Cybersecurity News

AlmaLinux 9 Haproxy Important DoS Vulnerability Fix ALSA-2025-21693

haproxy security update

Linux

Mageia 9: PostgreSQL Critical Create Privilege Issue MGASA-2025-0302

MGASA-2025-0302 - Updated postgresql15 & postgresql13 packages fix security vulnerabilities

Databases

Mageia 9: Firefox High Spoofing Race Condition Fix MGASA-2025-0300

MGASA-2025-0300 - Updated firefox packages fix security vulnerabilities

AlmaLinux 9 ALSA-2025-21462 Lasso Critical Type Confusion CVE-2025-47151

lasso security update

Linux

Fedora 41: Critical Alert for python-pdfminer Arbitrary Code Execution

Backport security fix for GHSA-wf5f-4jwr-ppcp / CVE-2025-64512

Linux

Fedora 42 Python-Pdfminer Critical Advisory on Arbitrary Code Execution

Backport security fix for GHSA-wf5f-4jwr-ppcp / CVE-2025-64512

Linux

Debian: Thunderbird Critical Code Execution Flaws DSA-6059-1

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), thes…

Linux

Fedora 42: bind9-next Critical DNSSEC Issues Fix 2025-d9f9394ecd

Update to 9.21.14 (rhbz#2394406) Security Fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing atta…

Linux

Slackware 15.0: xpdf Critical Fix for Buffer Overflow SSA:2025-319-01

New xpdf packages are available for Slackware 15.0 and -current to fix security issues.

Mageia 9: Apache Commons BeanUtils Important Fix for CVE-2025-48734

MGASA-2025-0299 - Updated apache-commons-beanutils packages fix security vulnerability

Apache

Mageia 9: Critical Cleartext Vulnerability in Stardict CVE-2025-55014

MGASA-2025-0298 - Updated stardict packages fix security vulnerability

Mageia: yelp Important Remote Code Exec CVE-2025-3155 Advisory 2025-0297

MGASA-2025-0297 - Updated yelp & yelp-xsl packages fix security vulnerability

Mageia: Apache Commons FileUpload Important DoS Advisory MGASA-2025-0296

MGASA-2025-0296 - Updated apache-commons-fileupload packages fix security vulnerability

Apache

Mageia 9: Notice on Botan2 CVE-2024-50384 Denial of Service MGASA-2025-0296

MGASA-2025-0295 - Updated botan2 packages fix security vulnerabilitiy

Mageia 9: Fix for spdlog Resource Usage MGASA-2025-0294 CVE-2025-6140

MGASA-2025-0294 - Updated spdlog packages fix security vulnerability

Mageia 9: apache-commons-lang3 Important Stack Overflow Bug MGASA-2025-0293

MGASA-2025-0293 - Updated apache-commons-lang3 & apache-commons-lang packages fix security vulnerability

Apache

Mageia: webkit2 Important Code Exec Process Crash Fix MGASA-2025-0291

MGASA-2025-0291 - Updated webkit2 packages fix security vulnerabilities

Mageia 9: perl-Crypt-OpenSSL-RSA Critical Side-Channel Attack CVE-2024-2467

MGASA-2025-0287 - Updated perl-Crypt-OpenSSL-RSA packages fix security vulnerability

OpenSSL

Debian: Chromium Critical Exec Code Risk DSA-6055-1 CVE-2025-13042

A security issue was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

Linux Chrome

Debian: firefox-esr Important Threat of Code Execution DSA-6054-1

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or bypass of the…

Linux

Mageia 9: python-tornado Important Excessive Logging Vuln MGASA-2025-0282

MGASA-2025-0282 - Updated python-tornado packages fix security vulnerability

Mageia 9: python3 Critical Arbitrary Write Issues MGASA-2025-0280

MGASA-2025-0280 - Updated python3 packages fix security vulnerabilities

Mageia 9: Critical Rand Function Vulnerability in perl-Data-Entropy

MGASA-2025-0279 - Updated perl-Data-Entropy packages fix security vulnerability

Mageia 9 perl-File-Find-Rule Important Arbitrary Code Exec MGASA-2025-0278

MGASA-2025-0278 - Updated perl-File-Find-Rule packages fix security vulnerability