Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42: Security Advisory for golang-github-facebook-time CVE-2025-65637
Update logrus for https://access.redhat.com/security/cve/cve-2025-65637
Fedora 43: Critical Vulnerabilities in golang-github-openprinting-ipp-usb
Rebuild with the latest golang in repos
HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks
Chinese-speaking users are the target of a search engine optimization (SEO) poisoning campaign that uses fake software sites to distribute malware."The attacke…
SUSE: 2025:01988-1 moderate: golang-github-prometheus-node_exporter patch
* bsc#1236516 * bsc#1238686 * jsc#MSQA-992 Cross-References:
Debian 11: DLA-4151-1 critical: golang-github-gorilla-csrf issue
The following vulnerability has been discovered in the gorilla/csrf package for Go: Prior to 1.7.3, gorilla/csrf did not validate the Origin header against an …
Fedora 40: golang-github-nvidia-container-toolkit 2025-76012a9a99 Security Advisory Updates
Update to 1.17.3 Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999 Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA- vcfp-63cx-4h59, and CVE-2024-013…
Fedora 41: golang-github-aws-smithy 2025-0620fdebb6 Security Advisory Updates
Fix for CVE-2024-52522 & CVE-2024-45338
Fedora 41: golang-github-ncw-swift-2 2025-0620fdebb6 Security Advisory Updates
Fix for CVE-2024-52522 & CVE-2024-45338
Fedora 41: golang-github-aws-sdk-2 2025-0620fdebb6 Security Advisory Updates
Fix for CVE-2024-52522 & CVE-2024-45338
eBPF Malware & GitHub Exploits: Navigating The Latest Linux Security Challenges
Linux security administrators take note: Doctor Web has identified numerous advanced malware trends that pose a severe threat to your systems. Extended Berkele…
Fedora 41: golang-github-nvidia-container-toolkit 2024-cd6112750e Security Advisory Updates
Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch
Fedora 40: golang-github-nvidia-container-toolkit 2024-8c218846ee Security Advisory Updates
Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch
GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code
Threat actors have long leveraged typosquatting as a means to trick unsuspecting users into visiting malicious websites or downloading booby-trapped software a…
Fedora 38: golang-github-tdewolff-minify 2024-0d4d9925a2
Update to latest version Security fix for CVE-2023-39325
Fedora 38: golang-github-tdewolff-parse 2024-0d4d9925a2
Update to latest version Security fix for CVE-2023-39325
Fedora 38: golang-github-tdewolff-argp 2024-0d4d9925a2
Update to latest version Security fix for CVE-2023-39325
Fedora 39: golang-github-tdewolff-minify 2024-c3e32c5635
Update to latest version Security fix for CVE-2023-39325
Fedora 38: golang-github-facebook-time 2024-f99ecead66
Security fix for CVE-2023-39325
Fedora 39: golang-github-facebook-time 2024-07c811c7a5
Security fix for CVE-2023-39325
Fedora 35: golang-github-gosexy-gettext 2022-3e1ade35db
Rebuild for CVE-2022-{24675,28327,29526 in golang}
Fedora 35: golang-github-hub 2022-3e1ade35db
Rebuild for CVE-2022-{24675,28327,29526 in golang}
Fedora 36: golang-github-spf13-cobra 2022-fae3ecee19
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). --…
Fedora 36: golang-github-intel-goresctrl 2022-fae3ecee19
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). --…
Fedora 36: golang-github-etcd-io-gofail 2022-fae3ecee19
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). --…