Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Firefox Important Update to Version 153.0 - Performance Boost

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 2026-4a2d23b470 google-osconfig-agent Important DoS Issues

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 moby-engine Update v29.6.2 Denial of Service Vulnerability

Calendar White Jul 25, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 xrdp Important Denial Of Service Risks Advisory 2026-952a486b39

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Libreswan Important IKE Tunnel Security Update CVE-2026-14957

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 WebKitGTK Important Security Fixes Advisory 2026-ec8e535c6e

Calendar White Jul 25, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 p11-kit Critical Stack Exhaustion Fix CVE-2026-13757

Calendar White Jul 25, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 python-idna Important Denial of Service Fix 2026-6215e65f6c

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 pam Important Timing Attack Fix 2026-adc8ddbeaa

Calendar White Jul 25, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 628 articles for you...
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorydebianimportant

Debian 11 Sentry-Python Important Environment Exposure CVE-2024-40647

A vulnerability was found in the Python SDK for Sentry.io The issue results in the unintentional exposure of environment variables to subprocesses despite the env={} setting. For Debian 11 bullseye, this problem has been fixed in version 0.13.2-1+deb11u1.. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4612-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Santiago Ruano Rincón May 31, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : sentry-python Version : 0.13.2-1+deb11u1 CVE ID : CVE-2024-40647 Debian Bug : 1083189 A vulnerability was found in the Python SDK for Sentry.io The issue results in the unintentional exposure of environment variables to subprocesses despite the env={} setting. For Debian 11 bullseye, this problem has been fixed in version 0.13.2-1+deb11u1. We recommend that you upgrade your sentry-python packages. For the detailed security status of sentry-python please refer to its security tracker page at: https://security-tracker.debian.org/tracker/sentry-python Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Upgrade sentry-python to fix environment exposure issues in Debian 11. Critical flaw resolved in version 0.13.2-1+deb11u1.. Debian Security, Python SDK, Sentry Issues, Environment Variables, Debian LTS. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 31, 2026 •Important Debian LTS
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorycriticaldebian

Debian Keystone Critical Privilege Escalation Threat Advisory DLA-4611-1

Multiple vulnerabilities have been found in Keystone, the OpenStack identity service, including privilege escalation and authorization and access control flaws. CVE-2026-33551 An authenticated user with only a reader role may obtain an EC2/S3. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4611-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Santiago Ruano Rincón May 31, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : keystone Version : 2:18.1.0-1+deb11u3 CVE ID : CVE-2026-33551 CVE-2026-40683 CVE-2026-42998 CVE-2026-42999 CVE-2026-43000 CVE-2026-43001 CVE-2026-44394 Debian Bug : 1133118 1133884 1135645 Multiple vulnerabilities have been found in Keystone, the OpenStack identity service, including privilege escalation and authorization and access control flaws. CVE-2026-33551 An authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3/s3api) are affected. Reported by Maxence Bornecque, from Orange Cyberdefense CERT Vulnerability Intelligence Watch Team. CVE-2026-40683 LDAP identity backend does not convert enabled attribute to boolean. When the user_enabled_invert configuration option was False (the default), Keystone did not correctly interpret the LDAP enabled attribute, causing users disabled in LDAP to be treated as enabled and allowed to authenticate. Deployments using the LDAP identity backend without user_enabled_invert=True or user_enabled_emulation are affected. Independently reported by Benedikt Trefzer and AndrewBogott. CVE-2026-42998 Application credential authentication does not verify the caller owns the credential, allowing user impersonation within a shared project. Reported by Boris Bobrov, from SAP SE. CVE-2026-42999 An attacker can inject RBAC policy targets via the JSON request body, bypassing authorization on any policy-protected endpoint. Allows reading all credential secrets, creating credentials for arbitrary users, and granting admin across domains. Reported by Boris Bobrov, from SAP SE. CVE-2026-43000 The impersonation from CVE-2026-42998 can be chained with trusts to escalate from member to admin. The resulting trust persists independently of the original credential. Reported by Boris Bobrov, from SAP SE. CVE-2026-43001 Application credentials scoped to one project can create EC2 credentials for a different project. Reported by Tim Shepherd, roiai.ca. CVE-2026-44394 Federated users can maintain access indefinitely by repeatedly re-scoping tokens before expiry. Each re-scope issues a fresh full-TTL token instead of inheriting the original expiry. Only SAML2/OIDC deployments are affected. Reported by Erichen, Institute of Computing Technology, Chinese Academy of Sciences. For Debian 11 bullseye, these problems have been fixed in version 2:18.1.0-1+deb11u3. We recommend that you upgrade your keystone packages. For the detailed security status of keystone please refer to its security tracker page at: https://security-tracker.debian.org/tracker/keystone Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Multiple critical flaws in Keystone for Debian, including privilege escalation and authorization issues. Upgrade recommended.. Keystone Security, Debian Advisory, Privilege Escalation, OpenStack Vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 31, 2026 •Critical Debian LTS
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianaccess control

