SUSE has released a significant kernel update for SUSE Linux Enterprise 15 SP5, addressing 110 vulnerabilities, marking it as the largest patch of the day. Critical updates were issued for the idm:DL1 identity-management module on RHEL 8 and Rocky Linux 8, while Oracle's critical patch focused on 389-ds-base for Oracle Linux 7. Debian targeted browser vulnerabilities, closing 59 CVEs in firefox-esr and 37 in Chromium, while also addressing issues in MariaDB and GStreamer plugins. Ubuntu issued three updates, notably an Azure kernel patch for 16.04 LTS that requires a reboot, and additional updates for Go and RabbitMQ across various versions

Antivirus Live CD has released version 53.0-1.5.4, which features a rebuilt 4MLinux base and includes ClamAV 1.5.4, addressing eight security vulnerabilities in common file parsers. This open-source rescue tool operates without an operating system, supports both Windows and Linux partitions, and is designed to scan infected machines effectively. The latest version is lightweight, requiring only about 1 GB of RAM, and is aimed at users needing a reliable rescue tool rather than a full antivirus suite. The project remains free under GPLv3, with a stable release expected in November 2026, and is available for download on SourceForge and the 4MLinux site

Ashampoo AntiSpy Pro 1.9.0 has been released, offering users enhanced privacy protection for their Windows machines. This software provides tools to block tracking attempts and eliminate telemetry data gathering, ensuring a more secure operating environment. With Ashampoo AntiSpy Pro, users can control which applications gather their data, disable unwanted features, and apply privacy settings for each Windows login.

This week, seven Linux distributions released security updates, with SUSE leading the pack with a Critical patch for WebKit2GTK3 that included 233 CVEs. Following SUSE, Debian and Ubuntu also deployed updates, with Debian's Firefox ESR patch addressing 59 CVEs and Ubuntu's curl and Bind updates addressing numerous vulnerabilities, including serious issues like remote code execution. Fedora focused on Exim, which received critical fixes related to arbitrary code execution and SMTP smuggling, while Red Hat, AlmaLinux, and Rocky Linux issued various kernel and package updates, emphasizing the importance of addressing remote-facing vulnerabilities promptly. Notably, Slackware issued a simpler update for libarchive, while practical advice across distributions highlighted prioritizing patches based on the nature of the vulnerabilities rather than solely on their severity ratings

In a recent Linux security roundup, Ubuntu disclosed approximately 1,050 CVEs across its kernels, with particular emphasis on the critical CVE-2023-20585 vulnerability affecting AMD SEV-SNP technology, allowing local hypervisor attackers to corrupt confidential guest memory. Fedora also made headlines by bundling 247 security fixes in its Chromium 155 update, alongside other updates for Firefox and curl. Other distributions like AlmaLinux, Debian, and Red Hat released important fixes as well, focusing on vulnerabilities in packages like pcre2, Dovecot, and php8, indicating a widespread need for patching across various systems. Admins are advised to prioritize addressing remote code execution vulnerabilities and ensure proper updates and reboots following these patches to enhance system security

Microsoft's October 2026 Patch Tuesday marks the company's largest security release to date, addressing approximately 1,413 CVEs across 176 updates, including critical vulnerabilities like CVE-2026-96951, a Windows Shell security feature bypass currently being exploited. Alongside this, there is a .NET Framework bypass (CVE-2026-108398) and a republished third-party image RCE (CVE-2026-21413) that warrant attention. To manage the extensive volume of updates, Microsoft has introduced "risk cohorts," which provide a new filtering tool for assessing vulnerabilities based on specific environment questions. Users are advised to prioritize patching the Windows Shell flaw and the .NET Framework bypass while utilizing the cohorts for efficient deployment across their systems

AVG AntiVirus Free Edition 26.10.11201 has been released, offering a robust tool for protecting PCs against a wide array of viruses and malware. While Windows users benefit from basic protection through Microsoft Defender, AVG AntiVirus Free serves as a compelling alternative that enhances security without compromising system performance.

AVG Clear (Remover) version 26.10.11201 has been released, offering a robust solution for completely uninstalling AVG software. This tool erases all components of your AVG installation, including registry entries, installation files, user files, and more. It is particularly useful as a last resort when users encounter issues removing AVG, such as failed repairs or reinstallations.

Debian's recent security update for Chromium has introduced approximately 258 CVEs, marking a particularly active week for Linux security patches, while other updates are primarily routine. The cjose JOSE library has been flagged as Critical across four distributions due to a serious encryption flaw, making it a top priority for administrators to address. Red Hat shipped 48 advisories across its RHEL versions, with significant updates also coming from AlmaLinux, Oracle, Rocky, SUSE, Fedora, and Ubuntu, although most vulnerabilities are rated as Important or Moderate, with only a few categorized as Critical. Administrators are advised to focus on critical patches like cjose, followed by kernel and OpenSSH updates, and to ensure they are using the correct package management commands for their respective distributions to apply these updates effectively

This morning, multiple Linux distributions released security updates, with a significant focus on Python, which received numerous patches across Fedora and SUSE. Fedora issued updates for Python interpreters, addressing a recurring CVE related to a use-after-free vulnerability in SSLContext, while SUSE's updates targeted various Python packages, some of which had vulnerabilities dating back over a decade. Other distributions like Debian addressed security flaws in Tor and vips, with Tor shipping updates without an assigned CVE, and Red Hat rolled out ten advisories for critical software. Users are encouraged to apply these updates promptly, with detailed instructions provided for each distribution's package management system

