Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 419 articles for you...
89
security advisoryfedoraupdateFedora 43 Firefox Important Update to Version 153.0 - Performance Boost
Fedora has released an update for Mozilla Firefox to version 153.0, emphasizing compliance, performance, and portability, which can be installed using the dnf update program.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-6dab7a3eff 2026-07-26 01:15:59.915605+00:00 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 43 Version : 153.0 Release : 3.fc43 URL : https://www.mozilla.org/firefox/ Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: Update to latest upstream (153.0) New upstream release (153.0) Updated to latest upstream (153.0) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6dab7a3eff' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 25, 2026
•Important
Fedora
89
security advisoryfedoraDoSFedora 43 2026-4a2d23b470 google-osconfig-agent Important DoS Issues
Fedora 43 has released an update for the Google OS Config Agent, fixing several bugs and vulnerabilities identified by CVEs, and recommending installation via the dnf update program.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-4a2d23b470 2026-07-26 01:15:59.915589+00:00 -------------------------------------------------------------------------------- Name : google-osconfig-agent Product : Fedora 43 Version : 20260717.00 Release : 1.fc43 URL : https://github.com/GoogleCloudPlatform/osconfig Summary : Google OS Config Agent Description : Google OS Config Agent -------------------------------------------------------------------------------- Update Information: Update to 20260717 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2026 Mikel Olasagasti Uranga - 20260717.00-1 - Update to 200260717 - Closes rhbz#2336973 * Thu Jul 16 2026 Fedora Release Engineering - 20241029.01-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Tue Feb 3 2026 Maxwell G - 20241029.01-8 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Fri Jan 16 2026 Fedora Release Engineering - 20241029.01-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Sun Oct 12 2025 Maxwell G - 20241029.01-6 - Rebuild for golang 1.25.2 * Fri Oct 10 2025 Alejandro Sáez - 20241029.01-5 - rebuild * Fri Aug 15 2025 Maxwell G - 20241029.01-4 - Rebuild for golang-1.25.0 * Thu Jul 24 2025 Fedora Release Engineering - 20241029.01-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Jan 17 2025 Fedora Release Engineering - 20241029.01-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2385031 - google-osconfig-agent: FTBFS in Fedora rawhide/f43 https://bugzilla.redhat.com/show_bug.cgi?id=2385031 [ 2 ] Bug #2408286 - CVE-2025-58189 google-osconfig-agent: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2408286 [ 3 ] Bug #2409759 - CVE-2025-61723 google-osconfig-agent: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2409759 [ 4 ] Bug #2410709 - CVE-2025-58185 google-osconfig-agent: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2410709 [ 5 ] Bug #2411605 - CVE-2025-58188 google-osconfig-agent: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2411605 [ 6 ] Bug #2412705 - CVE-2025-58183 google-osconfig-agent: Unbounded allocation when parsing GNU sparse map [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2412705 [ 7 ] Bug #2422203 - CVE-2025-65637 google-osconfig-agent: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2422203 [ 8 ] Bug #2486287 - CVE-2026-45287 google-osconfig-agent: OpenTelemetry-Go: Denial of Service due to file descriptor leak [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2486287 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4a2d23b470' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Critical updates for Fedora 43 regarding google-osconfig-agent address Denial of Service and memory issues.. Fedora 43, google-osconfig-agent, Denial of Service, memory exhaustion. . Severity: Important. LinuxSecurity.com Team
Jul 25, 2026
•Important
Fedora
89
security advisorydenial of servicefedoraFedora 43 moby-engine Update v29.6.2 Denial of Service Vulnerability
