Linux Security Advisories
Scouring the Web for those critical security advisories and updates? Find the information you need for your favorite open source distribution all in one place on our Advisories page.
Debian
GIMP Denial of Service Vulnerabilities DSA-6014-1
Several vulnerabilities were discovered in GIMP, the GNU Image Ma...
Critical Symlink Bypass Vulnerability in node-tar-fs DSA-6013-1
It was discovered that the symlink validation in node-tar-fs, a N...
firefox-esr Important Connection Errors Fix DSA-6003-2
Firefox 140.3.1 has been released, which fixes connection errors ...
nncp Important Path Traversal Threat DSA-6012-1 CVE-2025-60020
Eugene Medvedev discovered that nncp, a package facilitating secu...
DSA-6011-1 ThunderBird Critical Exec Code Threats CVE-2025-10527
Multiple security issues were discovered in Thunderbird, which co...
Chromium Important Security Issues DSA-6010-1 CVE-2025-10890-10892
Security issues were discovered in Chromium which could result in...
Debian LTS
Raptor2 Important Buffer Overflow and Underflow Fix DLA-4343-1
Two issues have been found in raptor2, an RDF parser and serializ...
GIMP Critical Code Execution & DoS Risks DLA-4342-1
Several vulnerabilities were discovered in GIMP, the GNU Image Ma...
GEGL Critical DLA-4341-1 Multiple Issues Resolved
Multiple vulnerabilities were discovered in GEGL, a graph-based i...
libphp-adodb Important SQL Injection Advisory DLA-4340-1
libphp-adodb, a class library that provides abstractions for perf...
Critical Fix for ImageMagick Integer Overflow DLA-4339-1
An Integer Overflow was found in BMP Decoder (ReadBMP). CVE-2025-...
pgagent Important Local Attack CVE-2025-0218 DLA-4338-1
When batch jobs are executed by pgAgent, a script is created in a...
Fedora
php-php81_bc-strftime Important Update for DokuWiki 2025-05-14b
Initial build for PHP81_BC\strftime Update DokuWiki to version 20...
PHP81_BC strftime Build for 2025-e6ce056923
Initial build for PHP81_BC\strftime Update DokuWiki to version 20...
Critical Performance Fixes for mingw-exiv2 CVE-2025-54080
Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304....
Gentoo
PHP Library Remote Code Execution Vulnerabilities GLSA-202510-07
Multiple vulnerabilities have been discovered in Composer, the wo...
Spreadsheet-ParseExcel Vulnerability Overview GLSA-202508-06
A vulnerability has been discovered in Spreadsheet-ParseExcel, wh...
Mozilla NSS Standard TLS RSA Decryption Timing Flaw GLSA-202509-05
A vulnerability has been discovered in NSS, which can lead to the...
FontForge Standard Uncontrolled Code Execution GLSA-202509-04
A vulnerability has been discovered in FontForge, which can lead ...
GPL Ghostscript High Multiple Vulnerabilities 202508-02
Multiple vulnerabilities have been discovered in GPL Ghostscript,...
PAM High Multiple Issues Privilege Escalation GLSA 202508-01
Multiple vulnerabilities have been discovered in PAM, the worst o...
Mageia
MGASA-2025-0249 ICU Critical Buffer Overflow CVE-2025-5222
MGASA-2025-0249 - Updated icu packages fix security vulnerability...
libtpms Important Out-of-Bounds Access CVE-2025-49133
MGASA-2025-0248 - Updated libtpms package fixes security vulnerab...
Thunderbird Important Memory Safety Issues MGASA-2025-0247
MGASA-2025-0247 - Updated thunderbird packgaes fix security vulne...
Firefox Critical Memory Safety Issues Vulnern 2025-0246
MGASA-2025-0246 - Updated firefox, nss & rootcerts fix security v...
Nginx Critical Buffer Over-read Vuln MGASA-2025-0245 CVE-2025-53859
MGASA-2025-0245 - Updated nginx package fixes security vulnerabil...
