Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: rpm-ostree 2025-3dfc505946 Security Advisory Updates
Merge branch 'f42' into f41 Merge branch 'rawhide' into f41 Fix merge conflict
Debian: DSA-5870-1: openh264 Security Advisory Updates
A heap-based buffer overflow flaw in the decoding functions of openh264, a codec library which supports H.264 encoding and decoding, may allow a remote attacke…
Mageia 2025-0081: proftpd Security Advisory Updates
A buffer overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a denial of service (DoS) on the FT…
Mageia 2025-0080: openssh Security Advisory Updates
Machine-in-the-middle attack vulnerability if verifyhostkeydns is enabled. (CVE-2025-26465) References: - https://bugs.mageia.org/show_bug.cgi?id=34036
SUSE: 2025:0722-1 moderate: vim Security Advisory Updates
* bsc#1229685 * bsc#1229822 * bsc#1230078 * bsc#1235695 * bsc#1236151
SUSE: 2025:0723-1 moderate: vim Security Advisory Updates
* bsc#1229685 * bsc#1229822 * bsc#1230078 * bsc#1235695 * bsc#1236151
SUSE: 2025:0719-1 moderate: Recommended Maven Security Advisory Updates
Cross-References: * CVE-2020-13936 CVSS scores:
Mageia 2025-0079: kernel, kmod-virtualbox & kmod-xtables-addons Security Advisory Updates
Upstream kernel version 6.6.79 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Mageia 2025-0078: kernel-linus Security Advisory Updates
Vanilla upstream kernel version 6.6.79 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mage…
Mageia 2025-0077: iniparser Security Advisory Updates
A heap-based buffer overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows an attacker to read out-of-bounds memory. (CVE-2025-0633) Referen…
Fedora 40: gnutls 2025-5e5783f0d1 Security Advisory Updates
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.
Fedora 40: libtasn1 2025-a5edb54660 Security Advisory Updates
Includes CVE fixes.
Fedora 40: openssl 2025-becf280371 Security Advisory Updates
Rebase to 3.2.4
SUSE: 2025:0713-1 important: the Linux Kernel Security Advisory Updates
* bsc#1236783 Cross-References: * CVE-2024-53104
Mageia 2025-0075: emacs Security Advisory Updates
A command injection flaw was found which could allow a remote, unauthenticated attacker to execute arbitrary shell commands by tricking users into visiting a s…
Mageia 2025-0074: vim Security Advisory Updates
A heap use-after-free was found in str_to_reg() in Vim
Mageia 2025-0072: krb5 Security Advisory Updates
Overflow when calculating ulog block size. (CVE-2025-24528) References: - https://bugs.mageia.org/show_bug.cgi?id=34040 - https://lists.fedoraproject.org/archi…
Ubuntu 7296-1: Linux kernel Security Advisory Updates
The system could be made to crash or run programs as an administrator.
SUSE: 2025:0712-1 moderate: pam_pkcs11 Security Advisory Updates
* bsc#1237058 * bsc#1237062 Cross-References: * CVE-2025-24031
SUSE: 2025:0709-1 important: the Linux Kernel Security Advisory Updates
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
Debian LTS: DLA-4068-1: php-nesbot-carbon Security Advisory Updates
Arbitrary file include in Carbon::setLocale has been fixed in Carbon, a PHP API extension for DateTime. For Debian 11 bullseye, this problem has been fixed in …
Debian LTS: DLA-4067-1: nodejs Security Advisory Updates
Node.js a JavaScript runtime environment was affected by a vulnerability. A memory leak could occur when a remote peer abruptly closes the socket without sendi…
SUSE: 2025:0708-1 important: the Linux Kernel Security Advisory Updates
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
SUSE: 2025:0707-1 important: the Linux Kernel Security Advisory Updates
* bsc#1236783 Cross-References: * CVE-2024-53104