Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 429 articles for you...
89
security advisoryfedoraupdateFedora 44 Kernel Important Security Fix 2026-2b94d8d05c
Fedora 44 kernel version 7.1.4-204 has been released with important security fixes addressing active exploits, and it can be updated using the DNF package manager.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-2b94d8d05c 2026-07-23 01:18:29.467256+00:00 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 44 Version : 7.1.4 Release : 204.fc44 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package -------------------------------------------------------------------------------- Update Information: The 7.1.4-104/204 stable kennel updates contain a couple of security fixes for issues with exploits in the wild. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 22 2026 Justin M. Forbes [7.1.4-4] - net/packet: avoid fanout hook re-registration after unregister (David Lee) * Wed Jul 22 2026 Justin M. Forbes [7.1.4-3] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (Jamal Hadi Salim) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2b94d8d05c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 22, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 44 SRT Significant Streaming Improvement 2026-45ce54d51e
Fedora has released an update for the SRT tool to version 1.5.6, enhancing secure streaming over unstable networks, available for installation via the dnf update command.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-45ce54d51e 2026-07-23 01:18:29.467242+00:00 -------------------------------------------------------------------------------- Name : srt Product : Fedora 44 Version : 1.5.6 Release : 1.fc44 URL : https://www.srtalliance.org Summary : Secure Reliable Transport protocol tools Description : Secure Reliable Transport (SRT) is an open source transport technology that optimizes streaming performance across unpredictable networks, such as the Internet. -------------------------------------------------------------------------------- Update Information: Update to 1.5.6 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 21 2026 Yanko Kaneti - 1.5.6-1 - Update to 1.5.6 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-45ce54d51e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 22, 2026
•Important
Fedora
89
security advisoryfedoradenial serviceFedora 44 Fractal Important Denial Of Service Advisory 2026-600530ae91
Fractal version 14.1, a group messaging app for GNOME, has been released in Fedora 44, including bug fixes and security updates related to vulnerabilities identified in previous versions.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-600530ae91 2026-07-23 01:18:29.467244+00:00 -------------------------------------------------------------------------------- Name : fractal Product : Fedora 44 Version : 14.1 Release : 1.fc44 URL : https://gitlab.gnome.org/World/fractal Summary : Matrix group messaging app Description : Fractal is a Matrix messaging app for GNOME written in Rust. Its interface is optimized for collaboration in large groups, such as free software projects. -------------------------------------------------------------------------------- Update Information: 14.1 -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 20 2026 Gwyn Ciesla - 14.1-1 - 14.1 * Wed Jul 15 2026 Fedora Release Engineering - 14-0.beta.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz - 14-0.beta.1 - Rebuilt for openssl 4.0 * Wed Apr 1 2026 Gwyn Ciesla - 14-0.beta - 14 beta -------------------------------------------------------------------------------- References: [ 1 ] Bug #2420427 - CVE-2025-66622 fractal: matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2420427 [ 2 ] Bug #2423493 - fractal: webp crate may expose memory contents [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2423493 [ 3 ] Bug #2438128 - CVE-2026-25727 fractal: time affected by a stack exhaustion denial of service attack [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438128 [ 4 ] Bug #2502176 - fractal-14.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2502176 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-600530ae91' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 22, 2026
•Important
Fedora
89
security advisoryfedorabuffer overflowFedora 44 llvm Severe Buffer Overflow Resolution 2026-597e8f9de1
