Loading story…
The NetBSD Project released NetBSD 10.2, a stable-branch update that consolidates bug fixes, security corrections, and functional improvements made since NetBSD 10.1. Security-relevant fixes address components including ipfilter, telnet, the TCP networking stack, OpenSSL, Unbound, and X.Org; the release also updates bundled OpenSSL to 3.0.21.
NetBSD 10.2 expands and refreshes driver support for several USB Ethernet, Wi-Fi, Realtek Ethernet, and VMware PV SCSI devices. Organizations running NetBSD 10 should evaluate and deploy the update through their normal change-management process, particularly where affected network-facing services or the bundled cryptographic and DNS components are in use; the NetBSD 10 branch is expected to remain supported until NetBSD 12.0 is released.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
The NetBSD Project released NetBSD 10.2 for the NetBSD 10 stable branch. It includes accumulated bug, security, and functional fixes since NetBSD 10.1, including fixes affecting ipfilter, telnet, TCP networking, OpenSSL, Unbound, and X.Org, and updates OpenSSL to 3.0.21.
The NetBSD Project released NetBSD 10.1, the prior release in the NetBSD 10 stable branch.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
4 references tracked. Mallory keeps watching after this page renders.
opennet.ru
Open sourceopennet.me
Open sourceblog.netbsd.org
Open sourcenetbsd.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
OpenBSD released multiple **7.9 kernel errata** addressing security and stability flaws across System V IPC, NFS, ELF execution, and IPsec/IPComp handling. The updates include **errata 004, 005, 006, and 007**, with fixes for information leaks, kernel crash conditions, locking failures, race conditions, memory leaks, double-free scenarios, and unsafe object lifetime handling. In the ELF subsystem, the patch hardens note parsing, prevents invalid loader states, improves cleanup on exec failure paths, and fixes issues involving `pinsyscall(8)` and `kbind(8)`. The SysV IPC fixes harden semaphore, message queue, and shared-memory system calls by adding semaphore reference counting, correcting structure exposure through `sysctl`, fixing wakeup and receive races, and enforcing safer bounds and allocation behavior, including `MSG_NOERROR` and `sys_shmat()` handling. Separate patches repair NFS server request parsing and vnode reference handling to prevent double-free and memory-management bugs, while IPsec/IPComp changes add stricter packet validation and bounds checks in `cryptosoft.c`, `ip_ah.c`, and `ipsec_input.c` to stop kernel crashes. OpenBSD distributed the fixes as signed patches and indicated administrators should apply them through the normal patching process, including kernel rebuilds or supported binary updates.
Jul 16, 2026
Netty released **4.1.135.Final** and **4.2.15.Final** to patch a large batch of security vulnerabilities across core networking components, with fixes spanning `netty-resolver-dns`, `netty-codec-http2`, `netty-handler`, `netty-codec-redis`, `netty-codec-haproxy`, native transports, and SCTP support. The DNS resolver fixes address multiple cache-poisoning paths, including predictable transaction IDs combined with a static UDP source port, missing bailiwick checks for **CNAME** records, and insufficient validation of **NS** records; one of those issues was later tracked as **CVE-2026-45674**. Netty also fixed a TLS flaw in which wrapping a plain `X509TrustManager` could silently disable hostname verification for clients, and an IPv6 access-control bypass in `IpSubnetFilterRule`, later assigned **CVE-2026-44249**.
Aug 20, 2026
Red Hat released **RHSA-2026:21557**, an Important security update for the Linux kernel in **Red Hat Enterprise Linux 10** and related channels, addressing **18 vulnerabilities** across subsystems including CAN J1939, IMA, memory management, netfilter, conntrack, `io_uring`, Bluetooth, HID, Wi-Fi, XFS, and `dpaa2-switch`. The advisory applies to multiple RHEL 10 variants on `x86_64`, `ARM64`, IBM z Systems, and Power little endian, including Extended Update Support and Extended Life Cycle offerings, and Red Hat said affected systems must be **rebooted** after patching for the fixes to take effect. Among the flaws covered were **CVE-2026-31684**, a network scheduler bug triggered by specially crafted packets with nested VLAN headers that can cause an out-of-bounds read and system crash, and **CVE-2026-43027**, a netfilter `nf_conntrack_helper` cleanup flaw that can lead to a use-after-free condition, enabling denial of service and potentially privilege escalation. Red Hat rated both issues **moderate severity** with CVSS v3 scores of **7.1**, and said fixes were issued across multiple RHEL kernel package streams, including RHEL 7, 8, and 10 for the VLAN-related flaw and additional errata for the conntrack issue.
Aug 25, 2026