Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 44 perl-CryptX Moderate Key Recovery Risk CVE-2026-41564
0.088 2026-04-23 - Crypt::KeyDerivation - new functions: pbkdf1_openssl, bcrypt_pbkdf, scrypt_pbkdf, argon2_pbkdf - Crypt::Misc - new functions: random_v7uuid,…
Fedora 42 Coturn Important Security Bypass Fix CVE-2026-27624
Coturn 4.9.0 Multiple security fixes Fix to Web Admin password check Cleanup of deprecated OpenSSL APIs Fix for CVE-2026-27624: Bypass localhost and IP range b…
Fedora 43 Coturn Critical IPv4-Mapped Bypass Advisory 2026-8cb5571ddc
Coturn 4.9.0 Multiple security fixes Fix to Web Admin password check Cleanup of deprecated OpenSSL APIs Fix for CVE-2026-27624: Bypass localhost and IP range b…
Debian 11: Serious Buffer Overflow Flaw Detected in osslsigncode DLA-4426-1
A Buffer Overflow vulnerability has been found in osslsigncode, a OpenSSL based Authenticode signing tool for PE/MSI/Java CAB files, which possibly allows an m…
Fedora 42: bpfman Security Update CVE-2025-0977 Use-After-Free
This update fixes CVE-2025-0977 (RUSTSEC-2025-0004), a use-after-free vulnerability in the Rust openssl crate's ssl::select_next_proto function. The openssl cr…
Fedora 40: s390utils 2025-6f07616b52 Security Advisory Updates
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
Fedora 41: rustup 2025-f8be7978e3 Security Advisory Updates
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
Fedora 41: s390utils 2025-f8be7978e3 Security Advisory Updates
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
Fedora 41: trafficserver 2024-f4dc07db08 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Fedora 40: trafficserver 2024-b3c4e8da81 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Fedora 39: trafficserver 2024-589ea34c42 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Google's AI-Powered OSS-Fuzz Tool Finds 26 Vulnerabilities in Open-Source Projects
Google has revealed that its AI-powered fuzzing tool, OSS-Fuzz, has been used to help identify 26 vulnerabilities in various open-source code repositories, inc…
Fedora 41: edk2 2024-9cc95d56ce Security Advisory Updates
Security fix for CVE-2023-6237 (openssl: Excessive time spent checking invalid RSA public keys)
Mageia 2024-0330: quictls Security Advisory Updates
The updated packages fix security vulnerabilities References: - https://bugs.mageia.org/show_bug.cgi?id=33614 - https://openssl-library.org/news/vulnerabilitie…
Mageia 2024-0281: quictls Security Advisory Updates
The updated packages fix security vulnerabilities References: - https://bugs.mageia.org/show_bug.cgi?id=33468 - https://openssl-library.org/news/vulnerabilitie…
Mageia 2024-0102: squid security update
Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to…
Fedora 37: rust-ybaas 2023-37ae269843
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Fedora 37: rust-tealdeer 2023-37ae269843
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Fedora 37: rust-sevctl 2023-37ae269843
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Fedora 37: rust-sequoia-sq 2023-37ae269843
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Fedora 37: rust-fedora-update-feedback 2023-37ae269843
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Fedora 38: rust-git-delta 2023-cc21019773
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Fedora 38: rust-ybaas 2023-cc21019773
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Fedora 38: rust-sequoia-policy-config 2023-cc21019773
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…