Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42: uv 0.9.5 Important Security Fix CVE-2025-62518
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Fedora 42: Critical CVE-2025-62518 in rust-reqsign-http-send-reqwest
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Fedora 42: rust-tikv-jemallocator Critical CVE-2025-62518 Parser Issue
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Critical PAX Header Fix for rust-reqsign-file-read-tokio in Fedora 42
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Fedora 42: rust-reqsign-core Vulnerability Patch CVE-2025-62518
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Fedora 41 pandoc-cli Important SSRF Fix FEDORA-2025-ef1d49c67b
pandoc-cli: enable pandoc server (semantically safe) with pandoc-server-0.1.0.5 pandoc: apply upstream patch to avoid error with ConTeXt (#2365309) https://git…
Fedora 41 Addresses Critical Server-Side Request Forgery Issue in Pandoc
pandoc-cli: enable pandoc server (semantically safe) with pandoc-server-0.1.0.5 pandoc: apply upstream patch to avoid error with ConTeXt (#2365309) https://git…
Fedora 41: toolbox Critical Fixes for CVE-2025-23266, GHSA-fv92-fjc5-jj9h
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Fedora 42: toolbox Security Updates for CVE-2025-23266 CVE-2025-23267
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension
Cybersecurity researchers have flagged a supply chain attack targeting a Microsoft Visual Studio Code (VS Code) extension called Ethcode that has been installe…
Fedora 42: 2025-7faa0bc6e5 moderate: mod_security DoS risk
This update includes mod_security version 2.9.9 which addresses CVE-2025-47947 and includes various bug fixes. See https://github.com/owasp- modsecurity/ModSec…
Fedora 41: 2025-719f4a7313 moderate: mod_security DoS vulnerability
This update includes mod_security version 2.9.9 which addresses CVE-2025-47947 and includes various bug fixes. See https://github.com/owasp- modsecurity/ModSec…
Fedora 41: mozilla-ublock-origin 2025-b0f2570b61
Latest upstream release. Changelog: https://github.com/gorhill/uBlock/releases/tag/1.64.0 . Fixes CVE-2025-4215 .
SafeLine WAF: Open Source Web Application Firewall with Zero-Day Detection and Bot Protection
From zero-day exploits to large-scale bot attacks — the demand for a powerful, self-hosted, and user-friendly web application security solution has never been …
Fedora 42: mozilla-ublock-origin 2025-01794be9b3
Latest upstream release. Changelog: https://github.com/gorhill/uBlock/releases/tag/1.64.0 . Fixes CVE-2025-4215 .
Fedora 41: woff 2025-49614a7cdf
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Fedora 41: sfnt2woff-zopfli 2025-a2a56326b3
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Fedora 42: woff 2025-893d125ddd
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Fedora 42: sfnt2woff-zopfli 2025-3140334065
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Fedora 41 ntpd-rs 1.5.0 critical: DoS vulnerability fix
Update to version 1.5.0 (for now, without PPS feature enabled due to potential correctness issues in the code). Release notes: https://github.com/pendulum-proj…
Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access
Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of grant…
Fedora 40: SDL2_sound 2025-5ef10f8485 Security Advisory Updates
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Fedora 41: SDL2_sound 2025-82714dbb22 Security Advisory Updates
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Fedora 41: sympa 2024-88ad2bee84 Security Advisory Updates
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74