Debian DSA-6315-1 Cyborg Important Access Control Issues

Two security vulnerabilities have been discovered in Cyborg, the OpenStack component for management of hardware accelerators, which could result in incomplete access controls. For the stable distribution (trixie), these problems have been fixed in version 14.0.0-3+deb13u1.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6315-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 31, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : cyborg CVE ID : CVE-2026-40213 CVE-2026-40214 Two security vulnerabilities have been discovered in Cyborg, the OpenStack component for management of hardware accelerators, which could result in incomplete access controls. For the stable distribution (trixie), these problems have been fixed in version 14.0.0-3+deb13u1. We recommend that you upgrade your cyborg packages. For the detailed security status of cyborg please refer to its security tracker page at: https://security-tracker.debian.org/tracker/cyborg Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian DSA-6315-1 announces important security fixes for Cyborg, improving access control issues in OpenStack.. Debian Cyborg Security OpenStack Access Control. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 31, 2026 •Important Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicedebian

Debian DSA-6314-1 Swift Important Denial Of Service CVE-2026-49017

Alistair Coles discovered that the s3api middleware of Swift, a distributed virtual object store, was susceptible to denial of service. The oldstable distribution (bookworm) is not affected. For the stable distribution (trixie), this problem has been fixed in version 2.35.1-0+deb13u2.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6314-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 31, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : swift CVE ID : CVE-2026-49017 Alistair Coles discovered that the s3api middleware of Swift, a distributed virtual object store, was susceptible to denial of service. The oldstable distribution (bookworm) is not affected. For the stable distribution (trixie), this problem has been fixed in version 2.35.1-0+deb13u2. We recommend that you upgrade your swift packages. For the detailed security status of swift please refer to its security tracker page at: https://security-tracker.debian.org/tracker/swift Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Swift DSA-6314-1 addresses a critical denial of service vulnerability ensuring enhanced security and stability for users and systems affected by this issue. Debian Swift Denial Of Service Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 31, 2026 •Important Debian
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of serviceSQL Injection

Debian DSA-6313-1 Dovecot Important Multiple Attacks MitM SQL Injection

Multiple vulnerabilities have been discovered in the Dovecot IMAP server which way result in denial of service, SQL injection or man-in-the-midddle attacks For the oldstable distribution (bookworm), these problems have been fixed in version 1:2.3.19.1+dfsg1-2.1+deb12u6.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6313-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 31, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : dovecot CVE ID : CVE-2026-33603 CVE-2026-40016 CVE-2026-40020 CVE-2026-42006 CVE-2026-27851 Multiple vulnerabilities have been discovered in the Dovecot IMAP server which way result in denial of service, SQL injection or man-in-the-midddle attacks For the oldstable distribution (bookworm), these problems have been fixed in version 1:2.3.19.1+dfsg1-2.1+deb12u6. For the stable distribution (trixie), these problems have been fixed in version 1:2.4.1+dfsg1-6+deb13u6. We recommend that you upgrade your dovecot packages. For the detailed security status of dovecot please refer to its security tracker page at: https://security-tracker.debian.org/tracker/dovecot Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian DSA-6313-1 addresses important Dovecot vulnerabilities that lead to DoS, SQL injections or MITM attacks.. Dovecot Denial of Service SQL Injection IMAP Security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 31, 2026 •Important Debian
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorymoderatedebian

