Stable Channel Update for Desktop

The Stable channel has been updated to 145.0.7632.75/76 for Windows/Mac and 145.0.7632.75 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept restricted...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 145 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 145.0.7632.45 Linux 145.0.7632.45/46 Windows/Mac contains a number of fixes and improvements -- a list of changes is availab...

Debian dsa-6123 : xrdp - security update

The remote Debian 12 / 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6123 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6123-1 [email protected] https://www.debian.org/security/...

web2py has an Open Redirect Vulnerability

web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an Open Redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an arbitrary website when accessing a specially crafted URL. As a result, the user may become a victim of a phishing atta...

Debian dsa-6121 : libtomcat11-embed-java - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6121 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6121-1 [email protected] https://www.debian.org/securit...

CVE-2026-23100

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

Stable Channel Update for Desktop

The Stable channel has been updated to 144.0.7559.132/.133 for Windows/Mac and 144.0.7559.132 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

[SECURITY] [DSA 6116-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6116-1 [email protected] https://www.debian.org/security/ Andres Salomon January 30, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6113-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6113-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 27, 2026 https://www.debian.org/security/faq -...

Stable Channel Update for Desktop

The Stable channel has been updated to 144.0.7559.109/.110 for Windows/Mac and 144.0.7559.109 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005077 advisory. In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name -dname.name can change on rename and the earlier...

CVE-2026-23002 lib/buildid: use __kernel_read() for sleepable context

In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemapreadfolio". For the sleepable context, convert freader to use kernelread instead of direct page cache...

Debian dsa-6104 : python-keystonemiddleware-doc - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6104 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6104-1 [email protected] https://www.debian.org/security/ Moritz...

Stable Channel Update for Desktop

The Stable channel has been updated to 144.0.7559.96/.97 for Windows/Mac and 144.0.7559.96 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

[SECURITY] [DSA 6103-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6103-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 17, 2026 https://www.debian.org/security/faq -...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003576 advisory. Jonathan Looney discovered that the TCP retransmission queue implementation in tcpfragment in the Linux kernel could be fragmented when handling certain TCP Selectiv...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002550 advisory. The archtimerregreadstable macro in arch/arm64/include/asm/archtimer.h in the Linux kernel before 4.13 allows local users to cause a denial of service infinite...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003108 advisory. In /drivers/isdn/i4l/isdnnet.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001353 advisory. The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 144 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 144.0.7559.59 Linux 144.0.7559.59/60 Windows/Mac contains a number of fixes and improvements -- a list of changes is availab...