Fedora 44 has released an update for LLVM 22.1.8 addressing buffer overflow issues, miscompilations affecting Rust applications, and other fixes, enhancing overall compiler stability and security.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-597e8f9de1 2026-07-23 01:18:29.467240+00:00 -------------------------------------------------------------------------------- Name : llvm Product : Fedora 44 Version : 22.1.8 Release : 4.fc44 URL : http://llvm.org Summary : The Low Level Virtual Machine Description : LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality. -------------------------------------------------------------------------------- Update Information: Backport fixes from LLVM 23 Fix an issue that could cause a buffer overflow when reading a corrupted bitcode file. Fix a miscompilation known to affect rust applications. Fix a miscompilation in x86 vectorized code. Fix 2 issues in LLD. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 16 2026 Tulio Magno Quites Machado Filho - 22.1.8-4 - More backported fixes * Thu Jul 16 2026 Tulio Magno Quites Machado Filho - 22.1.8-3 - Fix miscompilation * Thu Jul 16 2026 Tulio Magno Quites Machado Filho - 22.1.8-2 - Fix buffer overflow -------------------------------------------------------------------------------- References: [ 1 ] Bug #2496390 - CVE-2026-13574 llvm: LLVM: Denial of service via heap-based buffer overflow in Bitcode File Handler [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2496390 [ 2 ] Bug #2499684 - miscompilation that leads to segfaults with Rust 1.97.0 https://bugzilla.redhat.com/show_bug.cgi?id=2499684 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-597e8f9de1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 22, 2026
•Critical
Fedora
89
security advisorydenial of servicefedoraCritical Update Information for Fedora 44 libssh - 2026-0e46c91ccf
Fedora 44 has released libssh version 0.12.1, addressing multiple security vulnerabilities and updates, enhancing SSH protocol implementation for developers with a focus on security improvements.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-0e46c91ccf 2026-07-23 01:18:29.467232+00:00 -------------------------------------------------------------------------------- Name : libssh Product : Fedora 44 Version : 0.12.1 Release : 1.fc44 URL : http://www.libssh.org Summary : A library implementing the SSH protocol Description : The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl). -------------------------------------------------------------------------------- Update Information: New upstream security release -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 21 2026 Jakub Jelen - 0.12.1-1 - New upstream security release * Thu Jul 16 2026 Fedora Release Engineering - 0.12.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz - 0.12.0-3 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2503148 - libssh-0.12.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2503148 [ 2 ] Bug #2503651 - CVE-2026-15370 libssh: libssh: stack buffer overflow in SFTP server longname construction [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503651 [ 3 ] Bug #2503656 -CVE-2026-59842 libssh: libssh: information disclosure via short GSSAPI Curve25519 public key [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503656 [ 4 ] Bug #2503657 - CVE-2026-59843 libssh: libssh: denial of service via zero advertised channel packet size [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503657 [ 5 ] Bug #2503658 - CVE-2026-59844 libssh: libssh: denial of service via oversized SFTP read length [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503658 [ 6 ] Bug #2503668 - CVE-2026-59845 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503668 [ 7 ] Bug #2503669 - CVE-2026-59846 libssh: libssh: information disclosure via ProxyCommand %r username expansion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503669 [ 8 ] Bug #2503671 - CVE-2026-59847 libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503671 [ 9 ] Bug #2503673 - CVE-2026-59848 libssh: libssh: denial of service via SFTP responses with unknown request IDs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503673 [ 10 ] Bug #2503674 - CVE-2026-59849 libssh: libssh: denial of service via automatic certificate authentication loop [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503674 [ 11 ] Bug #2503675 - CVE-2026-59850 libssh: libssh: use-after-free via data callbacks on closed channels [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503675 [ 12 ] Bug #2503676 - CVE-2026-59851 libssh: libssh: authentication bypass via missing GSSAPI principal check [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503676 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2026-0e46c91ccf' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 22, 2026
•Critical
Fedora
89
security advisoryfedoraimportantFedora 44 Chromium Important Use After Free Issues 2026-310f620a68
