Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 7222-1: BlueZ Security Advisory Updates
BlueZ could be made to run programs as an administrator if it connected to a malicious Bluetooth device.
Debian LTS: DLA-4028-1: git-lfs Security Advisory Updates
CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command
openSUSE: 2025:0021-1 important: gh Advisory Security Update
An update that fixes one vulnerability is now available.
Mageia 2025-0019: rsync Security Advisory Updates
Heap buffer overflow in rsync due to improper checksum length handling. (CVE-2024-12084) Info leak via uninitialized stack contents. (CVE-2024-12085) Rsync ser…
Debian: DSA-5847-1: snapcast Security Advisory Updates
It was discovered that the JSON RPC interface of the server componenent of Snapcast, a multi-room client-server audio player, allowed the execution of arbitrar…
Ubuntu 7220-1: Vim Security Advisory Updates
Vim could be made to crash or run programs if it received specially crafted input.
SUSE: 2025:0200-1 important: pam_u2f Security Advisory Updates
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
SUSE: 2025:0201-1 important: the Linux Kernel Security Advisory Updates
* bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1190358 * bsc#1190428
SUSE: 2025:0202-1 important: the Linux Kernel Security Advisory Updates
* bsc#1215304 * bsc#1220927 * bsc#1220937 * bsc#1230697 * bsc#1232436
SUSE: 2025:0196-1 moderate: dhcp Security Advisory Updates
* bsc#1192020 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6
SUSE: 2025:0197-1 important: git Security Advisory Updates
* bsc#1224168 * bsc#1224170 * bsc#1224171 * bsc#1224172 * bsc#1224173
SUSE: 2025:0198-1 important: pam_u2f Security Advisory Updates
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
Debian LTS: DLA-4016-1: ucf Security Advisory Updates
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.
Fedora 41: rsync 2025-3ec637e6e9 Security Advisory Updates
New version 3.4.1, a couple of fixes for the 3.4.0 release. New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-1208…
SUSE: 2025:0149-1 important: python-Django Security Advisory Updates
* bsc#1235856 Cross-References: * CVE-2024-56374
SUSE: 2025:0150-1 important: the Linux Kernel (Live Patch 25 for SLE 15 SP4) Security Advisory Updates
* bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363
Ubuntu 7206-2: rsync Security Advisory Updates
USN-7206-1 caused some regression in rsync.
Ubuntu 7209-1: GIMP DDS Plugin Security Advisory Updates
The GIMP DDS Plugin could be made to crash or run programs as your login if it opened a specially crafted file.
Ubuntu 7208-1: Apache Commons BCEL Security Advisory Updates
Apache Commons BCEL could be made to crash or run programs if it received specially crafted network traffic.
Ubuntu 7215-1: libxml2 Security Advisory Updates
libxml2 could be made to expose sensitive information over the network.
Ubuntu 7214-1: HarfBuzz Security Advisory Updates
HarfBuzz could be made to crash or run programs as your login if it opened a specially crafted file.
Ubuntu 7213-1: poppler Security Advisory Updates
poppler could be made to crash or expose sensitive information if it opened a specially crafted file.
Ubuntu 7211-1: Audacity Security Advisory Updates
Audacity could expose sensitive information.
SUSE: 2025:0139-1 important: libQtWebKit4 Security Advisory Updates
* bsc#1228693 Cross-References: * CVE-2024-40779