Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE: 2025:0037-1 important: SDL2_sound Advisory Security Update
An update that fixes 6 vulnerabilities is now available.
Mageia 2025-0029: chromium-browser-stable Security Advisory Updates
Object corruption in V8. (CVE-2025-0611) Out of bounds memory access in V8. (CVE-2025-0612) References: - https://bugs.mageia.org/show_bug.cgi?id=33962
Mageia 2025-0028: git-lfs Security Advisory Updates
Git LFS permits exfiltration of credentials via crafted HTTP URLs. (CVE-2024-53263) References: - https://bugs.mageia.org/show_bug.cgi?id=33931
openSUSE: 2025:0036-1 important: chromium Advisory Security Update
An update that fixes one vulnerability is now available.
SUSE: 2025:0297-1 moderate: govulncheck-vulndb Security Advisory Updates
* jsc#PED-11136 Cross-References: * CVE-2024-11218 * CVE-2024-36402
SUSE: 2025:0295-1 moderate: ignition Security Advisory Updates
* bsc#1236518 Cross-References: * CVE-2023-45288
SUSE: 2025:0292-1 moderate: shadow Security Advisory Updates
* bsc#1228770 Cross-References: * CVE-2013-4235
Ubuntu 7242-1: Tomcat Security Advisory Updates
Tomcat could be made to run programs if it received specially crafted network traffic.
Ubuntu 7243-1: VLC Security Advisory Updates
VLC could be made to crash or run programs if it received specially crafted network traffic.
Debian: DSA-5854-1: bind9 Security Advisory Updates
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. For the stable distribution (bookworm), th…
Debian: DSA-5853-1: pam-u2f Security Advisory Updates
Matthias Gerstner reported that pam-u2f, a PAM module which allows to use U2F (Universal 2nd Factor) devices in the PAM authentication stack, does not properly…
SUSE: 2025:0289-1 important: the Linux Kernel Security Advisory Updates
* bsc#1012628 * bsc#1194869 * bsc#1214954 * bsc#1215199 * bsc#1216813
SUSE: 2025:0290-1 important: hplip Security Advisory Updates
* bsc#1209401 * bsc#1214399 * bsc#1225777 * bsc#1234745 * jsc#PED-11978
SUSE: 2025:0291-1 moderate: iperf Security Advisory Updates
* bsc#1234705 Cross-References: * CVE-2024-53580
Oracle9: ELSA-2025-20066: kernel Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2025-20066: kernel Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2025-0743: keepalived Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
SUSE: 2025:0277-1 important: amazon-ssm-agent Security Advisory Updates
* bsc#1235575 Cross-References: * CVE-2025-21613
SUSE: 2025:0278-1 moderate: openvpn Security Advisory Updates
* bsc#1235147 Cross-References: * CVE-2024-5594
SUSE: 2025:0279-1 moderate: java-21-openjdk Security Advisory Updates
* bsc#1236278 Cross-References: * CVE-2025-21502
Fedora 41: libsoup3 2025-42ee7772e3 Security Advisory Updates
Fix for CVE-2024-52531
Fedora 41: abseil-cpp 2025-7631628ba6 Security Advisory Updates
Update to 20240722.1 Fix potential integer overflow in hash container create/resize
Debian LTS: DLA-4033-1: libtar Security Advisory Updates
Multiple vulnerabilities have been fixed in libtar, a library for manipulating tar archives. CVE-2021-33643
Debian: DSA-5851-1: pdns-recursor Security Advisory Updates
Toshifumi Sakaguchi discovered that too permissive parsing of some resource record sets in the zone file parsing of PDNS Recursor could result in denial of ser…