xtralinux.org is the XtraLinux news desk — watching security, linux and open source, and publishing as it breaks. The consulting work that funds the watch lives at xtralinux.com.
Topics
CVE-2026-119977 — a WordPress updater race now on CISA KEV — is fixed in 7.1.4 and branch backports to 4.7.39; the fixing update itself unpacks with old code, so block wp-content/upgrade access before patching.
← All topics