Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-4074-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the Mari…
Debian LTS: DLA-4052-1: postgresql-13 Security Advisory Updates
A security issue was discovered in the PostgreSQL database system. Under certain usage patterns, improper neutralization of quoting syntax could make it possib…
Fedora 41: bind-dyndb-ldap 2025-3551f3ba1b Security Advisory Updates
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Fedora 41: bind 2025-3551f3ba1b Security Advisory Updates
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Debian: DSA-5863-1: libtasn1-6 Security Advisory Updates
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
CISA Warns of Active Exploits Targeting Trimble Cityworks Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
Fedora 40: fastd 2025-29fc4fefd5 Security Advisory Updates
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Fedora 41: fastd 2025-b895b18cfe Security Advisory Updates
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Debian: DSA-5856-1: redis Security Advisory Updates
Two security issues were discovered in Redis, a persistent key-value database, which could result in the execution of arbitrary code or denial of service.
Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool
As many as six security vulnerabilities have been disclosed in the popular Rsync file-synchronizing tool for Unix systems, some of which could be exploited to …
Fedora 41: xen 2025-933a9a977e Security Advisory Updates
work around debugedit bug to fix aarch64 builds xen-hypervisor %post doesn't load all needed grub2 modules update to xen-4.19.1 which includes Deadlock in x86 …
Fedora 40: webkitgtk 2024-4014fa4ecc Security Advisory Updates
Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the…
Fedora 41: webkitgtk 2024-472d01833c Security Advisory Updates
Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the…
Debian LTS: DLA-3977-1: xfpt Security Advisory Updates
An issue has been found in xfpt, a tool to generate XML from plain tex. The issue is about bad handling of input data, which may result in a stack-based buffer…
Fedora 40: xen 2024-7c2cfa2fe5 Security Advisory Updates
Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818] libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]
Debian LTS: DLA-3973-1: redis Security Advisory Updates
Multiple vulnerabilities have been fixed in the key¢''value database Redis. CVE-2022-35977
Fedora 39: libsoup3 2024-a059ea1dfc Security Advisory Updates
Add patches to fix: CVE-2024-52530 libsoup3: HTTP request smuggling via stripping null bytes from the ends of header names (bug #2325358) CVE-2024-52532 libsou…
Fedora 41: php 2024-3891a08c9e Security Advisory Updates
PHP version 8.3.14 (21 Nov 2024) CLI: Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang). (ilutov) Fixed bug G…
Fedora 41: lemonldap-ng 2024-7bc1df53fc Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…
Fedora 39: lemonldap-ng 2024-d0a6c4ac13 Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…
Fedora 40: lemonldap-ng 2024-e457192aa2 Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…
Debian LTS: DLA-3951-1: curl Security Advisory Updates
curl a command line tool for transferring data with URL syntax was affected by CVE-2024-8096. When the TLS backend is GnuTLS, curl may incorrectly handle OCSP …
Mageia 2024-0351: python-werkzeug Security Advisory Updates
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werk…