Collected every two hours from specialised publications — each link leads to the original article.
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1237091 Cross-References: * CVE-2025-1244
* bsc#1229163 * bsc#1229164 * bsc#1233606 * bsc#1233608 * bsc#1233609
* bsc#1233606 * bsc#1233608 * bsc#1233609 * bsc#1233610 * bsc#1233612
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Palo Alto Networks PAN-OS and SonicWall SonicOS …
Automatic update for bootc-1.1.5-1.fc41. Changelog for bootc * Mon Feb 10 2025 Packit - 1.1.5-1 - Update to 1.1.5 upstream release
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
OpenSSH could be made to bypass the server identity check.
Libtasn1 could be made to crash if it received specially crafted network traffic.
Atril could be made to crash or run programs as your login if it opened a specially crafted file.
* bsc#1237040 * bsc#1237041 Cross-References: * CVE-2025-26465
An update that solves 58 vulnerabilities and has 33 fixes is now available.
* bsc#1230697 * bsc#1231847 * bsc#1233112 * bsc#1233642 * bsc#1234025
* bsc#1194869 * bsc#1216813 * bsc#1223384 * bsc#1225736 * bsc#1226848
* bsc#1236353 Cross-References: * CVE-2025-0650
* bsc#1237091 Cross-References: * CVE-2025-1244
A vulnerability was discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow to by…
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enab…
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enab…
* bsc#1237096 Cross-References: * CVE-2024-31068 * CVE-2024-36293
Bing Shi reported a flaw in GnuTLS, a library implementing the TLS and SSL protocols. Inefficient processing of certificates containing numerous names or name …