Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS DLA-4802-1 Python-Django Critical Cache Exposure
Multiple vulnerabilities were discovered in Django, the Python-based web development framework: CVE-2026-48587 Potential exposure of private data via whitespac…
Fedora 43 perl-Imager Key Concerns with TGA Color Map and Palette
1.036 bump - Fix CVE-2026-93019 (TGA large color map size interpreted as negative) - Fix CVE-2026-93018 (paletted images: out-of-range color index returned uni…
Fedora 44 perl-Imager Update CVEs 2026-93019 2026-93018 Security Advisory
1.036 bump - Fix CVE-2026-93019 (TGA large color map size interpreted as negative) - Fix CVE-2026-93018 (paletted images: out-of-range color index returned uni…
Fedora 43 perl-Catalyst-Plugin-Static-Simple Key Cache Vulnerability 2026
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
Debian Libdbi-perl Medium Memory Corruption DoS CVE-2026-78030 DLA-4798-1
Vulnerabilities were discovered in libdbi-perl, the Perl Database Interface (DBI), which may lead to memory corruption, denial of service, or arbitrary module …
Fedora 45 Parted Security Fix CVE-2026-89085 CVE-2026-89088
Removed included patches version 3.7.13 (bcl) maint: Update to latest gnulib and bootstrap script (bcl) parted: Fix partition number allocation in do_print (bc…
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
Ubuntu 26.04 Beets Media Injection Vulnerability USN-8747-1 CVE-2026-42052
Beets could allow malicious media metadata to compromise its web interface.
Linux dm-integrity Patch Targets Writeback Checksum Mismatches
A Linux dm-integrity patch posted on Aug 24, 2026 targets a writeback race that can leave stored data with the wrong integrity tag after a crash. Chen Cheng pr…
SUSE Linux Kernel Important Live Patch 49 Advisory 2026-3766-1
A security update for SUSE Linux Kernel fixes 18 vulnerabilities addressing various issues and bugs, including memory leaks and data handling problems, enhanci…
openSUSE postgresql15 Important 24 Issues Fixed 2026-11553-1
An update for PostgreSQL on openSUSE Tumbleweed addresses 24 vulnerabilities, enhancing security with fixes for multiple CVEs rated from moderate to high sever…
Rocky Linux 9 RLSA-2026-56973 MySQL Important Performance Issues
Rocky Linux 9 has released an important security update for MySQL 8.4, addressing multiple unspecified vulnerabilities, bugs, and enhancements to improve datab…
Fedora 44 GitPython 3.1.59 Update Security Fixes 2026-166bfc4f18
The Fedora 44 update for GitPython version 3.1.59 addresses multiple security vulnerabilities and enhances performance for interacting with Git repositories, o…
Oracle Linux 10 gstreamer1-plugins-good Vulnerability CVE-2026-73433
Oracle Linux 10 has updated packages addressing CVEs 2026-73433 and 2026-73434, which involve fixes for out-of-bounds reads in the AVI demuxer and FUJIFILM met…
SUSE java-1_8_0-openjdk Important Denial Of Service Vulnern 2026-3623-1
A SUSE security update addresses ten vulnerabilities in java-1_8_0-openjdk, improving system security by fixing issues related to data access and denial of ser…
SUSE Java Update Important Security Fix CVE-2026-8400 for 14 Issues
A security update for java-1_8_0-ibm resolves 14 vulnerabilities affecting several SUSE Linux products, enhancing security by addressing issues including unaut…
Debian 12 DLA-4739-1 Chromium Important Security Flaws Fixed
Debian LTS Advisory DLA-4739-1 highlights security vulnerabilities in Chromium that could lead to code execution, denial of service, or data exposure, recommen…
SUSE rpm Important Buffer Overflow Security Advisory SUSE-SU-2026-3600-1
A security update for rpm addresses a critical heap buffer overflow vulnerability in NDB database backend, affecting several SUSE products and recommending ins…
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.…
Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1
Debian has released an advisory for OpenJDK-21 addressing multiple vulnerabilities that could lead to certificate validation issues, denial of service, or data…
Fedora 43 pgAdmin4 Security Advisory New Fixes for Multiple Risks
Fedora has released an update for pgAdmin 4 to version 9.17, addressing various bugs and vulnerabilities such as unauthenticated data manipulation and remote c…
Mageia Python-Django Medium Exposure Issues Vuln 2026-0324
Mageia's security update addresses multiple vulnerabilities in Django affecting release 10, including potential data exposure and various CVEs related to cooki…
Fedora 43 curl Critical Auth Leak Fixes & Vulnerabilities 2026-097fb2e7e9
A security update for curl version 8.15.0 on Fedora 43 addresses multiple vulnerabilities including information leaks and improper validation, enhancing the to…
Oracle Linux 7 Kernel Important Security Update ELSA-2026-500121
Oracle Linux 7 has received kernel updates addressing multiple security vulnerabilities, including fixes for KVM-related issues and XFS data handling, along wi…