Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: ovn 2025-721a8bada2 Security Advisory Updates
Update the OVN sources to upstream release v24.09.2
Mageia 2025-0035: libreoffice Security Advisory Updates
Path traversal leading to arbitrary .ttf file write. (CVE-2024-12425) URL fetching can be used to exfiltrate arbitrary INI file values and environment variable…
SUSE: 2025:0345-1 moderate: openssl-1_1 Security Advisory Updates
* bsc#1236136 Cross-References: * CVE-2024-13176
SUSE: 2025:0346-1 moderate: ignition Security Advisory Updates
* bsc#1236518 Cross-References: * CVE-2023-45288
SUSE: 2025:0348-1 important: libxml2 Security Advisory Updates
* bsc#1236460 Cross-References: * CVE-2022-49043
Fedora 41: chromium 2025-2525ddc3f2 Security Advisory Updates
Updated to 132.0.6834.159 * Medium CVE-2025-0762: Use after free in DevTools
Fedora 41: yq 2025-cd51e0177b Security Advisory Updates
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
Fedora 41: fastd 2025-b895b18cfe Security Advisory Updates
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Fedora 41: ovn 2025-46e6440101 Security Advisory Updates
Update the OVN sources to upstream release v24.09.2
Mageia 2025-0034: libxml2 Security Advisory Updates
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. (CVE-2022-49043) References: - https://bugs.mageia.org/show_bug.cgi?id=33975
openSUSE: 2025:0052-1 moderate: python-asteval Advisory Security Update
An update that fixes one vulnerability is now available.
SUSE: 2025:0340-1 moderate: rsync Security Advisory Updates
* bsc#1233760 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE: 2025:0341-1 important: libxml2 Security Advisory Updates
* bsc#1236460 Cross-References: * CVE-2022-49043
Mageia 2025-0033: redis Security Advisory Updates
Redis' Lua library commands may lead to remote code execution. (CVE-2024-46981) Redis allows denial-of-service due to malformed ACL selectors. (CVE-2024-51741)
Debian: DSA-5857-1: openjdk-17 Security Advisory Updates
A vulnerability has been discovered in the OpenJDK Java runtime, which may result in authorisation bypass or information disclosure. For the stable distributio…
Oracle7: ELSA-2024-11344: gstreamer1-plugins-base and gstreamer1-plugins-good Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
SUSE: 2025:0335-1 important: xrdp Security Advisory Updates
* bsc#1227769 Cross-References: * CVE-2024-39917
SUSE: 2025:0336-1 important: xrdp Security Advisory Updates
* bsc#1227769 Cross-References: * CVE-2024-39917
Debian LTS: DLA-4041-1: python-aiohttp Security Advisory Updates
Several issues have been found in aiohttp, an asynchronous HTTP client/server framework for asyncio and Python. Those issues are related to the HTTP parser, li…
SUSE: 2025:0325-1 important: clamav Security Advisory Updates
* bsc#1102840 * bsc#1103032 * bsc#1180296 * bsc#1202986 * bsc#1211594
SUSE: 2025:0327-1 important: clamav Security Advisory Updates
* bsc#1102840 * bsc#1103032 * bsc#1180296 * bsc#1202986 * bsc#1211594
SUSE: 2025:0328-1 important: clamav Security Advisory Updates
* bsc#1102840 * bsc#1103032 * bsc#1180296 * bsc#1202986 * bsc#1211594
SUSE: 2025:0318-1 moderate: ignition Security Advisory Updates
* bsc#1236518 Cross-References: * CVE-2023-45288
SUSE: 2025:0319-1 important: buildah Security Advisory Updates
* bsc#1236272 Cross-References: * CVE-2024-11218 * CVE-2024-9407