LinuxSecurity.com

Oracle Linux 9 ELSA-2025-20320 critical update: Kernel Changes

14.05.2025 10:41 The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Mageia 9: 2025-0156 critical: Fixes for Java TLS and compiler issues

14.05.2025 05:00 Better TLS connection support. Improve compiler transformations. Enhance Buffered Image handling. The updated timezone data are needed by the new Java packages.

Slackware 15.0: 2025-133-01 critical: screen security patch

14.05.2025 05:00 New screen packages are available for Slackware 15.0 and -current to fix security issues.

Mageia 9 Advisory MGASA-2025-0155: Critical PostgreSQL Encoding Threat

14.05.2025 05:00 PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. References: - https://bugs.mageia.org/show_bug.cgi?id=34265

ArchLinux: 202505-1 High: screen access bypass and privilege escalation

14.05.2025 05:00 The package screen before version 5.0.0-3 is vulnerable to multiple issues including access restriction bypass, denial of service and privilege escalation.

Debian: DSA-5918-1 critical: Varnish request smuggling issue

14.05.2025 05:00 Ben Kallus discovered that incorrect parsing of chunked transfer encodings in the Varnish web accelerator may result in HTTP request smuggling or cache poisoning.

Oracle Linux 8 ELSA-2025-20323 Important: kernel DoS Fix

14.05.2025 05:00 The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Oracle Linux 8 ELSA-2025-4658 Moderate: libtiff Buffer Overflow Fix