An update for Chromium on Fedora 44 addresses several security vulnerabilities, including use after free and out of bounds issues, while improving auto dark mode settings.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-310f620a68 2026-07-23 01:18:29.467228+00:00 -------------------------------------------------------------------------------- Name : chromium Product : Fedora 44 Version : 150.0.7871.128 Release : 1.fc44 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Update to 150.0.7871.128 * CVE-2026-15899: Use after free in CameraCapture * CVE-2026-15900: Use after free in GPU * CVE-2026-15901: Use after free in Network * CVE-2026-15902: Use after free in Cast * CVE-2026-15903: Out of bounds read and write in V8 * CVE-2026-15904: Use after free in Ozone * CVE-2026-15905: Use after free in Aura -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 20 2026 Than Ngo - 150.0.7871.128-1 - Update to 150.0.7871.128 * CVE-2026-15899: Use after free in CameraCapture * CVE-2026-15900: Use after free in GPU * CVE-2026-15901: Use after free in Network * CVE-2026-15902: Use after free in Cast * CVE-2026-15903: Out of bounds read and write in V8 * CVE-2026-15904: Use after free in Ozone * CVE-2026-15905: Use after free in Aura - Fix rhbz#2501811, Drop AI policy which breaks DoH settings - Improve auto darkmode -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-310f620a68' at the command line. For more information,refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 22, 2026
•Important
Fedora
89
security advisoryfedoracriticalFedora 44 nginx-mod-naxsi Critical Arbitrary Code Exec Vuln 2026-60fc198d3b
The Fedora update announces a rebuild of various nginx modules, including nginx-mod-naxsi, and addresses security vulnerabilities, notably allowing arbitrary code execution through crafted HTTP requests.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-60fc198d3b 2026-07-23 01:18:29.467215+00:00 -------------------------------------------------------------------------------- Name : nginx-mod-naxsi Product : Fedora 44 Version : 1.6 Release : 21.fc44 URL : https://github.com/wargio/naxsi Summary : nginx web application firewall module Description : naxsi is an nginx module that provides score based Web Application Firewall (WAF) abilities in a highly granular fashion. -------------------------------------------------------------------------------- Update Information: nginx-mod-fancyindex: Rebuild for 1.30.4 nginx-mod-modsecurity: Rebuild for 1.30.4 nginx-mod-naxsi: Rebuild for 1.30.4 nginx-mod-headers-more: Rebuild for 1.30.4 nginx-mod-brotli: Rebuild for 1.30.4 nginx-mod-js-challenge: Rebuild for 1.30.4 nginx-mod-vts: Rebuild for 1.30.4 nginx: update to 1.30.4 fixes CVE-2026-42533, CVE-2026-60005, CVE-2026-56434 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 19 2026 Felix Kaechele - 1.6-21 - Rebuild for 1.30.4 * Thu Jul 16 2026 Fedora Release Engineering - 1.6-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2501307 - CVE-2026-42533 nginx: NGINX: Arbitrary code execution via crafted HTTP requests [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2501307 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-60fc198d3b' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 22, 2026
•Critical
Fedora
89
security advisoryfedoracriticalFedora 44 nginx-mod-modsecurity Critical Update for CVE-2026-42533
The Fedora 44 update for nginx-mod-modsecurity, dependent on libmodsecurity, includes several rebuilds for nginx version 1.30.4 to address various security vulnerabilities.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-60fc198d3b 2026-07-23 01:18:29.467215+00:00 -------------------------------------------------------------------------------- Name : nginx-mod-modsecurity Product : Fedora 44 Version : 1.0.4 Release : 16.fc44 URL : https://github.com/SpiderLabs/ModSecurity-nginx Summary : ModSecurity v3 nginx connector Description : The ModSecurity-nginx connector is the connection point between nginx and libmodsecurity (ModSecurity v3). Said another way, this project provides a communication channel between nginx and libmodsecurity. This connector is required to use LibModSecurity with nginx. The ModSecurity-nginx connector takes the form of an nginx module. The module simply serves as a layer of communication between nginx and ModSecurity -------------------------------------------------------------------------------- Update Information: nginx-mod-fancyindex: Rebuild for 1.30.4 nginx-mod-modsecurity: Rebuild for 1.30.4 nginx-mod-naxsi: Rebuild for 1.30.4 nginx-mod-headers-more: Rebuild for 1.30.4 nginx-mod-brotli: Rebuild for 1.30.4 nginx-mod-js-challenge: Rebuild for 1.30.4 nginx-mod-vts: Rebuild for 1.30.4 nginx: update to 1.30.4 fixes CVE-2026-42533, CVE-2026-60005, CVE-2026-56434 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 19 2026 Felix Kaechele - 1.0.4-16 - Rebuild for 1.30.4 * Thu Jul 16 2026 Fedora Release Engineering - 1.0.4-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jul 8 2026 Joe Orton - 1.0.4-14 - Rebuild. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2501307 - CVE-2026-42533 nginx:NGINX: Arbitrary code execution via crafted HTTP requests [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2501307 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-60fc198d3b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 22, 2026
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!