Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: kubernetes1.28 Moderate CVE-2025-22872 Security Advisory
* bsc#1241865 Cross-References: * CVE-2025-22872
Oracle8: python3.12-setuptools Moderate Security Advisory ELSA-2025-11044
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
SUSE: Important Security Advisories for Xen CVE-2024-28956, CVE-2024-36350
* bsc#1027519 * bsc#1234282 * bsc#1238043 * bsc#1238896 * bsc#1243117
Oracle Linux 7 ELSA-2025-9331: Important libvpx Security Advisory
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citi…
Manufacturing Security: Why Default Passwords Must Go
If you didn't hear about Iranian hackers breaching US water facilities, it's because they only managed to control a single pressure station serving 7,000 peopl…
SUSE Linux: 2025:02214-1 important: tomcat security advisory
* bsc#1243815 * bsc#1244649 * bsc#1244656 Cross-References:
SUSE Security Advisory 2025:02198-1 - runc File Creation Vulnerability
* bsc#1230092 Cross-References: * CVE-2024-45310
openSUSE Security Advisory: 2025:02190-1 Moderate Redis Stack Overflow Risk
* bsc#1243804 Cross-References: * CVE-2025-27151
CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabil…
CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added two critical security flaws impacting Erlang/Open Telecom Platform (OTP) SSH a…
Fedora 42: FEDORA-2025-c04e5b95f1 Critical Security Advisory
Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969, CVE-2025-46420, CVE-2025-46421, CVE-2025-4945
SUSE 15 SP7 Security Advisory 2025:01525-1: Java DoS Threats Fixed
* bsc#1241274 * bsc#1241275 * bsc#1241276 Cross-References:
Ubuntu 24.10, 24.04 LTS Security Advisory for Twig Information Exposure
Twig could be made to expose sensitive information if it opened a specially crafted file.
SUSE Linux 15 moderate advisory: postgresql15 encoding security patch
* bsc#1242931 Cross-References: * CVE-2025-4207
Fedora 41: Security Advisory FEDORA-2025-051becf4f2 on xz 5.8.1
xz 5.8.1
Rocky Linux: RLEA-2024:1138 20 enhancement update Security Advisories Updates
nodejs:20 enhancement update
Rocky Linux: RLEA-2024:1140 18 enhancement update Security Advisories Updates
nodejs:18 enhancement update
Rocky Linux: RLEA-2024:2162 postgresql Security Advisories Updates
new module: postgresql:16
Mageia 9: 2025-0142 security advisory: kernel and modules patch
Upstream kernel version 6.6.87 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Debian 11: DLA-4143-1 Critical: glibc Buffer Overflow Security Advisory
A flaw was discovered in the implementation of the assert() function in the GNU C Library, the C standard library implementation used by Debian. When the asser…
Fedora 42: Critical Security Advisory for pgbouncer Version 1.24.1
Update to 1.24.1, fixes CVE-2025-2291.
CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a medium-severity security flaw impacting Microsoft Windows to its Known Exp…
CISA Flags Actively Exploited Vulnerability in SonicWall SMA Devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting SonicWall Secure Mobile Access (SMA) 100 Series g…