Articles about web development, AI, and technology

Debian published DSA-6607-1 for apt, covering CVE-2026-109518. A man-in-the-middle attacker could replace a verified package after an HTTP redirect and run code as root. The stable trixie release is fixed in apt 3.0.4.

A developer says Postman desktop app version 12.33.4 installed plugins into Claude Code and OpenAI Codex on macOS without explicit permission, approved a Codex startup hook, and prompted security concerns.

OpenAI quadrupled bug bounty payouts and is preparing a security sprint. Critical flaws in ChatGPT or Codex can earn up to $30,000, with exceptional findings reaching roughly $172,000 including bonuses.

Fixed kernels for CVE-2026-98432 are available for RHEL 8, 9 and 10, while Ubuntu fixes for 22.04, 24.04 and 26.04 LTS remain in -proposed testing. The flaw allows remote, unauthenticated code execution.