Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:4054-1 moderate: javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop Security Advisory Updates
* bsc#1231347 * bsc#1231428 Cross-References: * CVE-2024-28168
US Warns Of Cyberattacks On Industrial Control System (ICS) Via Specialized APT Tools
US cybersecurity officials have issued a detailed advisory alerting cyberattacks on critical ICS infrastructure via…US Warns Of Cyberattacks On Industrial Cont…
Quest Diagnostics warns of potential data theft after attack on lab service system
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
openSUSE GraphicsMagick Low Memory Leak Advisory 2026-3201-1
A security update for GraphicsMagick addresses a memory leak vulnerability (CVE-2026-61870) affecting several SUSE products, allowing users to install necessar…
Debian LTS: DLA-4055-1: trafficserver Security Advisory Updates
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2024-38479
Ubuntu 7112-1: GD Graphics Library Security Advisory Updates
GD Graphics Library could be made to crash if it opened a specially crafted file.
Debian LTS: DLA-3897-1: trafficserver Security Advisory Updates
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2023-38522
Gentoo: GLSA-202407-15: GraphicsMagick: Security Advisory Updates
Multiple vulnerabilities have been discovered in GraphicsMagick, the worst of which could lead to arbitrary code execution.
Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats
Rockwell Automation is urging its customers to disconnect all industrial control systems (ICSs) not meant to be connected to the public-facing internet to miti…
Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics
Cybersecurity and intelligence agencies from the Five Eyes nations have released a joint advisory detailing the evolving tactics of the Russian state-sponsored…
AlmaLinux 8 Xorg and Mesa Graphics Security Update - Security Advisory
userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update
Mageia GraphicsMagick Security Advisory CVE-2025-55154 - Integer Overflow
Security update
Mageia GraphicsMagick Security Advisory CVE-2026-46523 Use-After-Free Issue
Security update
openSUSE GraphicsMagick Moderate Heap-use-after-free Advisory 2026-2625-1
An update that solves one vulnerability can now be installed.
Fedora 41: trafficserver 2024-f4dc07db08 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Fedora 40: trafficserver 2024-b3c4e8da81 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Fedora 39: trafficserver 2024-589ea34c42 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Debian: DSA-5758-1: trafficserver Security Advisory Updates
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or request smuggl…
Debian LTS: DLA-3799-1: trafficserver Security Advisory Updates
Potential DoS attacks have been fixed by rate limiting HTTP/2 CONTINUATION frames in Apache Traffic Server, an HTTP/1.1 and HTTP/2 compliant caching proxy serv…
Debian: DSA-5659-1: trafficserver Security Advisory Updates
Bartek Nowotarski discovered that Apache Traffic Server, a reverse and forward proxy server, was susceptible to denial of service via HTTP2 continuation frames.
Fedora 39: trafficserver 2024-b1e16b4335Security Advisory Updates
Update to upstream 9.2.4, resolves CVE-2024-31309 (CONTINUATION frames DoS)
Fedora 38: trafficserver 2024-d0acf8d109Security Advisory Updates
Update to upstream 9.2.4, resolves CVE-2024-31309 (CONTINUATION frames DoS)
German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack Tactics
German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked asKimsukyusing rogue browser extensions to steal …
CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS)advisorieson Tuesday, warning of critical f…