Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: openssh 2025-62f6cb2785 Security Advisory Updates
Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2…
Fedora 40: proftpd 2025-d37ad923f5 Security Advisory Updates
This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to crash …
Fedora 41: proftpd 2025-835949b994 Security Advisory Updates
This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to crash …
Ubuntu 7270-2: OpenSSH Security Advisory Updates
OpenSSH could be made to bypass the server identity check.
Mageia 2025-0069: python-cryptography & openssl Security Advisory Updates
Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. (CVE-2023-49083) Python-cryptography: bleichenbacher timing oracle attack against …
Fedora 41: nginx-mod-vts 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Fedora 41: nginx-mod-naxsi 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Fedora 41: nginx-mod-modsecurity 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Fedora 41: nginx-mod-fancyindex 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Debian LTS: DLA-4049-1: rust-openssl Security Advisory Updates
A vulnerability has been discovered in rust-openssl, a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::select_next_proto c…
Mageia 2025-0019: rsync Security Advisory Updates
Heap buffer overflow in rsync due to improper checksum length handling. (CVE-2024-12084) Info leak via uninitialized stack contents. (CVE-2024-12085) Rsync ser…
Mageia 2024-0397: emacs Security Advisory Updates
In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code…
Mageia 2024-0388: python-aiohttp Security Advisory Updates
When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'follow_s…
Mageia 2024-0377: microcode Security Advisory Updates
Improper Finite State Machines (FSMs) in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially …
Mageia 2024-0370: opendmarc Security Advisory Updates
Fix null pointer dereference in opendmarc_policy.c. (CVE-2024-25768) References: - https://bugs.mageia.org/show_bug.cgi?id=33756
Debian LTS: DLA-3957-1: needrestart Security Advisory Updates
The Qualys Threat Research Unit discovered several local privilege escalation vulnerabilities in needrestart, a utility to check which daemons need to be resta…
Debian: DSA-5815-1: needrestart Security Advisory Updates
The Qualys Threat Research Unit discovered several local privilege escalation vulnerabilities in needrestart, a utility to check which daemons need to be resta…
Mageia 2024-0352: libheif Security Advisory Updates
In Libheif, insufficient checks in ImageOverlay::parse() while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bound…
Debian LTS: DLA-3931-1: ghostscript Security Advisory Updates
A heap-based pointer disclosure problem was found in Ghostscript, an interpreter for the PostScript language and for PDF. This could lead to information disclo…
Fedora 41: edk2 2024-9cc95d56ce Security Advisory Updates
Security fix for CVE-2023-6237 (openssl: Excessive time spent checking invalid RSA public keys)
Debian: DSA-5785-1: mediawiki Security Advisory Updates
Dom Walden discovered that the AbuseFilter extension in MediaWiki, a website engine for collaborative work, performed incomplete authorisation checks.
Mageia 2024-0319: java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, & java-latest-openjdk Security Advisory Updates
Potential UTF8 size overflow. (CVE-2024-21131) Excessive symbol length can lead to infinite loop. (CVE-2024-21138) Range Check Elimination (RCE) pre-loop limit…
Debian: DSA-5776-1: tryton-server Security Advisory Updates
Albert Cervera discovered two missing authorisation checks in the Tryton application platform. For the stable distribution (bookworm), this problem has been fi…
Fedora 41: iwd 2024-5d6c951b0b Security Advisory Updates
iwd 2.22: Fix issue with handling the Affinities property. Fix issue with handling ConnectedAccessPoint signal when roaming.