Debian git-lfs Moderate File Oversight Advisory DLA-4610-1 CVE-2025-26625

In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands could write to files visible outside the current Git working tree if symbolic or hard links existed which collided with the paths of files tracked by Git LFS.. Debian LTS Advisory DLA-4610-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Andrej Shadura May 31, 2026 https://wiki.debian.org/LTS Package : git-lfs Version : 2.13.2-1+deb11u2 CVE ID : CVE-2025-26625 In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands could write to files visible outside the current Git working tree if symbolic or hard links existed which collided with the paths of files tracked by Git LFS. The git lfs checkout and git lfs pull commands did not check for symbolic links before writing to files in the working tree, which allowed an attacker to craft a repository containing symbolic or hard links that caused Git LFS to write to arbitrary file system locations accessible to the user running these commands. Also, when the git lfs checkout and git lfs pull commands were run in a bare repository, they could write to files visible outside the repository. The complete fix to this issue, specifically the behaviour of git lfs pull, requires a newer Git version, 2.42.0 or newer. As a workaround, support for symlinks in Git may be disabled by setting the core.symlinks configuration option to false, after which further clones and fetches will not create symbolic links. However, any symbolic or hard links in existing repositories will still provide the opportunity for Git LFS to write to their targets. For Debian 11 bullseye, this problem has been partially fixed in version 2.13.2-1+deb11u2. For a complete fix, Git 2.42.0 or newer is also required. We recommend that you upgrade yourgit-lfs packages. For the detailed security status of git-lfs please refer to its security tracker page at: https://security-tracker.debian.org/tracker/git-lfs Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Advisory DLA-4610-1 addresses file access issues in git-lfs impacting Git repositories.. Debian git-lfs security fix, file system vulnerability, symbolic links risk. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 May 31, 2026 •moderate Debian LTS
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebiancross site scripting

Debian Trixie Exposes Symfony Security Vulnerabilities DSA-6312-1

Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of security controls, cross-site scripting, denial of service, SQL injection, email header injection, information disclosure or code execution via PHP object deserialization. For the stable distribution (trixie), these problems have been fixed in. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6312-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 31, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : symfony CVE ID : CVE-2024-50340 CVE-2026-45063 CVE-2026-45064 CVE-2026-45065 CVE-2026-45066 CVE-2026-45067 CVE-2026-45068 CVE-2026-45069 CVE-2026-45071 CVE-2026-45072 CVE-2026-45073 CVE-2026-45077 CVE-2026-45133 CVE-2026-45304 CVE-2026-45305 CVE-2026-45754 CVE-2026-46626 CVE-2026-48489 CVE-2026-48736 CVE-2026-48760 CVE-2026-48761 CVE-2026-48784 Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of security controls, cross-site scripting, denial of service, SQL injection, email header injection, information disclosure or code execution via PHP object deserialization. For the stable distribution (trixie), these problems have been fixed in version 6.4.41+dfsg-0+deb13u1. We recommend that you upgrade your symfony packages. For the detailed security status of symfony please refer to its security tracker page at: https://security-tracker.debian.org/tracker/symfony Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian DSA-6312-1 alerts about Symfonyvulnerabilities leading to security breaches and recommends updates for users.. Symfony Security Bypass, Debian DSA-6312-1 Advisory, PHP Framework Vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 31, 2026 •Important Debian
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorydenial of servicefedora

