Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 39: nginx-mod-modsecurity 2024-8ba5080dfa Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
Rocky Linux: RLSA-2024:4935 freeradius security update Security Advisories Updates
Important: freeradius security update
Rocky Linux: RLSA-2024:4928 kernel security update Security Advisories Updates
Moderate: kernel security update
Ubuntu 6792-1: Flask-Security Security Advisory Updates
Flask-Security could be made to bypass URL validation and redirect to arbitary URL.
Mageia 2024-0193: roundcubemail Security Advisory Updates
This is a security update to the stable version 1.6 of Roundcube Webmail. Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes. Repo…
CISA and OpenSSF Release Framework for Package Repository Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced that it's partnering with the Open Source Security Foundation (OpenSSF) Securing Sof…
CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog ba…
U.S. Government Agencies' Emails Compromised in China-Backed Cyber Attack
An unnamed Federal Civilian Executive Branch (FCEB) agency in the U.S. detected anomalous email activity in mid-June 2023, leading to Microsoft's discovery of …
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco …
Fedora 43 WordPress 6.9.9 Security Advisory RCE CVE-2026-87902
WordPress 6.9.9 Security Release Security updates included in this release Unauthenticated path traversal in page-template resolution leading to conditional RC…
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…
Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws impacting Adobe ColdFusion and Oracle Agile Product Lifecycle Man…
Oracle9: ELSA-2025-1329: doxygen security Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2025-1517: libxml2 security Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle7: ELSA-2025-0714: rsync security Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-1446: nodejs:18 security Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-1350: libxml2 security Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-1330: openssl security Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-1262: kernel security Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2025-1068: kernel security Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle7: ELSA-2025-0319: raptor2 security Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-1066: firefox security Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-0925: bzip2 security Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2025-0923: buildah security Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: