Archlinux Security is the community’s central source for information on Linux and open source security. We follow the open source trends as they affect the community. We produce content that appeals to administrators, developers, home users, and security professionals.
Stay Vigilant with Timely Linux Security Advisories LinuxSecurity.com is the community’s central source for information on Linux and open source security. We follow the open source trends as they affect the commu
- Fedora: 203105-8 moderate: ruby-on-rails sql injection vulnerability
on June 13, 2025 at 8:33 pmThe package python-django before version 5.1.11-1 is vulnerable to content spoofing.
- Ubuntu: 303103-1 medium: gnome-terminal privilege escalationon June 13, 2025 at 8:33 pm
The package konsole before version 25.04.2-1 is vulnerable to arbitrary code execution.
- ArchLinux: ASA-202506-4 medium risk of go certificate bypass issueon June 13, 2025 at 8:32 pm
The package go before version 1.24.4-1 is vulnerable to multiple issues including certificate verification bypass and information disclosure.
- Arch Linux: ASA-202506-3 CVE-2025-0620 low: samba access issueon June 13, 2025 at 8:32 pm
The package samba before version 4.22.2-1 is vulnerable to access restriction bypass.
- ArchLinux: 202506-2 curl Low severity denial of service riskon June 13, 2025 at 8:31 pm
The package curl before version 8.14.1-1 is vulnerable to denial of service.
- Arch Linux: ASA-202506-1 critical: roundcubemail remote code executionon June 13, 2025 at 8:30 pm
The package roundcubemail before version 1.6.11-1 is vulnerable to arbitrary code execution.
- Arch Linux: 202505-15 low: ghostscript information disclosureon June 13, 2025 at 8:28 pm
The package ghostscript before version 10.05.1-2 is vulnerable to information disclosure.
- Arch Linux: 202505-14 High Severity: bind denial of service attackon May 27, 2025 at 11:41 pm
The package bind before version 9.20.9-1 is vulnerable to denial of service.
- Arch Linux: 202505-13 critical: varnish content spoofing threaton May 27, 2025 at 11:37 pm
The package varnish before version 7.7.1-1 is vulnerable to content spoofing.
