Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE: 2019:2189-1: moderate: openssl-1_1
An update that fixes two vulnerabilities is now available.
Debian's strongSwan Update Fixes DoS and Authentication Bypass
Multiple vulnerabilities were found in strongSwan, an IKE/IPsec suite. CVE-2026-78123 An undefined memory access vulnerability in the openssl plugin when handl…
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client …
Fedora 43 curl Update Fixes Authentication and TLS Issues
fix incomplete mTLS config matching in conn reuse (CVE-2026-8932) fix OpenLDAP SASL authentication bypass (CVE-2026-13608) fix OpenSSL pinning bypass (CVE-2026…
Fedora 44 curl Important mTLS and Authentication Bypass Fix 2026-a06b828d65
Fix incomplete mTLS config matching in conn reuse (CVE-2026-8932) Fix OpenLDAP SASL authentication bypass (CVE-2026-13608) Fix OpenSSL pinning bypass (CVE-2026…
Debian ruby-jwt Critical DoS Token Forging Vuln DLA-4787-1 CVE-2026-45363
ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. JWT.decode(token, '', true, algorithm: 'HS256') accepts an attacker-forged tok…
SUSE Snphost Important Information Leak Heap Overflow Vuln 2026-3642-1
A recent security update for snphost addresses seven vulnerabilities in OpenSSL affecting various SUSE Linux products, with multiple CVEs linked to critical is…
SUSE libkrun Important Buffer Overflow and Info Leak Vuln 2026-23070-1
SUSE released an important security update for libkrun fixing eight vulnerabilities, including issues with OpenSSL related to buffer overflows and memory manag…
SUSE Afterburn Important Security Update Resolution 2026-23071-1
SUSE released an important security update for afterburn, addressing 13 vulnerabilities, including multiple critical OpenSSL issues, along with various updates…
SUSE Himmelblau Important Buffer Overflow Fix 2026-3576-1
A new SUSE update addresses eight vulnerabilities, including buffer overflows in OpenSSL, with patches available for several products like SUSE Linux Enterpris…
Oracle 8 PHP Low Memory Corruption Vuln ELSA-2026-47750
Oracle Linux 8 has received security updates, including fixes for CVE-2026-14355 related to memory corruption in OpenSSL, along with various package updates an…
SUSE Afterburn Important Security Update 2026-22917-1 for 13 Threats
A security update for SUSE Linux Micro 6.0 addresses 13 vulnerabilities in afterburn, enhancing security with fixes for issues related to openssl, regex, and o…
SUSE Linux Micro 6.0 rust-keylime Important Security Update 2026-22921-1
A security update for rust-keylime addresses eight vulnerabilities, enhances OpenSSL, and provides fixes in SUSE Linux Micro 6.0, urging users to install throu…
SUSE Afterburn Key Security Update 2026-22827-1 for CVE-2026-25541
SUSE released an important security update for afterburn, addressing nine vulnerabilities related to OpenSSL and other components, with instructions for instal…
Debian 12 php8.2 Critical Buffer Overflow Fix DLA-4669-1 CVE-2026-14355
It was discovered that a buffer overflow in the implementation of AES Key Wrap with Padding in the openssl extension of PHP, a widely-used open source general …
Debian php8.4 Critical Memory Corruption DSA-6377-1 CVE-2026-14355
It was discovered that a buffer overflow in the implementation of AES Key Wrap with Padding in the openssl extension of PHP, a widely-used open source general …
Fedora 44 krb5 Moderate NegoEx DoS Flaws FEDORA-2026-8b43ea2f82
Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Add upstream patches to build against openssl 4.0 Make configure.ac work with autoconf 2.73
Fedora 44 perl-CryptX Moderate Key Recovery Risk CVE-2026-41564
0.088 2026-04-23 - Crypt::KeyDerivation - new functions: pbkdf1_openssl, bcrypt_pbkdf, scrypt_pbkdf, argon2_pbkdf - Crypt::Misc - new functions: random_v7uuid,…
Fedora 42 Coturn Important Security Bypass Fix CVE-2026-27624
Coturn 4.9.0 Multiple security fixes Fix to Web Admin password check Cleanup of deprecated OpenSSL APIs Fix for CVE-2026-27624: Bypass localhost and IP range b…
Fedora 43 Coturn Critical IPv4-Mapped Bypass Advisory 2026-8cb5571ddc
Coturn 4.9.0 Multiple security fixes Fix to Web Admin password check Cleanup of deprecated OpenSSL APIs Fix for CVE-2026-27624: Bypass localhost and IP range b…
Debian 11: Serious Buffer Overflow Flaw Detected in osslsigncode DLA-4426-1
A Buffer Overflow vulnerability has been found in osslsigncode, a OpenSSL based Authenticode signing tool for PE/MSI/Java CAB files, which possibly allows an m…
Fedora 42: bpfman Security Update CVE-2025-0977 Use-After-Free
This update fixes CVE-2025-0977 (RUSTSEC-2025-0004), a use-after-free vulnerability in the Rust openssl crate's ssl::select_next_proto function. The openssl cr…
Fedora 40: s390utils 2025-6f07616b52 Security Advisory Updates
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
Fedora 41: rustup 2025-f8be7978e3 Security Advisory Updates
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…