Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 617 articles for you...
197
security advisorydenial of servicedebianDebian 11 Imagemagick Important Denial of Service Issues DLA-4609-1
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial of service, information disclosure or potentially arbitrary code execution if malformed images are processed. For Debian 11 bullseye, these problems have been fixed in version. Debian LTS Advisory DLA-4609-1
May 30, 2026
•Important
Debian LTS
202
security advisorymoderateheap overflowopenSUSE perl-YAML-Syck Moderate Security Update 2026-0180-1
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for perl-YAML-Syck ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0180-1 Rating: moderate References: #1252111 #1259757 Cross-References: CVE-2025-11683 CVE-2026-4177 CVSS scores: CVE-2025-11683 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP7 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for perl-YAML-Syck fixes the following issues: updated to 1.450.0 (1.45) see /usr/share/doc/packages/perl-YAML-Syck/Changes * 1.45 Apr 23 2026 [Bug Fixes] - Fix: use syck_base64_free() to fix Windows "Free to wrong pool" crash in base64 encode/decode buffers; also plugs a memory leak (PR #189) - Fix: clear type tag on blessed scalar alias early-return so the stale tag no longer leaks onto the next emitted item (GH #193, PR #194) - Fix: negative float#base60 values produce wrong results; strip sign before accumulating and avoid negative zero for portable stringification (PR #191) - Fix: prevent memory leaks when Load/LoadJSON croak on parse errors (PR #192) [Maintenance] - Test: add coverage for SortKeys and JSON MaxDepth (PR #188) - Test: add error handling coverage for LoadFile/DumpFile (PR #190) - Update README updated to 1.440.0 (1.44) see /usr/share/doc/packages/perl-YAML-Syck/Changes * 1.44 Apr 02 2026 [Bug Fixes] - Fix: positive hex and octal values parsed as 0 with ImplicitTyping (PR #187) - Fix: resolve uintptr_t redefinition error on Win64 MinGW (PR #186) * 1.43 Apr 01 2026 [Bug Fixes] - Fix: preventresource leaks on croak/early-return paths in Dump (PR #161) - Fix: prevent output SV leaks on croak in Dump/DumpFile callers (PR #163) - Fix: Load() in list context returns empty list for empty/undef input; also applies to LoadBytes and LoadUTF8 (GH #164, PR #165) - Fix: DumpCode serializes prototype string instead of code body (PR #168) - Fix: memory leak in !perl/scalar Load newRV_inc should be newRV_noinc (PR #170) - Fix: add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl (GH #175, PR #176) - Fix: add TODO guard for eval_pv leak on Perl < 5.14 (GH #179, PR #180) - Fix: negative hex and octal values parsed as 0 with ImplicitTyping (PR #183) - Fix: negative int#base60 values produce unsigned wraparound (PR #185) [Improvements] - Modernize META_MERGE for CPANTS compliance (PR #162) - Fix hash table size handling and remove compile warnings in syck_st (PR #174) [Maintenance] - Restore TODO guard for Dump code leak test on Perl < 5.26 (PR #167) - Resolve 2010 TODO in perl_json_postprocess with test coverage (PR #166) - CI: upgrade actions to resolve Node.js 20 deprecation warnings (PR #177) * 1.42 Mar 27 2026 [Bug Fixes] - Fix: replace strtok() with strpbrk() and fix sign-compare warnings in perl_syck.h (PR #145) - Fix: terminate plain scalars at document boundaries --- and ... (PR #150) - Fix: skip %TAG and %YAML directives in document header (PR #151) - Fix: plug SV leak when eval_pv croaks on bad perl/code blocks (PR #153) - Fix: allow non-specific tag '!' before block scalars (GH #27, PR #102) - Fix: remove spurious %type for indent_open in gram.y (GH #157, PR #158) - Fix: use modern bison %define api.prefix directive (GH #159, PR #160) [Improvements] - Implement YAML mergekey (
May 30, 2026
•moderate
OpenSUSE
202
security advisorymoderateOpenSUSEopenSUSE Tumbleweed Apptainer Security Advisory 2026-10887-1 CVE-2026-39821
An update that solves one vulnerability can now be installed.. # apptainer-1.4.5-6.1 on GA media Announcement ID: openSUSE-SU-2026:10887-1 Rating: moderate Cross-References: * CVE-2026-39821 CVSS scores: * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the apptainer-1.4.5-6.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * apptainer 1.4.5-6.1 * apptainer-leap 1.4.5-6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39821.html . Apptainer update now available for openSUSE Tumbleweed to close a significant security issue rated moderate.. Apptainer Update, openSUSE Security, CVE-2026-39821, Linux Security, Apptainer Vulnerability. . Severity: Important. LinuxSecurity.com Team
May 30, 2026
•Important
OpenSUSE
202
security advisorymoderatesecurity issueopenSUSE Tumbleweed 2026-10883-1 Authlib Moderate Issue CVE-2026-44681
An update that solves one vulnerability can now be installed.. # python311-Authlib-1.7.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10883-1 Rating: moderate Cross-References: * CVE-2026-44681 CVSS scores: * CVE-2026-44681 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the python311-Authlib-1.7.2-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * python311-Authlib 1.7.2-1.1 * python313-Authlib 1.7.2-1.1 * python314-Authlib 1.7.2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44681.html . Update for openSUSE Tumbleweed addresses a moderate issue in python311-Authlib, enhancing your system's security.. openSUSE Tumbleweed python311-Authlib update CVE-2026-44681 moderate. . Severity: moderate. LinuxSecurity.com Team
