Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: stalld 2025-e717eae403 Security Advisory Updates
Add code to deal with sched_setattr() not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack
Fedora 40: golang-github-nvidia-container-toolkit 2025-76012a9a99 Security Advisory Updates
Update to 1.17.3 Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999 Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA- vcfp-63cx-4h59, and CVE-2024-013…
Fedora 40: rust-routinator 2025-46db4ee37e Security Advisory Updates
New ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. (#990) If merging mutliple ASPA object…
Fedora 41: python3-docs 2025-e911f71d99 Security Advisory Updates
Update to 3.13.2 Statically build the _datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while runn…
Debian LTS: DLA-4046-1: ark Security Advisory Updates
A flaw was discovered in ark, an archive utility for the KDE platform. Ark extracted archives with absolute paths to the corresponding location on the user's f…
Debian: DSA-5860-1: linux Security Advisory Updates
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Fedora 40: firefox 2025-2e627d0672 Security Advisory Updates
Updated to latest upstream (135.0)
Fedora 40: jpegxl 2025-35a8167b88 Security Advisory Updates
Update to 0.8.4
Mageia 2025-0043: libtasn1 Security Advisory Updates
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time …
Fedora 41: rustup 2025-f8be7978e3 Security Advisory Updates
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
Fedora 41: s390utils 2025-f8be7978e3 Security Advisory Updates
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
SUSE: 2025:0386-1 moderate: python39 Security Advisory Updates
* bsc#1236705 Cross-References: * CVE-2025-0938
SUSE: 2025:0387-1 moderate: openssl-3 Security Advisory Updates
* bsc#1236136 Cross-References: * CVE-2024-13176
SUSE: 2025:0384-1 important: bind Security Advisory Updates
* bsc#1236596 Cross-References: * CVE-2024-11187
openSUSE: 2025:0056-1 moderate: trivy Advisory Security Update
An update that fixes 8 vulnerabilities is now available.
CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
CISA Warns of Active Exploits Targeting Trimble Cityworks Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
Fedora 40: FlightGear 2025-725bba93b2 Security Advisory Updates
Fix CVE-2025-0781
SUSE: 2025:0382-1 important: podman Security Advisory Updates
* bsc#1236270 Cross-References: * CVE-2024-11218
Debian LTS: DLA-4043-1: openjdk-17 Security Advisory Updates
A vulnerability has been discovered in the OpenJDK Java runtime, which may result in authorisation bypass or information disclosure. For Debian 11 bullseye, th…
Fedora 41: firefox 2025-13bbd34b51 Security Advisory Updates
Updated to latest upstream (135.0)
Fedora 40: SimGear 2025-725bba93b2 Security Advisory Updates
Fix CVE-2025-0781
Fedora 40: java-latest-openjdk 2025-d2f32b0607 Security Advisory Updates
January CPU 2025
Fedora 40: java-1.8.0-openjdk 2025-935f8882e4 Security Advisory Updates
January CPU 2025