Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis...

openSUSE 16 Security Update : afterburn (openSUSE-SU-2026:21386-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21386-1 advisory. Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow shor...

OPENSUSE-SU-2026:11367-1 libnutclient2-2.8.5-2.1 on GA media

These are all security issues fixed in the libnutclient2-2.8.5-2.1 package on the GA media of openSUSE Tumbleweed...

Security update for PackageKit (moderate)

openSUSE security update: security update for packagekit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21425-1 Rating: moderate References: bsc1263252 bsc1267250 Cross-References: CVE-2026-10294 CVSS scores: CVE-2026-10294 SUSE : 4.3...

OPENSUSE-SU-2026:11370-1 python-magic-wormhole-bash-completion-0.24.0-1.1 on GA media

These are all security issues fixed in the python-magic-wormhole-bash-completion-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11371-1 python313-numpy-2.4.6-1.1 on GA media

These are all security issues fixed in the python313-numpy-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:45192 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: dm log: fix out-of-bounds write due to regioncount overflow CVE-2026-53059 kernel: drm/xe: Fix...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: dm log: fix out-of-bounds write due to regioncount overflow CVE-2026-53059 kernel: drm/xe: Fix...

OPENSUSE-SU-2026:11363-1 java-25-openjdk-25.0.4.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11372-1 python313-sh-2.3.0-1.1 on GA media

These are all security issues fixed in the python313-sh-2.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11368-1 openjfx-17.0.20.0-1.1 on GA media

These are all security issues fixed in the openjfx-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for glib2 (important)

openSUSE security update: security update for glib2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21410-1 Rating: important References: bsc1270008 bsc1270009 bsc1270010 bsc1270016 bsc1270018 bsc1270021 Cross-References: CVE-2026-58010 CVE-2026-580...

OPENSUSE-SU-2026:11361-1 ffmpeg-7-7.1.4-5.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.4-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11360-1 ffmpeg-4-4.4.8-2.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.8-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21388-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21388-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263:...

Security update for perl (important)

openSUSE security update: security update for perl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21411-1 Rating: important References: bsc1266304 bsc1266361 bsc1268349 bsc1271372 bsc1271386 Cross-References: CVE-2025-15649 CVE-2026-12087...

Fedora 43 : dotnet8.0 (2026-da44c3870f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-da44c3870f advisory. Update to .NET SDK 8.0.129 and Runtime 8.0.29 Fixes:...

OPENSUSE-SU-2026:11364-1 libknet-devel-1.33-2.1 on GA media

These are all security issues fixed in the libknet-devel-1.33-2.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 10 : podman (ELSA-2026-37072)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37072 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.13.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...