Cybersecurity News

Mageia 2025-0031: clamav Security Advisory Updates

ClamAV OLE2 File Format Decryption Denial of Service Vulnerability. (CVE-2025-20128) References: - https://bugs.mageia.org/show_bug.cgi?id=33969

Mageia 2025-0030: kernel, kmod-virtualbox, kmod-xtables-addons & dwarves Security Advisory Updates

Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…

SUSE: 2025:0314-1 important: orc Security Advisory Updates

* bsc#1228184 Cross-References: * CVE-2024-40897

Linux

openSUSE: 2025:0039-1 important: stb Advisory Security Update

An update that fixes 7 vulnerabilities is now available.

Linux

SUSE: 2025:0310-1 moderate: python-pydantic Security Advisory Updates

* bsc#1222806 Cross-References: * CVE-2024-3772

Linux

openSUSE: 2025:0037-1 important: SDL2_sound Advisory Security Update

An update that fixes 6 vulnerabilities is now available.

Linux

Mageia 2025-0029: chromium-browser-stable Security Advisory Updates

Object corruption in V8. (CVE-2025-0611) Out of bounds memory access in V8. (CVE-2025-0612) References: - https://bugs.mageia.org/show_bug.cgi?id=33962

Chrome

Mageia 2025-0028: git-lfs Security Advisory Updates

Git LFS permits exfiltration of credentials via crafted HTTP URLs. (CVE-2024-53263) References: - https://bugs.mageia.org/show_bug.cgi?id=33931

openSUSE: 2025:0036-1 important: chromium Advisory Security Update

An update that fixes one vulnerability is now available.

Linux Chrome

SUSE: 2025:0297-1 moderate: govulncheck-vulndb Security Advisory Updates

* jsc#PED-11136 Cross-References: * CVE-2024-11218 * CVE-2024-36402

Linux

Lightning AI Studio Vulnerability Allowed RCE via Hidden URL Parameter

Cybersecurity researchers have disclosed a critical security flaw in the Lightning AI Studio development platform that, if successfully exploited, could allow …

Lightning AI Studio Vulnerability Could've Allowed RCE via Hidden URL Parameter

Cybersecurity researchers have disclosed a critical security flaw in the Lightning AI Studio development platform that, if successfully exploited, could have a…

SUSE: 2025:0295-1 moderate: ignition Security Advisory Updates

* bsc#1236518 Cross-References: * CVE-2023-45288

Linux

SUSE: 2025:0292-1 moderate: shadow Security Advisory Updates

* bsc#1228770 Cross-References: * CVE-2013-4235

Linux

Debian: DSA-5854-1: bind9 Security Advisory Updates

Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. For the stable distribution (bookworm), th…

Linux

SUSE: 2025:0291-1 moderate: iperf Security Advisory Updates

* bsc#1234705 Cross-References: * CVE-2024-53580

Linux

SUSE: 2025:0277-1 important: amazon-ssm-agent Security Advisory Updates

* bsc#1235575 Cross-References: * CVE-2025-21613

Linux AWS

SUSE: 2025:0278-1 moderate: openvpn Security Advisory Updates

* bsc#1235147 Cross-References: * CVE-2024-5594

Linux

SUSE: 2025:0279-1 moderate: java-21-openjdk Security Advisory Updates

* bsc#1236278 Cross-References: * CVE-2025-21502

Linux

Fedora 41: libsoup3 2025-42ee7772e3 Security Advisory Updates

Fix for CVE-2024-52531

Linux

Debian LTS: DLA-4033-1: libtar Security Advisory Updates

Multiple vulnerabilities have been fixed in libtar, a library for manipulating tar archives. CVE-2021-33643

Linux

SUSE: 2025:0268-1 important: the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) Security Advisory Updates

* bsc#1226324 * bsc#1227369 * bsc#1227781 * bsc#1227784 * bsc#1229275

Linux

SUSE: 2025:0269-1 important: the Linux Kernel RT (Live Patch 1 for SLE 15 SP6) Security Advisory Updates

* bsc#1225819 * bsc#1227369 * bsc#1227781 * bsc#1227784 * bsc#1228349

Linux

Debian LTS: DLA-4031-1: git Security Advisory Updates

Multiple vulnerabilities were discovered in git, a fast, scalable and distributed revision control system. CVE-2024-50349

Linux