Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 9: Flatpak Critical Access Issue Advisory MGASA-2025-0303
MGASA-2025-0303 - Updated flatpak & bubblewrap packages fix security vulnerability
Mageia: yelp Important Remote Code Exec CVE-2025-3155 Advisory 2025-0297
MGASA-2025-0297 - Updated yelp & yelp-xsl packages fix security vulnerability
openSUSE: java-1_8_0-openjdk Important Access Issues Advisory 2025:4039-1
An update that solves two vulnerabilities can now be installed.
SUSE Advisory 2025:3944-1 for Moderate Memory Access Issue CVE-2025-55159
* bsc#1248003 Cross-References: * CVE-2025-55159
Ubuntu 22.04 LTS: Important Redis Remote Code Execution Advisory USN-7824-3
Redis could be made to crash or run programs if it received specially crafted network traffic from an authenticated user.
SUSE: Redis7 Critical Remote Code Exec & DoS Advisory CVE-2025-46817
* bsc#1250995 Cross-References: * CVE-2025-46817 * CVE-2025-46818
openSUSE: cairo Low NULL Pointer Access Issue 2025:03280-1
SUSE: MariaDB Moderate Data Access Threats Advisory 2025:03275-1
* bsc#1239150 * bsc#1239151 * bsc#1249212 * bsc#1249213 * bsc#1249219
openSUSE Leap 15.6: redis Important Remote Code Execution DoS 2025:03073-1
Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups
Microsoft has released an advisory for a high-severity security flaw affecting on-premise versions of Exchange Server that could allow an attacker to gain elev…
openSUSE: 2025:15307-1 moderate: velociraptor access control
openSUSE: 2025:01788-1 critical: java-1_8_0-ibm unauthorized access
openSUSE: 2025:1429-1 important: java-21-openjdk unauthorized access
openSUSE 15.3/15.6 critical: erlang26 remote code exec & memory issues
openSUSE 15.6 critical: erlang remote code execution CVE-2025-32433
CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access (PRA…
Mageia 2024-0385: krb5 Security Advisory Updates
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access…
Mageia 2024-0378: wget Security Advisory Updates
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attac…
Gentoo: GLSA-202406-03: RDoc: Remote Code CxecutionSecurity Advisory Updates
A vulnerability has been discovered in RDoc, which can lead to execution of arbitrary code.
Gentoo: GLSA-202405-21: Commons-BeanUtils: Improper Access RestrictionSecurity Advisory Updates
A vulnerability has been discovered in Commons-BeanUtils, which could lead to execution of arbitrary code.
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug repo
IBM has admitted to making 'a process error, improper response' to a bug report that identified four vulnerabilities in its enterprise security software, and t…
Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.…
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScal…
Debian WebKitGTK Important Heap Corruption Privilege Escalation DSA-6534-1
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …