Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora: dotnet8.0 Critical Update Denial of Service Risk 2025-9171c95e17
This is the October 2025 release of .NET 8. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.21/8.0.121.md Runtime: https://…
Fedora 41: dotnet9.0 Moderate Runtime Update Advisory 2025-ece4f3816e
This is the October 2025 release of .NET 9, updating the SDK to version 9.0.111 and runtime to version to 9.0.10. Release Notes: SDK: https://github.com/dotnet…
Fedora 42: dotnet 9.0.111 Update 2025-e9c0b9e1b4 Available Now
This is the October 2025 release of .NET 9, updating the SDK to version 9.0.111 and runtime to version to 9.0.10. Release Notes: SDK: https://github.com/dotnet…
Fedora 43 uv Update 2025-4154ea83d0: Security Advisory for Fast Installer
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydan…
Fedora 43: rust-tikv-jemallocator Critical Memory Risk 2025-4154ea83d0
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydan…
Fedora 43: Critical Buffer Overflow Vulnerability in rust-tikv-jemalloc-sys
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydan…
Fedora 43 dotnet9.0 Important SDK Update 2025-08b0c5ec40
This is the October 2025 release of .NET 9, updating the SDK to version 9.0.111 and runtime to version to 9.0.10. Release Notes: SDK: https://github.com/dotnet…
Fedora 42: uv 0.9.5 Important Security Fix CVE-2025-62518
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Fedora 42: Critical CVE-2025-62518 in rust-reqsign-http-send-reqwest
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Fedora 42: rust-tikv-jemallocator Critical CVE-2025-62518 Parser Issue
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Critical PAX Header Fix for rust-reqsign-file-read-tokio in Fedora 42
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Fedora 42: rust-reqsign-core Vulnerability Patch CVE-2025-62518
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Fedora 42 mbedtls Update 3.6.5 Advisory FEDORA-2025-7c8f6f12d1
Update to 3.6.5 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.5
Fedora 41 pandoc-cli Important SSRF Fix FEDORA-2025-ef1d49c67b
pandoc-cli: enable pandoc server (semantically safe) with pandoc-server-0.1.0.5 pandoc: apply upstream patch to avoid error with ConTeXt (#2365309) https://git…
Fedora 41 Addresses Critical Server-Side Request Forgery Issue in Pandoc
pandoc-cli: enable pandoc server (semantically safe) with pandoc-server-0.1.0.5 pandoc: apply upstream patch to avoid error with ConTeXt (#2365309) https://git…
Fedora 41: toolbox Critical Fixes for CVE-2025-23266, GHSA-fv92-fjc5-jj9h
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Fedora 42: toolbox Security Updates for CVE-2025-23266 CVE-2025-23267
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Fedora 41: Incus 6.15 Denial of Service and Firewall Fix 2025-83aa12829d
New release of Incus. Release information: https://github.com/lxc/incus/releases/tag/v6.15.0
Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Malware Injected into 7 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
AsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe
Cybersecurity researchers have charted the evolution of a widely used remote access trojan called AsyncRAT, which was first released on GitHub in January 2019 …
Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension
Cybersecurity researchers have flagged a supply chain attack targeting a Microsoft Visual Studio Code (VS Code) extension called Ethcode that has been installe…
Fedora 42: 2025-d3585d3323 update: mbedtls 3.6.4 released
Update to 3.6.4 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4