Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42 Prometheus 3.10.0 Critical Security Fix 2026-c9fb6d2b76
Rename from golang-github-prometheus and upgrade to 3.10.0
Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor
Cybersecurity researchers have disclosed details of a malicious Go module that's designed to harvest passwords, create persistent access via SSH, and deliver a…
Mandriva 29 ruby-interaction Update Phishing Risk 2026-123b456789
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
Fedora 42 uv Update 0.10.2 Denial of Service Advisory 2026-086a367966
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
Fedora 42 python-uv-build DoS Attack Vulnerability Update 2026-086a367966
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
Fedora 43 python-aiohttp Important Security Advisory FEDORA-2026-66cb8ecfc2
https://github.com/aio-libs/aiohttp/blob/v3.13.3/CHANGES.rst
Fedora 43 libgit2 Update to Version 1.9.2 FEDORA-2026-c0124f91bf
Update to version 1.9.2. Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.2
Fedora 42: cpp-httplib Critical Denial of Service Issues 2026-3b0e5b457d
Update to 0.30.1 Denial of service (DOS) using zip bomb (CVE-2026-22776) CRLF injection in http headers (CVE-2026-21428) Untrusted HTTP Header Handling: X-Forw…
Fedora 43: complyctl Vulnerability CVE-2025-58188 with Moderate Panic Risk
Update to Upstream version 0.1.2 - https://github.com/complytime/complyctl/releases/tag/v0.1.2
Fedora 43: python-pdfminer Security Fix CVE-2025-64512 Advisory
Update to 20251230: security fix for CVE-2025-64512 https://github.com/pdfminer/pdfminer.six/blob/20251230/CHANGELOG.md
Fedora 42: direwolf Critical DoS Issues FEDORA-2025-614bda8830
https://github.com/wb2osz/direwolf/releases/tag/1.8.1
Fedora 43: direwolf Critical Reachable Assertion and Buffer Overflow DoS
https://github.com/wb2osz/direwolf/releases/tag/1.8.1
Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack
Trust Wallet on Tuesday revealed that the second iteration of the Shai-Hulud (aka Sha1-Hulud) supply chain outbreak in November 2025 was likely responsible for…
Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors
In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining. In Au…
Debian 11: Critical ReDoS DoS Advisory DLA-4418-1 for python-mechanize
Erik Krogh Kristensen and Rasmus Petersen from the GitHub Security Lab discovered a ReDoS (Regular Expression Denial of Service) vulnerability in python-mechan…
Fedora 42: Fix for mod_md Bug Related to CVE-2025-55753 Advisory
This update includes the latest upstream release of mod_md, with various bug fixes and enhancements. See https://github.com/icing/mod_md/releases for more info…
Fedora 43: mod_md Important Apache HTTP Server Fix CVE-2025-55753
This update includes the latest upstream release of mod_md, with various bug fixes and enhancements. See https://github.com/icing/mod_md/releases for more info…
Ubuntu 23.04: xyz Enhanced Security Vulnerabilities Update 2025-4bd12a45g3
Patch two newly-reported memory-safety bugs in stb_image: https://github.com/nothings/stb/issues/1860 https://github.com/nothings/stb/issues/1861
Debian 11: r-cran-gh Important API Auth Flaw DLA-4378-1 CVE-2025-54956
A vulnerability has been discovered in r-cran-gh, a GNU R Minimal client to access the 'GitHub' 'API'. CVE-2025-54956
Debian 12: python-http-client-receive-data Low 2025-01a4c2b1e
uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addre…
Fedora 41: uv Python Package Update 2025-00e5b3d89c Critical DoS Advisory
uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addre…
Fedora 41: Rust Reqsign File Read Tokio Important Issue 2025-00e5b3d89c
uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addre…
Fedora 41: rust-reqsign Critical AWS DoS Threat Advisory 2025-00e5b3d89c
uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addre…
Fedora 42: dotnet 8.0 Release Notification FEDORA-2025-f74de9283d
This is the October 2025 release of .NET 8. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.21/8.0.121.md Runtime: https://…