Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 44 JFrog-CLI Important Security Issue Fix 2026-6b87863841
Upstream release 2.98.0. https://github.com/jfrog/jfrog-cli/releases/tag/v2.98.0 Resolves the following security issues: CVE-2025-11579 CVE-2025-66564 CVE-2026…
Debian 11 Bullseye PolicyKit-1 Denial of Service Notice DLA-4553-1
Multiple vulnerabilities where identified in polkit, a toolkit for defining and handling the policy that allows unprivileged processes to speak to privileged p…
Fedora 42 libcap Important Security Patch Advisory FEDORA-2026-d4c643a2ba
An update to patch a security vulnerability. Advisory: https://github.com/AndrewGMorgan/libcap_mirror/security/advisories/GHS A-f78v-p5hx-m7hh Changelog * Mon …
Fedora 42 Nix Critical Privilege Escalation Fix GHSA-g3g9-5vj6-r3gj
update to 2.31.4 fixes nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860) https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj
Fedora 43 libexif Medium Denial of Service Info Leak Vulnerability
Update to 0.6.26, fixing several CVEs https://github.com/libexif/libexif/releases/tag/v0.6.26
Fedora 43 Nix 2.31.4 Serious Privilege Escalation Flaw GHSA-g3g9-5vj6-r3gj
update to 2.31.4 fixes nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860): https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj
Fedora 42 python-cairosvg Moderate Exponential DoS Fix 2026-a2778fcae6
Security fix for CVE-2026-31899: https://nvd.nist.gov/vuln/detail/CVE-2026-31899 / https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c Ex…
Fedora 43 libcap Critical Security Patch Advisory 2026-ccc66d5ab4
An update to patch a security vulnerability. Advisory: https://github.com/AndrewGMorgan/libcap_mirror/security/advisories/GHS A-f78v-p5hx-m7hh Changelog * Mon …
Fedora 42 Domoticz Important XSS Security Flaw Advisory 2026-627f2db2b7
Too many changes to list. See: https://github.com/domoticz/domoticz/blob/2026.1/History.txt This also fixes a security vulnerability.
Fedora 42 cpp-httplib Critical TLS Bypass Fix CVE-2026-32627
Update to 0.37.2 Fixes silent TLS certificate verification bypass on HTTPS Redirect via proxy (CVE-2026-32627, rhbz#2448105) Source: https://github.com/yhirose…
Fedora 42 Security Update Addresses Timekeeping Service DoS Vulnerabilities
Update to version 1.7.1. Includes the fix for CVE-2026-26076: https://github.com/pendulum-project/ntpd- rs/security/advisories/GHSA-c7j7-rmvr-fjmv Release note…
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours
A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim's clo…
Fedora 42 python-uv-build DoS Attack Vulnerability Update 2026-086a367966
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
Fedora 42: cpp-httplib Critical Denial of Service Issues 2026-3b0e5b457d
Update to 0.30.1 Denial of service (DOS) using zip bomb (CVE-2026-22776) CRLF injection in http headers (CVE-2026-21428) Untrusted HTTP Header Handling: X-Forw…
Fedora 43: complyctl Vulnerability CVE-2025-58188 with Moderate Panic Risk
Update to Upstream version 0.1.2 - https://github.com/complytime/complyctl/releases/tag/v0.1.2
Fedora 43: python-pdfminer Security Fix CVE-2025-64512 Advisory
Update to 20251230: security fix for CVE-2025-64512 https://github.com/pdfminer/pdfminer.six/blob/20251230/CHANGELOG.md
Fedora 43: direwolf Critical Reachable Assertion and Buffer Overflow DoS
https://github.com/wb2osz/direwolf/releases/tag/1.8.1
Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors
In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining. In Au…
Debian 11: Critical ReDoS DoS Advisory DLA-4418-1 for python-mechanize
Erik Krogh Kristensen and Rasmus Petersen from the GitHub Security Lab discovered a ReDoS (Regular Expression Denial of Service) vulnerability in python-mechan…
Fedora 42: Fix for mod_md Bug Related to CVE-2025-55753 Advisory
This update includes the latest upstream release of mod_md, with various bug fixes and enhancements. See https://github.com/icing/mod_md/releases for more info…
Fedora 43: mod_md Important Apache HTTP Server Fix CVE-2025-55753
This update includes the latest upstream release of mod_md, with various bug fixes and enhancements. See https://github.com/icing/mod_md/releases for more info…
Ubuntu 23.04: xyz Enhanced Security Vulnerabilities Update 2025-4bd12a45g3
Patch two newly-reported memory-safety bugs in stb_image: https://github.com/nothings/stb/issues/1860 https://github.com/nothings/stb/issues/1861
Debian 11: r-cran-gh Important API Auth Flaw DLA-4378-1 CVE-2025-54956
A vulnerability has been discovered in r-cran-gh, a GNU R Minimal client to access the 'GitHub' 'API'. CVE-2025-54956
Fedora 43: Critical Buffer Overflow Vulnerability in rust-tikv-jemalloc-sys
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydan…