Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0243: libheif Security Advisory Updates
It was discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of…
Mageia 2024-0228: python-scikit-learn Security Advisory Updates
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fi…
Mageia 2024-0121: x11-server, x11-server-xwayland & tigervnc Security Advisory Updates
Heap buffer overread/data leakage in ProcXIGetSelectedEvents. (CVE-2024-31080) Heap buffer overread/data leakage in ProcXIPassiveGrabDevice. (CVE-2024-31081) U…
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The scr…
Fedora 45 Aegisub 3.5.0 Blocks Crafted Subtitle Script Execution
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldw…
Fedora 43 Aegisub CVE-2026-92705 Fixes Arbitrary Code Execution Advisory
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
Fedora 44 Aegisub 3.5.0 CVE-2026-92705 Arbitrary Code Exec Fix
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
Anthropic warns self-replicating AI could spread to your smart devices
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating dist…
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary…
Atlassian warns of critical file-access flaw in Jira, Confluence
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted …
Debian WebKitGTK Important Heap Corruption Privilege Escalation DSA-6534-1
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
Fedora 44 perl-Imager Update CVEs 2026-93019 2026-93018 Security Advisory
1.036 bump - Fix CVE-2026-93019 (TGA large color map size interpreted as negative) - Fix CVE-2026-93018 (paletted images: out-of-range color index returned uni…
Fedora 45 Evolution Important Security Fix Advisory 2026-5debc0de2b
Update to 3.62.0 evolution-data-server Bug Fixes: I#660 - GOA EWS: Do not require OABUrl in autodiscover I#662 - EBackend: Document how OAuth2 sources should a…
SUSE Linux Kernel Important Live Patch 49 Advisory 2026-3766-1
A security update for SUSE Linux Kernel fixes 18 vulnerabilities addressing various issues and bugs, including memory leaks and data handling problems, enhanci…
Fedora 43 AusweisApp2 Software Update Advisory 2026-44f6d8f2e7
An update to AusweisApp2 version 2.5.5 is now available for Fedora 43, allowing online identification with German ID cards and providing access to stored data.
Fedora 44 AusweisApp2 Security Advisory Update 2026-2fff59246b
Fedora 44 has released AusweisApp2 version 2.5.5, which allows online identification using German ID cards, featuring data self-assessment. Users can update vi…
Fedora 44 python-sqlalchemy Security Fixes Advisory 2026-6f7b906353
An update for python-sqlalchemy (2.0.52) includes bug fixes and enhancements for related packages, providing improved flexibility for SQL databases with a high…
Fedora 43 DokuWiki Bypass Fix Advisory 2026 - 99a0f106c9
Fedora 43 has released an update for DokuWiki, fixing a bypass issue in the "disableactions" mechanism, enhancing its usability in documentation without needin…
Mageia 10 Sar2 Bug Fix Notification for Advisory 2026-0094
An update for Mageia 10 addresses a bug in sar2 that prevented the game from starting due to data path issues, resolving the reported problem.
Fedora 44 pdns Security Advisory Update 5.0.7 2026-706965c440
Fedora has released an update for PowerDNS version 5.0.7, enhancing its authoritative DNS server capabilities while addressing security issues and providing co…
Debian 12 DLA-4739-1 Chromium Important Security Flaws Fixed
Debian LTS Advisory DLA-4739-1 highlights security vulnerabilities in Chromium that could lead to code execution, denial of service, or data exposure, recommen…
SUSE rpm Important Buffer Overflow Security Advisory SUSE-SU-2026-3600-1
A security update for rpm addresses a critical heap buffer overflow vulnerability in NDB database backend, affecting several SUSE products and recommending ins…
Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1
Debian has released an advisory for OpenJDK-21 addressing multiple vulnerabilities that could lead to certificate validation issues, denial of service, or data…