Late Night Linux – Episode 410

Lots of security news including PHP, comically weak SSL cert keys, and accidental Linux kernel CVE disclosure. Plus Canonical is ramping up development of its immutable version of the Ubuntu desktop, and it (hopefully) won’t just be GNOME.

News

Today’s PHP Security Release, and How We’re Strengthening PHP Security (thephp.foundation/blog/2026/10/21/todays-php-s…)

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot (aws.amazon.com/blogs/security/amazon-threat-in…)

The Internet goes on high alert after discovery of 8 compromised TLS certs (arstechnica.com/security/2026/10/the-internet-…)

eMudhra to Exit global SSL/TLS Certificate Business (emudhra.com/en/press-release/emudhra-to-exit-g…)

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List (phoronix.com/news/LKML-New-Trend-Vulnerabilities)

A kernel bug for last weekend while we are at it (atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp…)

Accelerating Ubuntu Core Desktop (discourse.ubuntu.com/t/accelerating-ubuntu-cor…)

Support us on patreon and get an ad-free RSS feed with some early episodes (patreon.com/LateNightLinux)

See our contact page (latenightlinux.com/contact) for ways to get in touch.

RSS: Subscribe to the RSS feeds here (latenightlinux.com/feeds)