Security Advisory – 03 Mar 2026

New security notices published since yesterday. 03 Mar 2026 12:00 GMT.

Top items

Ubuntu

USN-8067-1: Mailman vulnerability

Mailman incorrectly handled CSRF tokens. A remote list member or moderator could possibly use their own token to craft an admin request CSRF attack and set a new admin password or make other changes.

  • Published: 02 Mar 2026 17:29 GMT
  • CVEs: Not stated in the advisory excerpt
  • Notes: incorrectly handled CSRF tokens

USN-5376-6: Git regression

USN-5376-4 fixed a regression in Git. An attacker could possibly use this issue to run arbitrary commands.

  • Published: 02 Mar 2026 16:15 GMT
  • CVEs: Not stated in the advisory excerpt
  • Notes: could possibly use this issue to run arbitrary commands

Related posts

Prometheus | v3.15.1

Prometheus v3 15 1: container images distrust emSign ECC Root CA G3 and Comodo AAA Services root, rebuilt with Go 1 27 3, x net v0 60 0, upgrade to v3 15 1

headscale | v0.29.7

Headscale v0 29 7 security release: upgrade to v0 29 7, update Tailscale to v1 104 4 or newer, disable SSH agent and port forwarding per node until update

ionCube Loader: offline PHP bytecode decryption

ionCube Loader is not magic, just a native PHP extension with a very hard boundary. Once you trace the entrypoint and the key derivation properly, the supposed mystery turns into a pile of exacting...