Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE: fontforge Low Memory Leak Advisory CVE-2025-50949
An update that solves one vulnerability can now be installed.
SUSE: fontforge Low Memory Leak Fix CVE-2025-50949 2025:4353-1
* bsc#1252652 Cross-References: * CVE-2025-50949
SUSE: Alloy Moderate Info Leak Fixed 2025:21137-1 CVE-2025-11065
* bsc#1248960 * bsc#1250621 Cross-References: * CVE-2025-11065
Debian: libpng1.6 Critical Info Leak & DoS Vulnerabilities DSA-6076-1
Several vulnerabilities were reported in the libpng PNG library, which could lead to information leaks, denial of service or potentially the execution of arbit…
Debian: webkit2gtk Critical Info Exfiltration DSA-6074-1 CVE-2025-13947
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-13947 Janet Black discovered that a website may be able to exfiltrate …
Ubuntu 25.10: Radare2 Critical Memory Leak Security Advisory USN-7915-1
Several security issues were fixed in radare2.
Enhancing Linux Email Security: Identify Malicious Attachments Effectively
Suspicious emails rarely confess in the body. The clues live in headers, MIME parts, and tiny inconsistencies between what a message claims and what it actuall…
SUSE Linux Micro: Important Memory Leak Solution for CVE-2025-8961 Advisory
* bsc#1243503 * bsc#1247106 * bsc#1247108 * bsc#1247581 * bsc#1247582
SUSE: TIFF Important Memory Leak Buffer Overflow CVE-2025-8961 2025:21009-1
* bsc#1243503 * bsc#1247106 * bsc#1247108 * bsc#1247581 * bsc#1247582
Ubuntu 25.10 OpenJDK 11 Critical Info Leak & XEE Attack USN-7882-1
Several security issues were fixed in OpenJDK 11.
openSUSE: 2025-20073-1 Alloy Moderate Fix for Sens. Info Leak
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.
Ubuntu 25.10 Freeglut Important Memory Leak DoS USN-7870-1
Several security issues were fixed in Freeglut.
SUSE: Alloy Moderate Fix for Info Leak CVE-2025-11065 Advisory
* bsc#1248960 * bsc#1250621 Cross-References: * CVE-2025-11065
Fedora 42: Critical URI Leakage DoS Mitigation CVE-2025-61594 Update
Upgrade to Ruby 3.4.7. Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 Fix REXML denial of service. Resolves: rhbz#2396204
SUSE: MozillaThunderbird Important Fix DoS Memory Leak 2025:4006-1
* bsc#1251263 Cross-References: * CVE-2025-11708 * CVE-2025-11709
Fedora 41: golang-github-openprinting-ipp-usb Critical Memory Leak Alert
Rebuild with the latest golang in repos
Fedora 41: FontForge Important Memory Leak Issue CVE-2025-50949
CVE-2025-50949
SUSE: QAT Engine 2025:3942-1 Moderate Memory Leak Issues
* bsc#1233363 * bsc#1233365 * bsc#1233366 Cross-References:
Fedora 43: openbao Critical Info Leak Risk CVE-2025-62513
Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.
Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack
The ransomware group known as Qilin (aka Agenda, Gold Feather, and Water Galura) has claimed more than 40 victims every month since the start of 2025, barring …
Effective Digital Risk Protection Strategies for Ensuring Linux Security
Security never stays still. Every new vendor connection, cloud integration, or endpoint expands the surface attackers can reach. Phishing kits evolve, fake dom…
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More
It’s easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent…
Ubuntu 22.04: Resolving Serious Memory Leak in mingw-w64-runtime
Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495.
SUSE: Samba Significant Command Injection Memory Leak 2025:03612-2
* bsc#1251279 * bsc#1251280 Cross-References: * CVE-2025-10230