Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS Firefox ESR Blocks Compromised eMudhra Certificates
This update blocks compromised intermediate certificates issued by the eMudhra CA. Most users will have these certs already blocked by the OneCRL feature provi…
Debian Firefox ESR Update Blocks Access to eMudhra Certificates
This update blocks compromised intermediate certificates issued by the eMudhra CA. Most users will have these certs already blocked by the OneCRL feature provi…
Ubuntu ca-certificates Update Removes Compromised Root CAs
The CA certificates in the ca-certificates package were updated.
Fedora 43 perl-Net-IDN-Encode Fixes Punycode Read and Data Leak
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak …
Fedora 44 perl-Net-IDN-Encode Addresses Punycode Read and Data Leak
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak …
SUSE alsa Update Fixes Data Leak and Configuration Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE Leap 15.5 alsa Fixes Data Leak and Application Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE podman Important Environment Leak and Symlink Flaw 2026-22089-1
An update that solves 2 vulnerabilities and has 3 bug fixes can now be installed.
openSUSE Leap 16.0 openvpn Major Remote Access Memory Leak CVE-2026-22072-1
An update that solves 9 vulnerabilities and has 9 bug fixes can now be installed.
openSUSE Helm Major Information Breach and Crash Fix 2026-22057-1
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
SUSE libsoup2 Important Remote Denial and Memory Leak Issues 2026-4703-1
An update that solves 15 vulnerabilities can now be installed.
Rocky Linux Emacs Key Vulnerabilities on Command Injection and Info Leak
Important: emacs security update
Debian Trixie DSA-6557-1 ntfs-3g Critical Security Flaw Root Escalation
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE, which could result in denial of service, information leak or potentially…
SUSE libsoup Important Denial of Service Memory Leak Fix 2026-4616-1
An update that solves nine vulnerabilities can now be installed.
Debian LTS Important Path Traversal Denial of Service vuln DLA-4831-1
Multiple security issues were discovered in libgit2, a low-level Git library, which could result in path traversal, denial of service, credential leaks, or the…
AlmaLinux 10 curl Update Addresses Credential Leaks and DoS
curl security update
Debian LTS DLA-4820-1 node-lodash Critical Integrity Breach
Several vulnerabilities were discovered in node-lodash, a Node.js module providing utility functions for common programming tasks. CVE-2025-13465 Prototype pol…
Fedora 43 Xen Important Memory Leak and DoS Threats XSA-509 CVE-2026-62437
x86: DMs may cause mem leak by IRQ binding [XSA-509, CVE-2026-62437] x86: improper handling of HVM emulation return codes [XSA-510, CVE-2026-79602] Uncondition…
Fedora 44 Xen Important Memory Leak DoS CVE-2026-62437 CVE-2026-79602
x86: DMs may cause mem leak by IRQ binding [XSA-509, CVE-2026-62437] x86: improper handling of HVM emulation return codes [XSA-510, CVE-2026-79602] Uncondition…
openSUSE sccache Major Buffer Overflow and Memory Leak Fix for 2026-21982-1
An update that solves 19 vulnerabilities and has 16 bug fixes can now be installed.
Debian WebKitGTK Important Heap Corruption Privilege Escalation DSA-6534-1
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT…
Fedora 44 VLC 3.0.24 Important Insights on Information Leak and Code Risks
VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Switch GUI to Qt6 Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP plugin
SUSE ImageMagick Important Buffer Overflow and Memory Leak Fix 2026-4376-1
An update that solves 14 vulnerabilities can now be installed.