Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: xorg-x11-server-Xwayland 2025-2210d27149 Security Advisory Updates
xwayland 24.1.6 CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601
Debian LTS: DLA-4071-1: gst-plugins-good1.0 Security Advisory Updates
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or pot…
Debian LTS: DLA-4070-1: freerdp2 Security Advisory Updates and regression fix
Multiple vulnerabilties have been found in freelrdp2, a free implementation of the Remote Desktop Protocol (RDP) which potentially allows potential buffer over…
SUSE: 2025:0735-1 important: webkit2gtk3 Security Advisory Updates
* bsc#1234851 * bsc#1236946 Cross-References: * CVE-2024-27856
Debian LTS: DLA-4069-1: emacs Security Advisory Updates
Multiple vulnerabilities were discovered in GNU Emacs, the extensible, customisable, self-documenting, real-time display editor. CVE-2023-28617
Ubuntu 7307-1: xmltok library Security Advisory Updates
Libxmltok could be made to crash if it opened a specially crafted file.
Fedora 41: rpm-ostree 2025-3dfc505946 Security Advisory Updates
Merge branch 'f42' into f41 Merge branch 'rawhide' into f41 Fix merge conflict
Debian: DSA-5870-1: openh264 Security Advisory Updates
A heap-based buffer overflow flaw in the decoding functions of openh264, a codec library which supports H.264 encoding and decoding, may allow a remote attacke…
Mageia 2025-0081: proftpd Security Advisory Updates
A buffer overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a denial of service (DoS) on the FT…
Mageia 2025-0080: openssh Security Advisory Updates
Machine-in-the-middle attack vulnerability if verifyhostkeydns is enabled. (CVE-2025-26465) References: - https://bugs.mageia.org/show_bug.cgi?id=34036
SUSE: 2025:0722-1 moderate: vim Security Advisory Updates
* bsc#1229685 * bsc#1229822 * bsc#1230078 * bsc#1235695 * bsc#1236151
SUSE: 2025:0723-1 moderate: vim Security Advisory Updates
* bsc#1229685 * bsc#1229822 * bsc#1230078 * bsc#1235695 * bsc#1236151
SUSE: 2025:0719-1 moderate: Recommended Maven Security Advisory Updates
Cross-References: * CVE-2020-13936 CVSS scores:
Mageia 2025-0079: kernel, kmod-virtualbox & kmod-xtables-addons Security Advisory Updates
Upstream kernel version 6.6.79 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Mageia 2025-0078: kernel-linus Security Advisory Updates
Vanilla upstream kernel version 6.6.79 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mage…
Mageia 2025-0077: iniparser Security Advisory Updates
A heap-based buffer overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows an attacker to read out-of-bounds memory. (CVE-2025-0633) Referen…
Fedora 40: gnutls 2025-5e5783f0d1 Security Advisory Updates
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.
Fedora 40: libtasn1 2025-a5edb54660 Security Advisory Updates
Includes CVE fixes.
Fedora 40: openssl 2025-becf280371 Security Advisory Updates
Rebase to 3.2.4
SUSE: 2025:0713-1 important: the Linux Kernel Security Advisory Updates
* bsc#1236783 Cross-References: * CVE-2024-53104
Mageia 2025-0075: emacs Security Advisory Updates
A command injection flaw was found which could allow a remote, unauthenticated attacker to execute arbitrary shell commands by tricking users into visiting a s…
Mageia 2025-0074: vim Security Advisory Updates
A heap use-after-free was found in str_to_reg() in Vim
Mageia 2025-0072: krb5 Security Advisory Updates
Overflow when calculating ulog block size. (CVE-2025-24528) References: - https://bugs.mageia.org/show_bug.cgi?id=34040 - https://lists.fedoraproject.org/archi…
Ubuntu 7296-1: Linux kernel Security Advisory Updates
The system could be made to crash or run programs as an administrator.