Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2019-0372: graphicsmagick security upda
The updated packages fix a security vulnerability: ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage. (CVE-2019-16709)
openSUSE: 2019:2321-1: moderate: GraphicsMagick
An update that fixes one vulnerability is now available.
openSUSE: 2019:2317-1: moderate: GraphicsMagick
An update that fixes one vulnerability is now available.
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure…
Nvidia Advises Urgent Caution Over Eight Severe Security Vulnerabilities
Nvidia , the global leader in graphics processing units (GPUs), is synonymous with high-performance gaming and computational graphics. Hardware provided by thi…
Researchers Uncover New GPU Side-Channel Vulnerability Leaking Sensitive Data
A novel side-channel attack calledGPU.ziprenders virtually all modern graphics processing units (GPU) vulnerable to information leakage."This channel exploits …
Industrial Control Systems Vulnerabilities Soar: Over One-Third Unpatched in 2023
About 34% of security vulnerabilities impacting industrial control systems (ICSs) that were reported in the first half of 2023 have no patch or remediation, re…
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least O…
Debian eog Fixes Malformed PNG Code Execution Vulnerability
A buffer overflow was found in the "Eye of GNOME" graphics viewer program, which could possibly result in the execution of arbitrary code when opening a malfor…
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploite…
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zer…
Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.…
Fedora version 43 releases critical advisory on buffer overflow in Libre
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Debian librsvg Critical DoS and Code Exec Flaw DSA-6555-1 CVE-2026-96889
It was discovered that librsvg, a library to render Scalable Vector Graphics, incorrectly parsed files with nested XML includes, which could result in denial o…
Debian libpng1.6 Important CVE-2026-46675 Denial of Service Vulnerability
A use-after-free was discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics), which could result in d…
Debian libpng Use-After-Free Denial of Service Vulnerability DSA-6537-1
A use-after-free was discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics), which could result in d…
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT…
Debian LTS 11 NVIDIA Drivers Important Security Update DLA-4752-1
Debian released updates for nvidia-graphics-drivers, addressing multiple security vulnerabilities. Users are encouraged to upgrade to version 535.309.01-0+deb1…
SUSE MozillaFirefox Important Security Update 2026-3658-1
SUSE has released a security update for MozillaFirefox addressing 58 vulnerabilities, including critical issues in components like Graphics and JavaScript, wit…
Fedora Traffic Server 10.2.0 Critical Security Updates 2026-b2d993884d
Fedora 44 has updated trafficserver to version 10.2.0, enhancing functionality for HTTP caching and proxy services while addressing multiple security vulnerabi…
Fedora 43 perl-Devel-Cover Heap Buffer Overflow and Info Disclosure Risk
Fedora 43 has updated perl-Devel-Cover to version 1.51-4, enhancing code coverage metrics for Perl while also addressing previous security vulnerabilities rela…
Rocky Linux Kernel Moderate DoS Bug Fixes RLSA-2026-49871
An update for Rocky Linux 10 addresses kernel vulnerabilities and includes bug fixes and enhancements, specifically targeting denial of service issues and grap…
Fedora perl-Devel-Cover Important Heap Overflow Info CVE-2026-8376
An update for perl-Devel-Cover 1.52-4.fc44 in Fedora 44 introduces code coverage metrics for Perl, alongside a Perl version update to 5.42.3 for improved quali…
Fedora 43 nsd Bug Fixes CVE-2026-12490 DoS Heap Overflow 2026-0b77a23312
Fedora 43 has released nsd version 4.15.0, improving Prometheus metrics, adjusting logging noise, and addressing multiple bugs, enhancing the performance and s…