Cybersecurity News

Gentoo: GLSA-202501-06: GPL Ghostscript: Security Advisory Updates

Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.

Gentoo: GLSA-202501-05: libuv: Hostname TruncationSecurity Advisory Updates

A vulnerability has been discovered in libuv, where hostname truncation can lead to attacker-controlled lookups.

Fedora 40: SDL2_sound 2025-5ef10f8485 Security Advisory Updates

Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …

Linux GitHub

Fedora 41: SDL2_sound 2025-82714dbb22 Security Advisory Updates

Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …

Linux GitHub

Debian LTS: DLA-4028-1: git-lfs Security Advisory Updates

CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command

Linux

openSUSE: 2025:0021-1 important: gh Advisory Security Update

An update that fixes one vulnerability is now available.

Linux

Mageia 2025-0019: rsync Security Advisory Updates

Heap buffer overflow in rsync due to improper checksum length handling. (CVE-2024-12084) Info leak via uninitialized stack contents. (CVE-2024-12085) Rsync ser…

SUSE: 2025:0200-1 important: pam_u2f Security Advisory Updates

* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013

Linux

SUSE: 2025:0198-1 important: pam_u2f Security Advisory Updates

* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013

Linux

Debian LTS: DLA-4016-1: ucf Security Advisory Updates

It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.

Linux

Fedora 41: rsync 2025-3ec637e6e9 Security Advisory Updates

New version 3.4.1, a couple of fixes for the 3.4.0 release. New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-1208…

Linux

SUSE: 2025:0149-1 important: python-Django Security Advisory Updates

* bsc#1235856 Cross-References: * CVE-2024-56374

Linux

SUSE: 2025:0150-1 important: the Linux Kernel (Live Patch 25 for SLE 15 SP4) Security Advisory Updates

* bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363

Linux

SUSE: 2025:0139-1 important: libQtWebKit4 Security Advisory Updates

* bsc#1228693 Cross-References: * CVE-2024-40779

Linux

SUSE: 2025:0136-1 important: the Linux Kernel (Live Patch 39 for SLE 15 SP3) Security Advisory Updates

* bsc#1232637 * bsc#1233712 Cross-References: * CVE-2022-48956

Linux

SUSE: 2025:0137-1 important: the Linux Kernel (Live Patch 44 for SLE 15 SP3) Security Advisory Updates

* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202

Linux

Mageia 2025-0012: openjpeg2 Security Advisory Updates

Heap buffer overflow in bin/common/color.c. (CVE-2024-56826) Heap buffer overflow in lib/openjp2/j2k.c. (CVE-2024-56827) References: - https://bugs.mageia.org/…

Fedora 40: rsync 2025-73c1f25730 Security Advisory Updates

New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747.

Linux

openSUSE: 2025:0012-1 important: opera Advisory Security Update

An update that fixes one vulnerability is now available.

Linux

SUSE: 2025:0116-1 important: git Security Advisory Updates

* bsc#1235600 * bsc#1235601 Cross-References: * CVE-2024-50349

Linux

SUSE: 2025:0110-1 important: the Linux Kernel (Live Patch 27 for SLE 15 SP4) Security Advisory Updates

* bsc#1223683 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311

Linux

SUSE: 2025:0111-1 important: the Linux Kernel (Live Patch 28 for SLE 15 SP4) Security Advisory Updates

* bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1229553 * bsc#1231353

Linux

SUSE: 2025:0112-1 important: the Linux Kernel (Live Patch 9 for SLE 15 SP5) Security Advisory Updates

* bsc#1232637 * bsc#1233712 Cross-References: * CVE-2022-48956

Linux

Fedora 40: perl-Net-OAuth 2025-05e642f1ef Security Advisory Updates

Update to 0.30, fixes CVE-2025-22376

Linux