Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DSA-5848-1: chromium Security Advisory Updates
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
SUSE: 2025:0226-1 moderate: docker-stable Security Advisory Updates
* bsc#1219437 * bsc#1234089 Cross-References: * CVE-2024-2365
Debian LTS: DLA-4030-1: python-django Security Advisory Updates
It was discovered that there was potential Denial of Service (DoS) vulnerability in Django, the Python-based web development framework. The lack of upper-bound…
Ubuntu 7226-1: Cacti Security Advisory Updates
Cacti could be made to crash or run programs if it received specially crafted network traffic.
openSUSE: 2025:0024-1 important: qt6-webengine Advisory Security Update
An update that fixes one vulnerability is now available.
Ubuntu 7223-1: OpenJPEG Security Advisory Updates
OpenJPEG could be made to crash or run programs if it opened a specially crafted file.
Ubuntu 7205-2: Django Security Advisory Updates
Django could be made to cause a denial of service if it received a specially crafted IPv6 string.
Debian LTS: DLA-4029-1: frr Security Advisory Updates
In FRR, the internet routing protocol suite software, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's…
Fedora 40: webkit2gtk4.0 2025-e45eecf53a Security Advisory Updates
Update to 2.46.5
Fedora 40: SDL2_sound 2025-5ef10f8485 Security Advisory Updates
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Fedora 41: webkit2gtk4.0 2025-0cb4a35438 Security Advisory Updates
Update to 2.46.5
Fedora 41: SDL2_sound 2025-82714dbb22 Security Advisory Updates
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Ubuntu 7222-1: BlueZ Security Advisory Updates
BlueZ could be made to run programs as an administrator if it connected to a malicious Bluetooth device.
Debian LTS: DLA-4028-1: git-lfs Security Advisory Updates
CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command
openSUSE: 2025:0021-1 important: gh Advisory Security Update
An update that fixes one vulnerability is now available.
Fedora 40: python-jinja2 2025-6ed1e0c3c6 Security Advisory Updates
Update to 3.1.5 Security fix for CVE-2024-56201
Debian: DSA-5847-1: snapcast Security Advisory Updates
It was discovered that the JSON RPC interface of the server componenent of Snapcast, a multi-room client-server audio player, allowed the execution of arbitrar…
Ubuntu 7220-1: Vim Security Advisory Updates
Vim could be made to crash or run programs if it received specially crafted input.
SUSE: 2025:0200-1 important: pam_u2f Security Advisory Updates
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
SUSE: 2025:0201-1 important: the Linux Kernel Security Advisory Updates
* bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1190358 * bsc#1190428
SUSE: 2025:0202-1 important: the Linux Kernel Security Advisory Updates
* bsc#1215304 * bsc#1220927 * bsc#1220937 * bsc#1230697 * bsc#1232436
SUSE: 2025:0197-1 important: git Security Advisory Updates
* bsc#1224168 * bsc#1224170 * bsc#1224171 * bsc#1224172 * bsc#1224173
SUSE: 2025:0198-1 important: pam_u2f Security Advisory Updates
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
Debian LTS: DLA-4016-1: ucf Security Advisory Updates
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.