May 30, 2026
•moderate
OpenSUSE
202
security advisoryDoSimportantopenSUSE Tumbleweed Adds Security Update for memcached DoS Vulnerability
An update that solves 2 vulnerabilities can now be installed.. # memcached-1.6.42-1.1 on GA media Announcement ID: openSUSE-SU-2026:10882-1 Rating: moderate Cross-References: * CVE-2026-47783 * CVE-2026-47784 CVSS scores: * CVE-2026-47783 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47784 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the memcached-1.6.42-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * memcached 1.6.42-1.1 * memcached-devel 1.6.42-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47783.html * https://www.suse.com/security/cve/CVE-2026-47784.html . An openSUSE advisory offering updates for memcached addressing two moderate-level vulnerabilities with detailed CVSS scores.. openSUSE memcached security update vulnerabilities CVE 2026. . Severity: Important. LinuxSecurity.com Team
May 30, 2026
•Important
OpenSUSE
202
security advisorymoderatesoftware updateopenSUSE Tumbleweed libBasicUsageEnvironment2 Advisory 2026-10881-1 Update
An update that solves one vulnerability can now be installed.. # libBasicUsageEnvironment2-2026.04.22-1.1 on GA media Announcement ID: openSUSE-SU-2026:10881-1 Rating: moderate Cross-References: * CVE-2026-41470 CVSS scores: * CVE-2026-41470 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the libBasicUsageEnvironment2-2026.04.22-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * libBasicUsageEnvironment2 2026.04.22-1.1 * libUsageEnvironment3 2026.04.22-1.1 * libgroupsock33 2026.04.22-1.1 * libliveMedia118 2026.04.22-1.1 * live555 2026.04.22-1.1 * live555-devel 2026.04.22-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41470.html . Update for openSUSE Tumbleweed addresses a moderate issue in libBasicUsageEnvironment2. Install now.. openSUSE Tumbleweed, libBasicUsageEnvironment2, security update, moderate rating, CVE-2026-41470. . Severity: moderate. LinuxSecurity.com Team
May 30, 2026
•moderate
OpenSUSE
89
security advisoryfedoraupdateFedora 43 DjVuLibre Important Out of Bounds Issue Fix 2026-bfa185dbb3
Update to 3.5.30.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-bfa185dbb3 2026-05-30 01:07:34.273965+00:00 -------------------------------------------------------------------------------- Name : djvulibre Product : Fedora 43 Version : 3.5.30 Release : 1.fc43 URL : http://djvu.sourceforge.net/ Summary : DjVu viewers, encoders, and utilities Description : DjVu is a web-centric format and software platform for distributing documents and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictures. DjVu content downloads faster, displays and renders faster, looks nicer on a screen, and consume less client resources than competing formats. DjVu images display instantly and can be smoothly zoomed and panned with no lengthy re-rendering. DjVuLibre is a free (GPL'ed) implementation of DjVu, including viewers, decoders, simple encoders, and utilities. The browser plugin is in its own separate sub-package. -------------------------------------------------------------------------------- Update Information: Update to 3.5.30. -------------------------------------------------------------------------------- ChangeLog: * Thu May 21 2026 Marek Kasik - 3.5.30-1 - Rebase to 3.5.30 - Resolves: #2376253 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2376253 - CVE-2025-53367 djvulibre: DjVuLibre out of bounds write [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2376253 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-bfa185dbb3' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
May 30, 2026
•Important
Fedora
89
security advisoryfedoraimportantFedora 43 xrdp Important TCP Socket Configuration Update 2026-8aeca78af9
Close TCP socket in default configuration, because we want just Unix domain socket connections to Xvnc.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-8aeca78af9 2026-05-30 01:07:34.273962+00:00 -------------------------------------------------------------------------------- Name : xrdp Product : Fedora 43 Version : 0.10.6 Release : 2.fc43 URL : http://www.xrdp.org/ Summary : Open source remote desktop protocol (RDP) server Description : xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client. -------------------------------------------------------------------------------- Update Information: Close TCP socket in default configuration, because we want just Unix domain socket connections to Xvnc. -------------------------------------------------------------------------------- ChangeLog: * Fri May 22 2026 Bojan Smojver - 1:0.10.6-2 - close TCP port in default Xvnc config, Unix domain socket only -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480423 - no authentication required to connect to Xvnc https://bugzilla.redhat.com/show_bug.cgi?id=2480423 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8aeca78af9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list--
May 30, 2026
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!