade access before patching.Mon, 09 Nov 2026 22:59:00 GMTnewssecuritywordpresscvercecisahttps://xtralinux.org/news/sonicwall-sonicos-cve-2026-19868-kev/https://xtralinux.org/news/sonicwall-sonicos-cve-2026-19868-kev/SonicWall patched CVE-2026-19868 — an SSL-VPN flaw where an alternate authentication method slips past SAML and MFA; CISA added it to KEV on evidence of active exploitation.Mon, 09 Nov 2026 22:58:00 GMTnewssecuritycvesonicwallvpnmfacisahttps://xtralinux.org/news/ethersphere-bee-js-swarm-desktop-compromised-releases/https://xtralinux.org/news/ethersphere-bee-js-swarm-desktop-compromised-releases/A supply-chain attack hit Ethersphere’s own release pipeline: malicious bee-js 13.3.0 on npm and Swarm Desktop 0.56.2 carry a loader that steals Swarm node wallet keys and installs persistence on Linux, macOS and Windows.Mon, 09 Nov 2026 22:55:00 GMTnewssecuritysupply-chainnpmmalwarecryptocurrencyhttps://xtralinux.org/news/binance-breach-largest-crypto-theft-on-record/https://xtralinux.org/news/binance-breach-largest-crypto-theft-on-record/Attackers made off with roughly $6.3 billion in a breach Binance says started with fake job interviews and call-related malware aimed at the exchange's own engineers — the largest crypto theft to date.Mon, 09 Nov 2026 20:55:00 GMTnewssecuritycryptosupply chainhttps://xtralinux.org/news/php2shell-critical-rce-vulnerabilities-in-php-core/https://xtralinux.org/news/php2shell-critical-rce-vulnerabilities-in-php-core/The PHP Group patched two critical core flaws (CVE-2026-109618, CVE-2026-109619, rated 9.2) that allow unauthenticated remote code execution; exploitation in the wild is confirmed and CISA urges immediate patching.Mon, 09 Nov 2026 20:40:00 GMTnewssecurityphprcecvehttps://xtralinux.org/news/canonical-releases-ubuntu-24-04-noble-numbat/https://xtralinux.org/news/canonical-releases-ubuntu-24-04-noble-numbat/Canonical has announced the release of Ubuntu 24.04 LTS, codenamed Noble Numbat, available to download and install from ubuntu.com.Sat, 27 Apr 2024 16:44:55 GMTnewslinuxubuntuhttps://xtralinux.org/news/critical-crypto-bug-fixed-in-putty/https://xtralinux.org/news/critical-crypto-bug-fixed-in-putty/Many versions of the PuTTY client have a subtle vulnerability that can allow an attacker to compromise some private keys and then forge signatures to log into remote servers.Sat, 27 Apr 2024 16:25:21 GMTnewssecuritymicrosoftsshhttps://xtralinux.org/news/new-technique-to-trick-developers-detected-in-an-open-source-supply-chain-attack/https://xtralinux.org/news/new-technique-to-trick-developers-detected-in-an-open-source-supply-chain-attack/Cybercriminals were discovered cleverly manipulating GitHub's search functionality and using meticulously crafted repositories to distribute malware.Mon, 15 Apr 2024 18:40:24 GMTnewssecuritysecurity newsopen sourcesupply chainhttps://xtralinux.org/news/ubuntu-24-10-and-debian-13-trixie-to-feature-new-cli/https://xtralinux.org/news/ubuntu-24-10-and-debian-13-trixie-to-feature-new-cli/The APT 3.0 package manager is getting a completely revamped UI with columnar display, support for colors, and much more.Sun, 14 Apr 2024 15:02:02 GMTnewslinuxubuntudebianhttps://xtralinux.org/docs/how-to-harden-openssh-on-ubuntu-2004/https://xtralinux.org/docs/how-to-harden-openssh-on-ubuntu-2004/A tutorial on enhancing the security of your OpenSSH server on Ubuntu 20.04 through various hardening configurations, since SSH serves as the primary entry point into the system.Thu, 11 Apr 2024 20:52:42 GMTdocumentationlinuxhttps://xtralinux.org/news/cve-2024-3094-critical-rce-vulnerability-xz-utils/https://xtralinux.org/news/cve-2024-3094-critical-rce-vulnerability-xz-utils/A critical supply chain compromise has been detected in XZ Utils versions 5.6.0 and 5.6.1, which may lead to remote code execution (RCE) via SSH authentication on affected distributions.Thu, 11 Apr 2024 20:36:07 GMTnewssecuritysecurity newscvelinuxhttps://xtralinux.org/news/vulnerability-management-beyond-patching/https://xtralinux.org/news/vulnerability-management-beyond-patching/An article explores the evolving landscape of vulnerability management, delving deeper than mere patching — from NIST framework core functions to PCI DSS and ISO 27001/27002 compliance changes and the role of Zero Trust.Thu, 11 Apr 2024 20:24:25 GMTnewssecuritysecurity newshttps://xtralinux.org/posts/01-at-last/https://xtralinux.org/posts/01-at-last/Took a very long time to get back xtralinux.org, but we got it at last.Wed, 03 Apr 2024 08:01:56 GMTmisc