Cybersecurity News

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…

Apache

Fedora 40: yq 2025-93d6242840 Security Advisory Updates

Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338

Linux

Fedora 40: fastd 2025-29fc4fefd5 Security Advisory Updates

This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…

Linux

Mageia 2025-0035: libreoffice Security Advisory Updates

Path traversal leading to arbitrary .ttf file write. (CVE-2024-12425) URL fetching can be used to exfiltrate arbitrary INI file values and environment variable…

SUSE: 2025:0345-1 moderate: openssl-1_1 Security Advisory Updates

* bsc#1236136 Cross-References: * CVE-2024-13176

Linux OpenSSL

SUSE: 2025:0346-1 moderate: ignition Security Advisory Updates

* bsc#1236518 Cross-References: * CVE-2023-45288

Linux

SUSE: 2025:0348-1 important: libxml2 Security Advisory Updates

* bsc#1236460 Cross-References: * CVE-2022-49043

Linux

Fedora 41: chromium 2025-2525ddc3f2 Security Advisory Updates

Updated to 132.0.6834.159 * Medium CVE-2025-0762: Use after free in DevTools

Linux Chrome

Fedora 41: yq 2025-cd51e0177b Security Advisory Updates

Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338

Linux

Fedora 41: fastd 2025-b895b18cfe Security Advisory Updates

This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…

Linux

Mageia 2025-0034: libxml2 Security Advisory Updates

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. (CVE-2022-49043) References: - https://bugs.mageia.org/show_bug.cgi?id=33975

openSUSE: 2025:0052-1 moderate: python-asteval Advisory Security Update

An update that fixes one vulnerability is now available.

Linux

SUSE: 2025:0341-1 important: libxml2 Security Advisory Updates

* bsc#1236460 Cross-References: * CVE-2022-49043

Linux

Mageia 2025-0033: redis Security Advisory Updates

Redis' Lua library commands may lead to remote code execution. (CVE-2024-46981) Redis allows denial-of-service due to malformed ACL selectors. (CVE-2024-51741)

Databases

Debian: DSA-5857-1: openjdk-17 Security Advisory Updates

A vulnerability has been discovered in the OpenJDK Java runtime, which may result in authorisation bypass or information disclosure. For the stable distributio…

Linux

SUSE: 2025:0335-1 important: xrdp Security Advisory Updates

* bsc#1227769 Cross-References: * CVE-2024-39917

Linux

SUSE: 2025:0336-1 important: xrdp Security Advisory Updates

* bsc#1227769 Cross-References: * CVE-2024-39917

Linux

SUSE: 2025:0318-1 moderate: ignition Security Advisory Updates

* bsc#1236518 Cross-References: * CVE-2023-45288

Linux

SUSE: 2025:0319-1 important: buildah Security Advisory Updates

* bsc#1236272 Cross-References: * CVE-2024-11218 * CVE-2024-9407

Linux

SUSE: 2025:0320-1 important: buildah Security Advisory Updates

* bsc#1236272 Cross-References: * CVE-2024-11218 * CVE-2024-9407

Linux

Fedora 40: chromium 2025-82ba6b8dc5 Security Advisory Updates

Updated to 132.0.6834.159 * Medium CVE-2025-0762: Use after free in DevTools

Linux Chrome

Fedora 40: nodejs20 2025-54958ff9e2 Security Advisory Updates

Rebase to 20.18.2 Resolves: CVE-2025-22150 CVE-2025-23085 CVE-2025-23083

Linux

Fedora 40: nodejs18 2025-cc8f9d8943 Security Advisory Updates

Update to version 18.20.6 (rhbz#2341760) (rhbz#2340936) (rhbz#2300997) Resolves CVE-2025-23084

Linux

Fedora 41: nodejs20 2025-76fc32d433 Security Advisory Updates

Rebase to 20.18.2 Resolves: CVE-2025-22150 CVE-2025-23085 CVE-2025-23083

Linux