Nine major Linux distributions have released security updates, with significant kernel patches addressing over 1,100 CVEs in Oracle's Unbreakable Enterprise kernel and around 950 in Ubuntu's NVIDIA kernel. Notable recurring vulnerabilities include a Python certificate verification bypass and an OpenSSL DTLS stale-buffer fix, among others. Critical patches also include two updates from SUSE that fix 246 vulnerabilities in Chromium and a significant buffer overflow in fetchmail that could allow remote code execution. Users are advised to perform their usual updates and reboot their systems to ensure the new kernel patches take effect, as they remain unpatched until a restart occurs

Fort Firewall has released version 3.20.3 to address a traffic-counting regression from the previous version 3.20.0, which caused traffic statistics to display blank due to registration failures of new inspection filters. The update also includes a portable-mode prompt for removing the service upon quitting, fulfilling a user request from March 2025. The changelog features several interface and usability improvements, but the primary focus remains on restoring traffic counting functionality. This rapid patching reflects Fort's fast-paced development, transitioning from infrequent releases to four updates within a single week

Mutt has released version 2.4.3, which includes two important security fixes, one of which addresses a heap overflow vulnerability (CVE-2026-107570) that could potentially allow arbitrary code execution through the charset converter. The second fix corrects a bug in the cryptographic indicators that could falsely show a message as signed when it was not, misleading users regarding the authenticity of their messages. The update is a result of collaboration between security researchers from Calif.io and the maintainer, Kevin J. McCarthy, highlighting the increasing role of AI in identifying vulnerabilities in open-source software. Users can obtain the new version from the Mutt website or expect it to appear in upcoming package updates from their distributions

Eight major Linux vendors have released a significant number of security updates, with Red Hat leading the way by issuing 48 errata, including a Critical rating for its Directory Server module. The updates predominantly focus on kernel vulnerabilities, with SUSE reporting 153 CVEs and Oracle’s UEK kernels also addressing several hundred issues. Noteworthy updates include Fedora's Xwayland addressing 12 CVEs, Ubuntu's Erlang patch for 30 vulnerabilities, and various fixes across other distributions like AlmaLinux, Debian, and Rocky Linux. Users are advised to prioritize these updates, particularly the kernel and critical security patches, and to ensure they reboot their systems after applying necessary updates

Ubuntu released a significant kernel livepatch that addresses 150 CVEs without requiring a reboot, making it a notable highlight in the latest Linux security updates. Other distributions, such as SUSE and Red Hat, also issued patches, with SUSE providing two Chromium builds and Red Hat focusing on JBoss Web Server and kernel updates. Debian's latest advisories included critical vulnerabilities in Python 3.11, while Fedora and Oracle Linux released routine patches, including updates for Firefox and various libraries. Overall, while many updates are routine, the Ubuntu kernel patch and the browser updates from SUSE warrant immediate attention for their potential security implications

Malwarebytes has released version 5.7.2.358 of its software, along with an update to version 5.27.1.4191. This comprehensive antivirus solution is designed to shield users from various threats, including malware, ransomware, exploits, and harmful websites and applications. The software is accessible to users of all levels, featuring a user-friendly interface that allows even novices to easily perform scans and remove detected threats.

The latest Linux security updates include a significant number of advisories, with Red Hat issuing 44 advisories marking its largest batch for 2026, primarily addressing important vulnerabilities. SUSE followed closely behind with a massive security sweep, fixing around 206 vulnerabilities, including 62 related to Firefox, while Ubuntu focused on kernel updates that tackle privilege escalation flaws. Debian also released notable fixes, particularly for roundcube and Rails, which addressed serious webmail and application vulnerabilities. Administrators across various distributions are advised to prioritize kernel, browser, and SSH patches based on their severity ratings to mitigate risks effectively

X.Org has released twelve security patches addressing vulnerabilities in xorg-server 21.1.25, the standalone 26.1.0 release candidate 26.0.99.903, and xwayland 24.1.14. The vulnerabilities include serious issues such as double frees, use-after-frees, and heap overflows, which can be exploited by compromised local applications to take control of the session or access sensitive information. Users on various operating systems, including Debian, Ubuntu, and Windows, are advised to update their systems promptly, particularly those operating multi-user hardware. The release highlights ongoing security improvements in the X server, reinforcing the need for regular updates to mitigate potential risks

Fort Firewall has released version 3.20.1, introducing a new Filter Simulator that clarifies the decision-making process for allowed or blocked connections, which can be accessed directly from the Connections window. This patch also enhances command-line control with new verbs and fixes a bug that preserved wildcard program paths when a regular entry was removed. The update focuses on improving automation and usability, with changes such as splitting the Statistics window into Traffic and Connections, and allowing installation or removal of the Windows Service from a non-elevated UI. Despite being a donation-funded, one-person project, Fort Firewall competes well against other firewalls with its unique features and commitment to regular updates

This week's Linux security updates include significant patches from major distributions like Debian, Fedora, RHEL, and openSUSE, with notable attention on Firefox ESR and Chromium, which report 62 and 32 CVEs respectively. Debian addressed a critical zero-day vulnerability in FreeCAD that could allow arbitrary code execution, while also updating the Linux kernel and PHP with various fixes. Fedora's updates include security patches for Chromium and Python, alongside a more extensive list of vulnerabilities across other packages. Red Hat focused on RHEL 8 with important updates for sudo and the kernel, while openSUSE highlighted the need for Firefox ESR updates due to a backlog of vulnerabilities