Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: freeipa 2025-b21777d1b5 Security Advisory Updates
CVE-2024-11029 Release note: https://www.freeipa.org/release-notes/4-12-3.html
Debian: DSA-5850-1: git Security Advisory Updates
Multiple issues were found in Git, a fast, scalable, distributed revision control system, which may result in leaking credential information to an unintended h…
Mageia 2025-0026: glibc Security Advisory Updates
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and siz…
Mageia 2025-0025: openssl Security Advisory Updates
Timing side-channel in ECDSA signature computation. (CVE-2024-13176) References: - https://bugs.mageia.org/show_bug.cgi?id=33942 - https://openssl-library.org/…
Fedora 40: chromium 2025-5d89c826ff Security Advisory Updates
Update to 132.0.6834.110 High CVE-2025-0611: Object corruption in V8 High CVE-2025-0612: Out of bounds memory access in V8
Fedora 40: mediawiki 2025-11277f6779 Security Advisory Updates
https://lists.wikimedia.org/hyperkitty/list/wikitech- l@lists.wikimedia.org/thread/PFTE5RHUERS6KTUGGRZO7XXV5THNJ77E/ https://lists.wikimedia.org/hyperkitty/lis…
Fedora 41: chromium 2025-eb2f4a2306 Security Advisory Updates
Update to 132.0.6834.110 High CVE-2025-0611: Object corruption in V8 High CVE-2025-0612: Out of bounds memory access in V8
Fedora 41: mediawiki 2025-25b16d6561 Security Advisory Updates
https://lists.wikimedia.org/hyperkitty/list/wikitech- l@lists.wikimedia.org/thread/PFTE5RHUERS6KTUGGRZO7XXV5THNJ77E/ https://lists.wikimedia.org/hyperkitty/lis…
Mageia 2025-0024: iperf Security Advisory Updates
It was discovered that iperf 3.17.1 contains a segmentation violation via the iperf_exchange_parameters() function. References: - https://bugs.mageia.org/show_…
openSUSE: 2025:0033-1 moderate: qt6-connectivity Advisory Security Update
An update that fixes one vulnerability is now available.
Fedora 40: pam-u2f 2025-b58b563b77 Security Advisory Updates
pam-u2f 1.3.1 includes a fix to resolve CVE-2025-23013 (Partial Authentication Bypass). CVSS score 7.3. 1.3.2 is a fix for a regression that could impact exist…
Fedora 40: rsync 2025-b28759cb95 Security Advisory Updates
New version 3.4.1, a couple of fixes for the 3.4.0 release.
SUSE: 2025:0233-1 important: nodejs18 Security Advisory Updates
* bsc#1236250 * bsc#1236258 Cross-References: * CVE-2025-22150
SUSE: 2025:0234-1 important: nodejs18 Security Advisory Updates
* bsc#1236250 * bsc#1236258 Cross-References: * CVE-2025-22150
SUSE: 2025:0235-1 moderate: java-11-openjdk Security Advisory Updates
* bsc#1236278 Cross-References: * CVE-2025-21502
SUSE: 2025:0237-1 important: nodejs20 Security Advisory Updates
* bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References:
SUSE: 2025:0232-1 important: nodejs20 Security Advisory Updates
* bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References:
SUSE: 2025:0229-1 important: the Linux Kernel Security Advisory Updates
* bsc#1135481 * bsc#1170891 * bsc#1171420 * bsc#1173139 * bsc#1175543
SUSE: 2025:0230-1 important: the Linux Kernel Security Advisory Updates
* bsc#1215304 * bsc#1220927 * bsc#1220937 * bsc#1230697 * bsc#1232436
SUSE: 2025:0231-1 important: the Linux Kernel Security Advisory Updates
* bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1189998 * bsc#1190358
CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday placed a now-patched security flaw impacting the popular jQuery JavaScript library…
Fedora 40: git-lfs 2025-50deb0acd5 Security Advisory Updates
Update to latest version Fix CVE-2024-53263
Fedora 41: pam-u2f 2025-29900cbe83 Security Advisory Updates
pam-u2f 1.3.1 includes a fix to resolve CVE-2025-23013 (Partial Authentication Bypass). CVSS score 7.3. 1.3.2 is a fix for a regression that could impact exist…
Fedora 41: git-lfs 2025-1de066b8af Security Advisory Updates
Update to latest version Fix CVE-2024-53263