Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2025-0069: python-cryptography & openssl Security Advisory Updates
Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. (CVE-2023-49083) Python-cryptography: bleichenbacher timing oracle attack against …
Mageia 2025-0068: microcode Security Advisory Updates
Improper Finite State Machines (FSMs) in Hardware Logic for some Intel® Processors may allow privileged user to potentially enable denial of service via local …
SUSE: 2025:0564-1 important: the Linux Kernel Security Advisory Updates
* bsc#1215199 * bsc#1222803 * bsc#1224049 * bsc#1226980 * bsc#1227937
SUSE: 2025:0565-1 important: the Linux Kernel Security Advisory Updates
* bsc#1221282 * bsc#1222072 * bsc#1222803 * bsc#1224856 * bsc#1224857
Oracle7: ELSA-2025-20100: kernel Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-1443: nodejs:20 Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
SUSE: 2025:0561-1 important: openvswitch Security Advisory Updates
* bsc#1236353 Cross-References: * CVE-2025-0650
SUSE: 2025:0562-1 low: glibc Security Advisory Updates
* bsc#1236282 Cross-References: * CVE-2025-0395
Debian LTS: DLA-4056-1: golang-glog Security Advisory Updates
The following vulnerability has been discovered in the glog package for Go: When logs are written to a widely-writable directory (the default), an unprivileged…
Fedora 40: chromium 2025-a87a6cd2a7 Security Advisory Updates
Update to 133.0.6943.98 CVE-2025-0995: Use after free in V8 CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0997: Use after free in Navigati…
Fedora 41: microcode_ctl 2025-c99f9d789a Security Advisory Updates
Update to upstream 2.1-48. 20250211 Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at revision 0x38; Addition of 06-bf-07/0x07 microcode (in int…
Fedora 41: chromium 2025-d83e49a948 Security Advisory Updates
Update to 133.0.6943.98 CVE-2025-0995: Use after free in V8 CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0997: Use after free in Navigati…
Debian LTS: DLA-4055-1: trafficserver Security Advisory Updates
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2024-38479
Debian LTS: DLA-4054-1: tryton-client Security Advisory Updates
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
Debian LTS: DLA-4053-1: freerdp2 Security Advisory Updates
Multiple vulnerabilties have been found in freelrdp2, a free implementation of the Remote Desktop Protocol (RDP). The vulnerabilties potentially allows authent…
Fedora 41: webkitgtk 2025-3e8ed13bf0 Security Advisory Updates
Update to WebKitGTK 2.46.6: Fix a crash when enabling Skia CPU rendering. Fix several crashes and rendering issues. Fix CVE-2024-54543, CVE-2025-24143, CVE-202…
Fedora 41: libheif 2025-8fdb7be3cb Security Advisory Updates
Latest upstream release. It adds support for tiles and fixes reading images generated by iOS 18+. See https://github.com/strukturag/libheif/releases for more d…
Mageia 2025-0067: ffmpeg Security Advisory Updates
A buffer overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in th…
Mageia 2025-0065: golang Security Advisory Updates
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec. (CVE-2025-22866) References: - https://bugs.mageia.org/show_bug.cgi?id=34009
Mageia 2025-0064: postgresql15 & postgresql13 Security Advisory Updates
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation. (CVE-2025-1094) References: - https://bugs.mageia.org/show_bug…
Oracle9: ELSA-2025-1346: gcc Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-1309: gcc-toolset-13-gcc Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2025-1372: container-tools:ol8 Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2025-1351: nodejs:20 Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: