Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…
Fedora 40: yq 2025-93d6242840 Security Advisory Updates
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
Fedora 40: fastd 2025-29fc4fefd5 Security Advisory Updates
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Fedora 40: ovn 2025-721a8bada2 Security Advisory Updates
Update the OVN sources to upstream release v24.09.2
Mageia 2025-0035: libreoffice Security Advisory Updates
Path traversal leading to arbitrary .ttf file write. (CVE-2024-12425) URL fetching can be used to exfiltrate arbitrary INI file values and environment variable…
SUSE: 2025:0345-1 moderate: openssl-1_1 Security Advisory Updates
* bsc#1236136 Cross-References: * CVE-2024-13176
SUSE: 2025:0346-1 moderate: ignition Security Advisory Updates
* bsc#1236518 Cross-References: * CVE-2023-45288
SUSE: 2025:0348-1 important: libxml2 Security Advisory Updates
* bsc#1236460 Cross-References: * CVE-2022-49043
Fedora 41: chromium 2025-2525ddc3f2 Security Advisory Updates
Updated to 132.0.6834.159 * Medium CVE-2025-0762: Use after free in DevTools
Fedora 41: yq 2025-cd51e0177b Security Advisory Updates
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
Fedora 41: fastd 2025-b895b18cfe Security Advisory Updates
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Fedora 41: ovn 2025-46e6440101 Security Advisory Updates
Update the OVN sources to upstream release v24.09.2
Mageia 2025-0034: libxml2 Security Advisory Updates
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. (CVE-2022-49043) References: - https://bugs.mageia.org/show_bug.cgi?id=33975
openSUSE: 2025:0052-1 moderate: python-asteval Advisory Security Update
An update that fixes one vulnerability is now available.
SUSE: 2025:0340-1 moderate: rsync Security Advisory Updates
* bsc#1233760 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE: 2025:0341-1 important: libxml2 Security Advisory Updates
* bsc#1236460 Cross-References: * CVE-2022-49043
Mageia 2025-0033: redis Security Advisory Updates
Redis' Lua library commands may lead to remote code execution. (CVE-2024-46981) Redis allows denial-of-service due to malformed ACL selectors. (CVE-2024-51741)
Debian: DSA-5857-1: openjdk-17 Security Advisory Updates
A vulnerability has been discovered in the OpenJDK Java runtime, which may result in authorisation bypass or information disclosure. For the stable distributio…
Oracle7: ELSA-2024-11344: gstreamer1-plugins-base and gstreamer1-plugins-good Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
SUSE: 2025:0335-1 important: xrdp Security Advisory Updates
* bsc#1227769 Cross-References: * CVE-2024-39917
SUSE: 2025:0336-1 important: xrdp Security Advisory Updates
* bsc#1227769 Cross-References: * CVE-2024-39917
Debian LTS: DLA-4041-1: python-aiohttp Security Advisory Updates
Several issues have been found in aiohttp, an asynchronous HTTP client/server framework for asyncio and Python. Those issues are related to the HTTP parser, li…
SUSE: 2025:0325-1 important: clamav Security Advisory Updates
* bsc#1102840 * bsc#1103032 * bsc#1180296 * bsc#1202986 * bsc#1211594
SUSE: 2025:0327-1 important: clamav Security Advisory Updates
* bsc#1102840 * bsc#1103032 * bsc#1180296 * bsc#1202986 * bsc#1211594