Cybersecurity News

Mageia 9: MGASA-2025-0219 Kernel Important Remote Access Issue

Upstream kernel version 6.6.101 fixes bugs and vulnerabilities. The kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages have been updated to work wi…

Gentoo: PHP Library Remote Code Execution Vulnerabilities GLSA-202510-07

Multiple vulnerabilities have been discovered in Composer, the worst of which can lead to arbitrary code execution.

PHP

SUSE: redis Important Remote Code Exec & DoS Vulnerability 2025:02579-1

* bsc#1244795 * bsc#1246058 * bsc#1246059 Cross-References:

Linux Databases

Critical Buffer Overflow Patch in Fedora 41 for Cloud-Init CVE-2024-11584

Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …

Linux

Fedora 42: Important Permission Issues in cloud-init with CVE-2024-6174

Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …

Linux

SUSE: Salt Important Security Update CVE-2024-38822 and Others 2025:02534-1

* bsc#1236621 * bsc#1243268 * bsc#1244561 * bsc#1244564 * bsc#1244565

Linux

openSUSE: ruby3.4-rubygem-rails High CVE-2025-54315 Notice

Linux

openSUSE Leap 15.6: Critical Remote Code Execution in gstreamer-plugins-bad

An update that fixes one vulnerability is now available.

Linux

openSUSE: Konsole Important Remote Code Exec Vulnerability 2025:0206-1

An update that fixes one vulnerability is now available.

Linux

Mageia 9: Sudo Important Vulnerability Update ID MGASA-2025-0213

CVE-2025-32462 - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to exe…

CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security flaws impacting SysAid IT support software to its Known Exploited Vulnerabi…

Serious Remote Code Execution Flaws in Ruby Sinatra for Ubuntu 22.04

Several security issues were fixed in Sinatra.

Linux

openSUSE: Linux Kernel Important Update for CVE-2024-53146 and Others

Linux

openSUSE: kubernetes1.26 Moderate Unquoted Attribute Fix CVE-2025-22872

* bsc#1229008 * bsc#1241865 * bsc#1245087 Cross-References:

Linux Kubernetes

SUSE: Poppler Critical Integer Overflow CVE-2025-52886 Security Notice

* bsc#1245625 Cross-References: * CVE-2025-52886

Linux

openSUSE: Advisory 2025:02309-1 for Protobuf Crash Fix CVE-2025-4565

Linux

SUSE: Protobuf Moderate Crash Risk Fix CVE-2025-4565 2025:02309-1

* bsc#1244663 Cross-References: * CVE-2025-4565

Linux

SUSE: Protobuf Moderate Recursion Issue Advisory 2025:02310-1 CVE-2025-4565

* bsc#1244663 Cross-References: * CVE-2025-4565

Linux

SUSE Leap: Protobuf Moderate Denial of Service Risk CVE-2025-4565

* bsc#1244663 Cross-References: * CVE-2025-4565

Linux

Debian 11: DLA-4240-1 important: redis DoS and remote code execution

Two issues were discovered in Redis, the key-value database: * CVE-2025-32023: An authenticated user may have used a specially-crafted string to trigger a stac…

Linux Databases

Mageia 9: MGASA-2025-0206 important: gnupg2 key validity issue

Key validity not computed when key is certified by a trusted "certify-only" key (regression due to patch for CVE-2025-30258) References: - https://bugs.mageia.…

Debian 11: DLA-4238-1 important: update for sslh available now

It was discovered that there was a so-called "link following" vulnerability in sslh, a protocol multiplexor often used to share SSH and HTTPS on the same port.

Linux

Ubuntu 25.04: USN-7626-1 critical: Git remote code execution

Several security issues were fixed in Git.

Linux

Ubuntu 25.04: USN-7619-1 critical: libssh remote code execution

Several security issues were fixed in libssh.

Linux