Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 uv Advisory Resolving Use-After-Free and Code Execution Issues
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Fedora 44 uv Important Code Exec Fix Advisory 2026-407b957a3b
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Fedora 44 rust-libcst_derive Security Advisory Fixes Execution Flaw
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real serv…
Fedora 44 mongo-c-driver Security Advisory 2026-4286ff2dfd
libbson 1.30.11 Fixes Fix length check in bson_new_from_buffer. libmongoc 1.30.11 Fixes
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnera…
Fedora 43 nagios-plugins Heap Overflow Security Advisory 2026-7ac5fb031f
Update to upstream (bz#2453492). check_icmp: host-count overflow leads to heap buffer overflow (bz#2513957) Update 0012-fix-perl-ntp-ipv6.patch to allow upperc…
Fedora 44 nagios-plugins Critical Heap Overflow Advisory 2026-c2fbd942bc
Update to upstream (bz#2453492). check_icmp: host-count overflow leads to heap buffer overflow (bz#2513957) Update 0012-fix-perl-ntp-ipv6.patch to allow upperc…
SUSE texlive Moderate Use-After-Free Buffer Issue Advisory 2026-3628-1
SUSE announced a moderate security update for texlive addressing three vulnerabilities, including NULL pointer dereferences and a use-after-free issue, applica…
Fedora 43 libgsasl Denial of Service Fix CVE-2026-48829 Advisory
Fedora has released an update for libgsasl to fix CVE-2026-48829, addressing a denial of service vulnerability related to NULL pointer dereference in the DIGES…
SUSE openSUSE Leap 15.5 Advisory ID 2026-3489-1 Moderate kpartx Update
SUSE released a moderate security update for multipath-tools addressing integer overflow and missing bounds checks, applicable to openSUSE Leap 15.5 and SUSE L…
LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now
A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is already in CISA's KEV. Here's what t…
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. S…
Fedora 43 python-scitokens Advisory 2026-727b73bfa0 Path Traversal Fix
Remove legacy parent SciToken chaining behavior from token initialization and claim handling Harden Enforcer scope path traversal validation (including encoded…
Fedora 43 Coturn Critical IPv4-Mapped Bypass Advisory 2026-8cb5571ddc
Coturn 4.9.0 Multiple security fixes Fix to Web Admin password check Cleanup of deprecated OpenSSL APIs Fix for CVE-2026-27624: Bypass localhost and IP range b…
Fedora 42 gnutls Critical Denial of Service CVE-2026-1584 Advisory
This backports fixes for a couple CVEs: ** libgnutls: Fix NULL pointer dereference in PSK binder verification A TLS 1.3 resumption attempt with an invalid PSK …
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories
This week didn’t produce one big headline. It produced many small signals — the kind that quietly shape what attacks will look like next.Researchers tracked in…
Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released
Ivanti has rolled out security updates to address two security flaws impacting Ivanti Endpoint Manager Mobile (EPMM) that have been exploited in zero-day attac…
Debian 11 zvbi Important Integer Overflow Advisory DLA-4449-1 CVE-2025-2173
Several issues have been found in zvbi, a Vertical Blanking Interval decoder. CVE-2025-2173 is related to an uninitialized pointer in src/conv.c:: vbi_strndup_…
Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack
Threat actors are actively exploiting multiple security flaws impacting Dassault Systèmes DELMIA Apriso and XWiki, according to alerts issued by the U.S. Cyber…
ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More
Criminals don’t need to be clever all the time; they just follow the easiest path in: trick users, exploit stale components, or abuse trusted systems like OAut…
Fedora 41 Insight Important Heap-Based Overflow Advisory 2025-d22287ec14
Fix CVS 2025-11082 and 2025-11083. conditional for explicit BR tcl/tk 8 dummy rpm check section.
CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released details of two sets of malware that were discovered in an unnamed organiz…
Mageia 9: MGASA-2025-0207 critical update for Firefox available now
Suggested Advisory The last packaged version for armv7hl was 115.13.0, so from the point of view of the armv7hl architecture, this is a Security Advisory and f…