Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2025-0029: chromium-browser-stable Security Advisory Updates
Object corruption in V8. (CVE-2025-0611) Out of bounds memory access in V8. (CVE-2025-0612) References: - https://bugs.mageia.org/show_bug.cgi?id=33962
Fedora 40: chromium 2025-5d89c826ff Security Advisory Updates
Update to 132.0.6834.110 High CVE-2025-0611: Object corruption in V8 High CVE-2025-0612: Out of bounds memory access in V8
Fedora 41: chromium 2025-eb2f4a2306 Security Advisory Updates
Update to 132.0.6834.110 High CVE-2025-0611: Object corruption in V8 High CVE-2025-0612: Out of bounds memory access in V8
Debian LTS: DLA-4028-1: git-lfs Security Advisory Updates
CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command
Fedora 40: redis 2025-72fd0442cc Security Advisory Updates
Redis 7.2.7 Released Mon 6 Jan 2025 12:30:00 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes (CVE-2024-46981) Lua script commands may le…
Debian: DSA-5843-1: rsync Security Advisory Updates
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool. CVE-2024-12084
Fedora 41: valkey 2025-b332afed45 Security Advisory Updates
update to 8.0.2 fixes CVE-2024-46981 - Lua script commands may lead to remote code execution fixes CVE-2024-51741 - Denial-of-service due to malformed ACL sele…
Ubuntu 7182-1: Ceph Security Advisory Updates
Ceph could allow unintended access to network services.
Debian LTS: DLA-4004-1: opensc Security Advisory Updates
Multiple vulnerabilities were found in opensc, a set of libraries and utilities to access smart cards, which could lead to application crash, information leak,…
Fedora 40: chromium 2024-4808dce926 Security Advisory Updates
Update to 131.0.6778.204 High CVE-2024-12692: Type Confusion in V8 High CVE-2024-12693: Out of bounds memory access in V8 High CVE-2024-12694: Use after free i…
Debian LTS: DLA-3997-1: php-laravel-framework Security Advisory Updates
It was discovered that there was a remotely exploitable vulnerability in php-laravel-framework, a popular web application framework written in PHP.
Debian LTS: DLA-3984-1: zabbix Security Advisory Updates
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially among other effects allowing denial of service, inf…
Gentoo: GLSA-202412-07: OpenJDK: Security Advisory Updates
Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution.
Gentoo: GLSA-202412-06: Mozilla Thunderbird: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Fedora 40: pam 2024-45478608e2 Security Advisory Updates
pam_access: rework resolving of tokens as hostname.
Fedora 40: webkitgtk 2024-4014fa4ecc Security Advisory Updates
Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the…
Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability
Cisco on Monday updated an advisory to warn customers of active exploitation of a decade-old security flaw impacting its Adaptive Security Appliance (ASA).The …
Ubuntu 7135-1: HAProxy Security Advisory Updates
HAProxy could allow unintended access to network services.
Fedora 41: webkitgtk 2024-472d01833c Security Advisory Updates
Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the…
Mageia 2024-0377: microcode Security Advisory Updates
Improper Finite State Machines (FSMs) in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially …
Ubuntu 6988-2: Twisted Security Advisory Updates
Twisted could allow unintended access to information over the network.
Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation
Oracle is warning that a high-severity security flaw impacting the Agile Product Lifecycle Management (PLM) Framework has been exploited in the wild.The vulner…
Mageia 2024-0354: quictls Security Advisory Updates
Invalid low-level GF(2^m) parameters can lead to an OOB memory access. (CVE-2024-9143) References: - https://bugs.mageia.org/show_bug.cgi?id=33736
Mageia 2024-0350: thunderbird Security Advisory Updates
Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…