Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 python-aiohttp Important Security Advisory FEDORA-2026-66cb8ecfc2
https://github.com/aio-libs/aiohttp/blob/v3.13.3/CHANGES.rst
Fedora 43: python-pdfminer Security Fix CVE-2025-64512 Advisory
Update to 20251230: security fix for CVE-2025-64512 https://github.com/pdfminer/pdfminer.six/blob/20251230/CHANGELOG.md
Debian 11: Critical ReDoS DoS Advisory DLA-4418-1 for python-mechanize
Erik Krogh Kristensen and Rasmus Petersen from the GitHub Security Lab discovered a ReDoS (Regular Expression Denial of Service) vulnerability in python-mechan…
Fedora 42: Fix for mod_md Bug Related to CVE-2025-55753 Advisory
This update includes the latest upstream release of mod_md, with various bug fixes and enhancements. See https://github.com/icing/mod_md/releases for more info…
Fedora 41: uv Python Package Update 2025-00e5b3d89c Critical DoS Advisory
uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addre…
Fedora 41: rust-reqsign Critical AWS DoS Threat Advisory 2025-00e5b3d89c
uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addre…
Fedora 41: dotnet9.0 Moderate Runtime Update Advisory 2025-ece4f3816e
This is the October 2025 release of .NET 9, updating the SDK to version 9.0.111 and runtime to version to 9.0.10. Release Notes: SDK: https://github.com/dotnet…
Fedora 43 uv Update 2025-4154ea83d0: Security Advisory for Fast Installer
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydan…
Fedora 42 mbedtls Update 3.6.5 Advisory FEDORA-2025-7c8f6f12d1
Update to 3.6.5 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.5
Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Malware Injected into 7 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Fedora 41: libheif 2025-8fdb7be3cb Security Advisory Updates
Latest upstream release. It adds support for tiles and fixes reading images generated by iOS 18+. See https://github.com/strukturag/libheif/releases for more d…
Fedora 40: dotnet9.0 2025-0487787cb9 Security Advisory Updates
This is the January 2025 security and bugfix release for .NET 9.0. It updates the SDK to version 9.0.102 and Runtime to version 9.0.1. Release Notes: https://g…
Fedora 40: dotnet8.0 2025-16778d3c88 Security Advisory Updates
This is the January 2025 security and bugfix release for .NET 8.0. It updates the SDK to version 8.0.112 and Runtime to version 8.0.12. Release Notes: SDK: htt…
Fedora 40: SDL2_sound 2025-5ef10f8485 Security Advisory Updates
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Fedora 41: SDL2_sound 2025-82714dbb22 Security Advisory Updates
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Fedora 41: age 2024-4f08c1a90a Security Advisory Updates
Update to 1.2.1 to fix https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c security issue.
Fedora 41: sympa 2024-88ad2bee84 Security Advisory Updates
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74
Fedora 40: sympa 2024-14c006b8bb Security Advisory Updates
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74
Fedora 41: dotnet9.0 2024-aab6aded81 Security Advisory Updates
This is the .NET 9.0 GA release. It contains security fixes for CVE-2024-43498 and CVE-2024-43499 Announcement: https://devblogs.microsoft.com/dotnet/announcin…
Fedora 40: dotnet9.0 2024-70cf80279f Security Advisory Updates
This is the .NET 9.0 GA release. It contains security fixes for CVE-2024-43498 and CVE-2024-43499 Announcement: https://devblogs.microsoft.com/dotnet/announcin…
Fedora 40: syncthing 2024-4d24786142 Security Advisory Updates
Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0
Fedora 41: syncthing 2024-aa6e72c713 Security Advisory Updates
Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0