Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE Linux: 2025:02214-1 important: tomcat security advisory
* bsc#1243815 * bsc#1244649 * bsc#1244656 Cross-References:
SUSE Security Advisory 2025:02198-1 - runc File Creation Vulnerability
* bsc#1230092 Cross-References: * CVE-2024-45310
openSUSE Security Advisory: 2025:02190-1 Moderate Redis Stack Overflow Risk
* bsc#1243804 Cross-References: * CVE-2025-27151
CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabil…
CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added two critical security flaws impacting Erlang/Open Telecom Platform (OTP) SSH a…
Fedora 42: FEDORA-2025-c04e5b95f1 Critical Security Advisory
Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969, CVE-2025-46420, CVE-2025-46421, CVE-2025-4945
SUSE 15 SP7 Security Advisory 2025:01525-1: Java DoS Threats Fixed
* bsc#1241274 * bsc#1241275 * bsc#1241276 Cross-References:
Ubuntu 24.10, 24.04 LTS Security Advisory for Twig Information Exposure
Twig could be made to expose sensitive information if it opened a specially crafted file.
SUSE Linux 15 moderate advisory: postgresql15 encoding security patch
* bsc#1242931 Cross-References: * CVE-2025-4207
Fedora 41: Security Advisory FEDORA-2025-051becf4f2 on xz 5.8.1
xz 5.8.1
Rocky Linux: RLEA-2024:1138 20 enhancement update Security Advisories Updates
nodejs:20 enhancement update
Rocky Linux: RLEA-2024:1140 18 enhancement update Security Advisories Updates
nodejs:18 enhancement update
Rocky Linux: RLEA-2024:2162 postgresql Security Advisories Updates
new module: postgresql:16
Mageia 9: 2025-0142 security advisory: kernel and modules patch
Upstream kernel version 6.6.87 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Debian 11: DLA-4143-1 Critical: glibc Buffer Overflow Security Advisory
A flaw was discovered in the implementation of the assert() function in the GNU C Library, the C standard library implementation used by Debian. When the asser…
Fedora 42: Critical Security Advisory for pgbouncer Version 1.24.1
Update to 1.24.1, fixes CVE-2025-2291.
CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a medium-severity security flaw impacting Microsoft Windows to its Known Exp…
CISA Flags Actively Exploited Vulnerability in SonicWall SMA Devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting SonicWall Secure Mobile Access (SMA) 100 Series g…
Debian LTS: DLA-4076-1: linux-6.1 Security Advisory Updates
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Debian LTS: DLA-4075-1: linux Security Advisory Updates
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Debian LTS: DLA-4074-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the Mari…
Fedora 40: chromium 2025-eeba8bf9d8 Security Advisory Updates
Update to chromium-133.0.6943.141
Fedora 40: rizin 2025-6f77f6c77a Security Advisory Updates
CVE-2023-40022 rizin: Integer Overflow in C++ demangler logic CVE-2024-31669 rizin: Uncontrolled Resource Consumption via bin_pe_parse_imports CVE-2024-31670 r…
Fedora 40: cutter-re 2025-6f77f6c77a Security Advisory Updates
CVE-2023-40022 rizin: Integer Overflow in C++ demangler logic CVE-2024-31669 rizin: Uncontrolled Resource Consumption via bin_pe_parse_imports CVE-2024-31670 r…