GNU C Library fixes security issue from 1996

The GNU C Library has addressed a long-standing security vulnerability that dates back to 1996. This fix, identified as CVE-2026-0915, patches a flaw present in the library since its early versions. The update aims to enhance security for systems relying on this fundamental component of Linux distributions.

The GNU C Library, commonly known as glibc, serves as a core component for many Linux-based systems, handling essential functions like memory management and system calls. On a recent update, developers released a patch for CVE-2026-0915, a security issue that has lingered since 1996.

This vulnerability was embedded in the library from its inception nearly three decades ago, potentially exposing systems to risks over the years. The fix comes as part of ongoing efforts to secure open-source software foundations. While specific details on the exploit's nature remain limited in initial reports, the correction underscores the importance of maintaining legacy code in modern computing environments.

Linux distributions and developers are encouraged to apply the update promptly to mitigate any potential threats. This event highlights the challenges of securing software with deep historical roots, where even ancient bugs can resurface in contemporary use cases. No immediate widespread exploits have been reported, but the proactive patch reinforces the robustness of the open-source ecosystem.

Labaran da ke da alaƙa

Illustration of a Linux computer screen highlighting Amazon WorkSpaces vulnerability CVE-2025-12779, with security alert and hacker elements, for a news article on AWS security flaw.
Hoton da AI ya samar

Amazon discloses Linux WorkSpaces vulnerability in authentication tokens

An Ruwaito ta hanyar AI Hoton da AI ya samar

Amazon Web Services has revealed a security flaw in its WorkSpaces client for Linux that allows local attackers to extract authentication tokens and access other users' virtual desktops. The vulnerability, CVE-2025-12779, affects client versions from 2023.0 to 2024.8 and carries a CVSS score of 8.8. AWS urges immediate upgrades to version 2025.0 or later to mitigate the risk.

The GNU Project has released version 2.43 of the GNU C Library, known as glibc, six months after the previous update. This version advances compliance with the ISO C23 standard and includes security fixes, performance improvements, and new platform support. It introduces several new memory functions and optimizations for various architectures.

An Ruwaito ta hanyar AI

A security researcher has found that bugs in the Linux kernel often remain undetected for more than two years on average, with some persisting for over two decades. By analyzing 20 years of kernel development, Jenny Guanni Qu uncovered how these flaws quietly affect cloud systems, enterprises, and billions of devices. Her work highlights the challenges of maintaining secure open-source software.

At the NDSS 2025 conference, Hengkai Ye and Hong Hu from The Pennsylvania State University presented a paper on subtle vulnerabilities in Linux systems that reintroduce executable stacks. Their work highlights how developers, including security experts, accidentally disable protections against code injection attacks. The study examines tools and system components to reveal gaps in enforcing write-xor-execute policies.

An Ruwaito ta hanyar AI

Following the initial report of the first vulnerability in Linux kernel Rust code, deeper analysis of CVE-2025-68260 in the Rust-based Binder module reveals a race condition in data list handling that causes memory corruption and system crashes. Detailed patches are available in kernel 6.18.1 and 6.19-rc1.

Following the recent approval of Rust as a permanent kernel language at the 2025 Kernel Maintainers Summit, new details emerge on performance benchmarks, ongoing challenges, and distribution rollouts, solidifying its role in addressing security vulnerabilities.

An Ruwaito ta hanyar AI

Canonical's Ubuntu distribution has advanced significantly in 2025, incorporating the Rust programming language to bolster security and reliability across its core components. These updates, featured in releases like Ubuntu 25.10 Questing Quokka, also optimize hardware support for AI and diverse architectures. As the project eyes its next long-term support version, these changes position Ubuntu as a robust choice for developers and enterprises.

 

 

 

Wannan shafin yana amfani da cookies

Muna amfani da cookies don nazari don inganta shafin mu. Karanta manufar sirri mu don ƙarin bayani.
Ƙi