OpenSSL Important Out-of-Bounds Flaw MGASA-2025-0244 CVE-2025-9230
MGASA-2025-0244 - Updated openssl packages fix a security vulnera...
Oracle
ELSA-2025-18320 Thunderbird Important Security Patch
The following updated rpms for Oracle Linux 10 have been uploaded...
ELSA-2025-14997 httpd Moderate Security Advisory
The following updated rpms for Oracle Linux 7 have been uploaded ...
Advisory ELSA-2025-10108 Microcode_ctl Moderate Update
The following updated rpms for Oracle Linux 7 have been uploaded ...
openSUSE
ffmpeg-4 Important DoS CVE-2025-59728 Advisory
An update that solves one vulnerability and has one security fix ...
Wireshark Moderate MONGO Infinite Loop Fix SUSE-SU-2025:3811-1
An update that solves one vulnerability can now be installed....
cmake Low Severity Update CVE-2025-9301 Advisory 2025:3812-1
An update that solves one vulnerability can now be installed....
CVE-2025-48041 Important File Handle Exhaustion Issue
An update that solves one vulnerability can now be installed....
rabbitmq-server Moderate Auth Log Issue 2025:3809-1
An update that solves one vulnerability and has one security fix ...
Chromium Important Update CVE-2025-12036 Advisory 2025:0402-1
An update that fixes one vulnerability is now available.
...
RockyLinux
RLSA-2025:18320 thunderbird security update Security Advisories Updates
Important: thunderbird security update...
RLSA-2025:18318 kernel security update Security Advisories Updates
Moderate: kernel security update...
RLSA-2025:18298 kernel-rt security update Security Advisories Updates
Moderate: kernel-rt security update...
RLSA-2025:18297 kernel security update Security Advisories Updates
Moderate: kernel security update...
RLSA-2025:18983 thunderbird security update Security Advisories Updates
Important: thunderbird security update...
RLSA-2025:18152 .NET 8.0 security update Security Advisories Updates
Important: .NET 8.0 security update...
Slackware
openssl Moderate Key Size Issue Fix SSA:2025-296-01
New openssl packages are available for Slackware 15.0 to fix a se...
bind Critical DNS Spoofing Fix 2025-295-01
New bind packages are available for Slackware 15.0 and -current t...
Critical stunnel Fix Released in SSA:2025-291-01
New stunnel packages are available for Slackware 15.0 and -curren...
Samba Command Injection and Memory Disclosure
New samba packages are available for Slackware 15.0 and -current ...
Mozilla Thunderbird Critical Remote Access Flaw 2025-287-02
New mozilla-thunderbird packages are available for Slackware 15.0...
mozilla-firefox Important Security Patch SSA:2025-287-01
New mozilla-firefox packages are available for Slackware 15.0 and...
SuSE
CMake Low Severity CVE-2025-9301 Advisory 2025:3812-1
* bsc#1248461 Cross-References: * CVE-2025-9301 ...
openssl-3 Moderate Out-of-Bounds Fix CVE-2025-9230
* bsc#1250232 * jsc#PED-13245 Cross-References: * CVE-2025-9230 ...
Critical Memory Amplification CVE-2025-59375 Advisory
* bsc#1249584 Cross-References: * CVE-2025-59375 ...
Critical Security Update for Podman Related to CVE-2025-9566-1
* bsc#1249154 Cross-References: * CVE-2024-6104 * CVE-2025-22869 ...
Ubuntu
Radare2 Critical Memory Leak CVE-2025-60358
Radare2 could be made to crash if it received specially crafted i...
strongSwan Important DoS Risk USN-7841-1 CVE-2025-62291
strongSwan client could be made to crash or run programs if it re...
USN-7829-4 Linux Kernel AWS Important Security Threats
Several security issues were fixed in the Linux kernel....
Go Cryptography Network Access Vulnerability USN-7839-1
Go Cryptography could allow unintended access to network services...
Fetchmail Important Crash Risk DoS CVE-2025-61962
fetchmail could be made to crash if it received specially crafted...