Fedora 43 Netatalk's Severe Vulnerabilities Result in Data Leaks and Risks

4.4.3 Release. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9fd50b2ff1 2026-05-31 01:13:21.121569+00:00 -------------------------------------------------------------------------------- Name : netatalk Product : Fedora 43 Version : 4.4.3 Release : 1.fc43 URL : http://netatalk.sourceforge.net Summary : Open Source Apple Filing Protocol(AFP) File Server Description : Netatalk is a freely-available Open Source AFP file server. A *NIX/*BSD system running Netatalk is capable of serving many Macintosh clients simultaneously as an AppleShare file server (AFP). In addition to the AFP file server daemon, the following utility programs are also included: * ad - AppleDouble file utility suite * afpldaptest - validate Netatalk LDAP parameters * afppasswd - RandNum UAM password management * afpstats - inquire AFP server usage stats * asip-status - inquire AFP server capabilities * dbd - CNID database maintenance * macusers - list connected AFP server users -------------------------------------------------------------------------------- Update Information: 4.4.3 Release -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #2459261 - netatalk-4.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2459261 [ 2 ] Bug #2480439 - CVE-2026-44057 netatalk: Netatalk: Information disclosure via crafted Spotlight RPC requests [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480439 [ 3 ] Bug #2480440 - CVE-2026-44057 netatalk: Netatalk: Information disclosure via crafted Spotlight RPC requests [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480440 [ 4 ] Bug #2480449 - CVE-2026-44049 netatalk: Netatalk: Arbitrary code execution via out-of-bounds write[fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480449 [ 5 ] Bug #2480450 - CVE-2026-44049 netatalk: Netatalk: Arbitrary code execution via out-of-bounds write [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480450 [ 6 ] Bug #2480467 - CVE-2026-44069 netatalk: Netatalk: Integer underflow vulnerability in volxlate function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480467 [ 7 ] Bug #2480470 - CVE-2026-44052 netatalk: Netatalk: Information Disclosure via ldap simple-bind password exposure in logs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480470 [ 8 ] Bug #2480471 - CVE-2026-44052 netatalk: Netatalk: Information Disclosure via ldap simple-bind password exposure in logs [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480471 [ 9 ] Bug #2480472 - CVE-2026-44054 netatalk: Netatalk: Denial of Service via predictable session token [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480472 [ 10 ] Bug #2480473 - CVE-2026-44054 netatalk: Netatalk: Denial of Service via predictable session token [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480473 [ 11 ] Bug #2480478 - CVE-2026-44062 netatalk: Netatalk: Arbitrary code execution or denial of service due to missing bounds check [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480478 [ 12 ] Bug #2480479 - CVE-2026-44062 netatalk: Netatalk: Arbitrary code execution or denial of service due to missing bounds check [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480479 [ 13 ] Bug #2480483 - CVE-2026-44068 netatalk: Netatalk: Arbitrary file access via path traversal [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480483 [ 14 ] Bug #2480486 - CVE-2026-44076 netatalk: Netatalk: Arbitrary Code Execution via shell injection in volume path [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480486 [ 15 ] Bug #2480487 - CVE-2026-44076 netatalk: Netatalk:Arbitrary Code Execution via shell injection in volume path [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480487 [ 16 ] Bug #2480488 - CVE-2026-44060 netatalk: Netatalk: Denial of Service via integer underflow [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480488 [ 17 ] Bug #2480489 - CVE-2026-44060 netatalk: Netatalk: Denial of Service via integer underflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480489 [ 18 ] Bug #2480490 - CVE-2026-44055 netatalk: Netatalk: Arbitrary code execution via shell injection [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480490 [ 19 ] Bug #2480491 - CVE-2026-44055 netatalk: Netatalk: Arbitrary code execution via shell injection [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480491 [ 20 ] Bug #2480496 - CVE-2026-44050 netatalk: Netatalk: Arbitrary code execution via heap buffer overflow in cnid daemon [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480496 [ 21 ] Bug #2480497 - CVE-2026-44050 netatalk: Netatalk: Arbitrary code execution via heap buffer overflow in cnid daemon [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480497 [ 22 ] Bug #2480501 - CVE-2026-44047 netatalk: Netatalk: Arbitrary code execution and data compromise via SQL injection [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480501 [ 23 ] Bug #2480502 - CVE-2026-44047 netatalk: Netatalk: Arbitrary code execution and data compromise via SQL injection [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480502 [ 24 ] Bug #2480624 - CVE-2026-44048 netatalk: stack buffer overflow via UCS-2 type confusion in convert_charset() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480624 [ 25 ] Bug #2480625 - CVE-2026-44048 netatalk: stack buffer overflow via UCS-2 type confusion in convert_charset() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480625 [ 26 ] Bug #2480626 - CVE-2026-44066netatalk: heap out-of-bounds reads in Spotlight RPC unmarshalling [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480626 [ 27 ] Bug #2480627 - CVE-2026-44066 netatalk: heap out-of-bounds reads in Spotlight RPC unmarshalling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480627 [ 28 ] Bug #2480628 - CVE-2026-44064 netatalk: ASP session ID out-of-bounds access [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480628 [ 29 ] Bug #2480629 - CVE-2026-44064 netatalk: ASP session ID out-of-bounds access [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480629 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9fd50b2ff1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Netatalk 4.4.3 update for Fedora 43 addresses information disclosure and arbitrary code execution issues. Stay secure!. Netatalk updates, Fedora security, software vulnerabilities, security updates. . Severity: Important.LinuxSecurity.com Team

Calendar%202 May 31, 2026 •Important Fedora
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics