Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: openssh 2025-62f6cb2785 Security Advisory Updates
Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2…
Fedora 41: chromium 2025-acbfdd26a1 Security Advisory Updates
Update to 133.0.6943.126 CVE-2025-0999: Heap buffer overflow in V8 CVE-2025-1426: Heap buffer overflow in GPU CVE-2025-1006: Use after free in Network
Debian LTS: DLA-4066-1: fort-validator Security Advisory Updates
Multiple vulnerabilities have been discovered in fort-validator, a RPKI validator and RTR server. CVE-2024-45234
Debian LTS: DLA-4065-1: krb5 Security Advisory Updates
MIT krb5 a popular implementation of Kerberos 5 protocol was affected by a vulnerability. An authenticated attacker can cause kadmind to write beyond
Fedora 41: vaultwarden 2025-5f07738947 Security Advisory Updates
update to 1.33.2 fix CVE-2025-24898
Fedora 40: vaultwarden 2025-0e5d6864d8 Security Advisory Updates
update to 1.33.2 fix CVE-2025-24898
Debian LTS: DLA-4064-1: libxml2 Security Advisory Updates
Multiple vulnerabilities have been found in libxml2, a library providing support to read, modify and write XML and HTML files. These vulnerabilities could pote…
Fedora 40: chromium 2025-c0c371a0b6 Security Advisory Updates
Update to 133.0.6943.126 CVE-2025-0999: Heap buffer overflow in V8 CVE-2025-1426: Heap buffer overflow in GPU CVE-2025-1006: Use after free in Network
Fedora 40: proftpd 2025-d37ad923f5 Security Advisory Updates
This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to crash …
Fedora 41: proftpd 2025-835949b994 Security Advisory Updates
This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to crash …
SUSE: 2025:0639-1 important: webkit2gtk3 Security Advisory Updates
* bsc#1236946 Cross-References: * CVE-2024-27856 * CVE-2024-54543
SUSE: 2025:0629-1 important: grub2 Security Advisory Updates
* bsc#1233606 * bsc#1233608 * bsc#1233609 * bsc#1233610 * bsc#1233612
SUSE: 2025:0608-1 important: ovmf Security Advisory Updates
* bsc#1237084 Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6
SUSE: 2025:0609-1 important: ovmf Security Advisory Updates
* bsc#1237084 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE: 2025:0611-1 important: google-osconfig-agent Security Advisory Updates
* bsc#1236560 Cross-References: * CVE-2024-45339
SUSE: 2025:0599-1 important: emacs Security Advisory Updates
* bsc#1237091 Cross-References: * CVE-2025-1244
SUSE: 2025:0601-1 important: brise Security Advisory Updates
* bsc#1234597 * bsc#1235573 Cross-References: * CVE-2024-45337
SUSE: 2025:0602-1 important: helm Security Advisory Updates
* bsc#1234482 * bsc#1235318 Cross-References: * CVE-2024-45337
openSUSE: 2025:0070-1 important: chromium Advisory Security Update
An update that fixes three vulnerabilities is now available.
CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks
A high-severity security flaw impacting the Craft content management system (CMS) has been added by the U.S. Cybersecurity and Infrastructure Security Agency (…
Fedora 40: python3.12 2025-2543c24e23 Security Advisory Updates
Update to 3.12.9
Ubuntu 7275-2: Libtasn1 Security Advisory Updates
Libtasn1 could be made to crash if it received specially crafted network traffic.
Ubuntu 7281-1: GnuTLS Security Advisory Updates
GnuTLS could be made to consume resources if it decoded specially crafted certificates.
Ubuntu 7280-1: Python Security Advisory Updates
Python could allow Server-Side Request Forgery attacks.