Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2025:0574-1 important: emacs Security Advisory Updates
* bsc#1237091 Cross-References: * CVE-2025-1244
Debian LTS: DLA-4058-1: pam-pkcs11 Security Advisory Updates
A vulnerability was discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow to by…
Debian LTS: DLA-4057-1: openssh Security Advisory Updates
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enab…
Ubuntu 7161-2: Docker Security Advisory Updates
Several security issues were fixed in Docker.
Debian: DSA-5868-1: openssh Security Advisory Updates
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enab…
SUSE: 2025:0569-1 moderate: ucode-intel Security Advisory Updates
* bsc#1237096 Cross-References: * CVE-2024-31068 * CVE-2024-36293
Debian: DSA-5867-1: gnutls28 Security Advisory Updates
Bing Shi reported a flaw in GnuTLS, a library implementing the TLS and SSL protocols. Inefficient processing of certificates containing numerous names or name …
SUSE: 2025:0564-1 important: the Linux Kernel Security Advisory Updates
* bsc#1215199 * bsc#1222803 * bsc#1224049 * bsc#1226980 * bsc#1227937
SUSE: 2025:0565-1 important: the Linux Kernel Security Advisory Updates
* bsc#1221282 * bsc#1222072 * bsc#1222803 * bsc#1224856 * bsc#1224857
SUSE: 2025:0561-1 important: openvswitch Security Advisory Updates
* bsc#1236353 Cross-References: * CVE-2025-0650
SUSE: 2025:0562-1 low: glibc Security Advisory Updates
* bsc#1236282 Cross-References: * CVE-2025-0395
Ubuntu 7269-1: Intel Microcode Security Advisory Updates
Several security issues were fixed in Intel Microcode.
Debian LTS: DLA-4056-1: golang-glog Security Advisory Updates
The following vulnerability has been discovered in the glog package for Go: When logs are written to a widely-writable directory (the default), an unprivileged…
Fedora 40: chromium 2025-a87a6cd2a7 Security Advisory Updates
Update to 133.0.6943.98 CVE-2025-0995: Use after free in V8 CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0997: Use after free in Navigati…
Fedora 41: microcode_ctl 2025-c99f9d789a Security Advisory Updates
Update to upstream 2.1-48. 20250211 Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at revision 0x38; Addition of 06-bf-07/0x07 microcode (in int…
Fedora 41: chromium 2025-d83e49a948 Security Advisory Updates
Update to 133.0.6943.98 CVE-2025-0995: Use after free in V8 CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0997: Use after free in Navigati…
Debian LTS: DLA-4055-1: trafficserver Security Advisory Updates
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2024-38479
Debian LTS: DLA-4054-1: tryton-client Security Advisory Updates
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
Debian LTS: DLA-4053-1: freerdp2 Security Advisory Updates
Multiple vulnerabilties have been found in freelrdp2, a free implementation of the Remote Desktop Protocol (RDP). The vulnerabilties potentially allows authent…
Fedora 41: webkitgtk 2025-3e8ed13bf0 Security Advisory Updates
Update to WebKitGTK 2.46.6: Fix a crash when enabling Skia CPU rendering. Fix several crashes and rendering issues. Fix CVE-2024-54543, CVE-2025-24143, CVE-202…
Fedora 41: libheif 2025-8fdb7be3cb Security Advisory Updates
Latest upstream release. It adds support for tiles and fixes reading images generated by iOS 18+. See https://github.com/strukturag/libheif/releases for more d…
Fedora 41: nginx-mod-vts 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Fedora 41: nginx-mod-naxsi 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Fedora 41: nginx-mod-modsecurity 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…