Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: git-lfs 2025-1de066b8af Security Advisory Updates
Update to latest version Fix CVE-2024-53263
Ubuntu 7227-1: PCL Security Advisory Updates
PCL could be made to crash if it received specially crafted input.
openSUSE: 2025:0025-1 moderate: cheat Advisory Security Update
An update that fixes one vulnerability is now available.
openSUSE: 2025:0030-1 moderate: dante Advisory Security Update
An update that fixes one vulnerability is now available.
Mageia 2025-0021: golang Security Advisory Updates
net/http: sensitive headers incorrectly sent after cross-domain redirect, (CVE-2024-45336). crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints…
SUSE: 2025:0226-1 moderate: docker-stable Security Advisory Updates
* bsc#1219437 * bsc#1234089 Cross-References: * CVE-2024-2365
Debian LTS: DLA-4030-1: python-django Security Advisory Updates
It was discovered that there was potential Denial of Service (DoS) vulnerability in Django, the Python-based web development framework. The lack of upper-bound…
Ubuntu 7226-1: Cacti Security Advisory Updates
Cacti could be made to crash or run programs if it received specially crafted network traffic.
openSUSE: 2025:0024-1 important: qt6-webengine Advisory Security Update
An update that fixes one vulnerability is now available.
Ubuntu 7223-1: OpenJPEG Security Advisory Updates
OpenJPEG could be made to crash or run programs if it opened a specially crafted file.
Ubuntu 7205-2: Django Security Advisory Updates
Django could be made to cause a denial of service if it received a specially crafted IPv6 string.
Debian LTS: DLA-4029-1: frr Security Advisory Updates
In FRR, the internet routing protocol suite software, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's…
Gentoo: GLSA-202501-11: PHP: Security Advisory Updates
Multiple vulnerabilities have been discovered in PHP, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202501-10: Mozilla Firefox: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution.
Gentoo: GLSA-202501-09: QtWebEngine: Security Advisory Updates
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202501-08: Qt: Buffer OverflowSecurity Advisory Updates
A vulnerability has been discovered in Qt, where a buffer overflow can lead to denial of service.
Gentoo: GLSA-202501-07: libgsf: Security Advisory Updates
Multiple vulnerabilities have been discovered in libgsf, the worst of which can lead to arbitrary code execution.
Gentoo: GLSA-202501-06: GPL Ghostscript: Security Advisory Updates
Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202501-05: libuv: Hostname TruncationSecurity Advisory Updates
A vulnerability has been discovered in libuv, where hostname truncation can lead to attacker-controlled lookups.
Fedora 40: webkit2gtk4.0 2025-e45eecf53a Security Advisory Updates
Update to 2.46.5
Fedora 40: SDL2_sound 2025-5ef10f8485 Security Advisory Updates
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Fedora 41: webkit2gtk4.0 2025-0cb4a35438 Security Advisory Updates
Update to 2.46.5
Fedora 41: SDL2_sound 2025-82714dbb22 Security Advisory Updates
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Mageia 2025-0020: chromium-browser-stable Security Advisory Updates
Lot of CVEs were fixed by upstream since our current version; please see the links. References: - https://bugs.mageia.org/show_bug.cgi?id=33609