An update for the moby-engine in Fedora 43 has been released, addressing upstream security vulnerabilities and introducing version 29.6.2, making Docker containers more secure and efficient.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-64ca3441c3 2026-07-26 01:15:59.915575+00:00 -------------------------------------------------------------------------------- Name : moby-engine Product : Fedora 43 Version : 29.6.2 Release : 1.fc43 URL : https://github.com/moby/moby Summary : The open-source application container engine Description : Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance and everything in between — and they do not require you to use a particular language, framework or packaging system. That makes them great building blocks for deploying and scaling web apps, databases, and backend services without depending on a particular stack or provider. -------------------------------------------------------------------------------- Update Information: Update to release v29.6.2 Resolves: rhbz#2496437 Upstream security fixes GHSA-hw3h-2gp9-cxpv GHSA-qx3x-mv6r-52p6 GHSA-32pv-7hq5-qhwq GHSA-g2h8-426c-7976 GHSA-388v-wmr2-g2v2 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 16 2026 Bradley G Smith - 29.6.2-1 - Update to release v29.6.2 - Resolves: rhbz#2496437 - Upstream security fixes - - GHSA-hw3h-2gp9-cxpv - - GHSA-qx3x-mv6r-52p6 - - GHSA-32pv-7hq5-qhwq - - GHSA-g2h8-426c-7976 - - GHSA-388v-wmr2-g2v2 * Thu Jul 16 2026 Fedora Release Engineering - 29.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 26 2026 Bradley G Smith - 29.6.1-1 - Update to release v29.6.1 - Resolves: rhbz#2493405 - Upstream securityfixes for: GHSA-mjcv-p78q-w5fw GHSA-jpcc-p29g-p8mq GHSA-72x6-4j93-7w86 GHSA-7236-3392-c5c6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2496437 - CVE-2026-47262 moby-engine: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2496437 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-64ca3441c3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update to moby-engine v29.6.2 addressing denial of service risks with upstream security fixes. Learn more about it.. Fedora updates, moby-engine security, container security, upstream fixes. . Severity: Critical. LinuxSecurity.com Team
Jul 25, 2026
•Critical
Fedora
89
security advisoryupdateimportantFedora 43 Libreswan Important IKE Tunnel Security Update CVE-2026-14957
Fedora 43 has released an update for Libreswan version 5.3.2 to address CVE-2026-14957, offering tools for secure IPsec tunnel setup and management.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-146b86f436 2026-07-26 01:15:59.915573+00:00 -------------------------------------------------------------------------------- Name : libreswan Product : Fedora 43 Version : 5.3.2 Release : 2.fc43 URL : https://libreswan.org/ Summary : Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec Description : Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. This package contains the daemons and userland tools for setting up Libreswan. Libreswan also supports IKEv2 (RFC7296) and Secure Labeling Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04 -------------------------------------------------------------------------------- Update Information: Update to 5.3.2 for CVE-2026-14957 (with newsources) -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2026 Paul Wouters - 5.3.2-2 - Update to 5.3.2 for CVE-2026-14957 (with newsources) * Fri Jul 17 2026 Paul Wouters - 5.3.2-1 - Update to 5.3.2 for CVE-2026-14957 * Thu Jul 16 2026 Fedora Release Engineering - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jun 24 2026 Paul Wouters - 5.3.1-1 - Update to libreswan-5.3.1 * Thu Jan 29 2026 Daiki Ueno - 5.3-5 - Fix compilation error onFedora 44 * Fri Jan 16 2026 Fedora Release Engineering - 5.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-146b86f436' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 25, 2026
•Important
Fedora
89
security advisorydenial of serviceinformation leakFedora 43 xrdp Important Denial Of Service Risks Advisory 2026-952a486b39
Fedora has released an update for xrdp, which enhances compatibility and addresses several security vulnerabilities ranging from denial-of-service to buffer overflows and improper input validation.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-952a486b39 2026-07-26 01:15:59.915570+00:00 -------------------------------------------------------------------------------- Name : xrdp Product : Fedora 43 Version : 0.10.6.1 Release : 3.fc43 URL : http://www.xrdp.org/ Summary : Open source remote desktop protocol (RDP) server Description : xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client. -------------------------------------------------------------------------------- Update Information: Update PAM file to better match modern reality. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 18 2026 Bojan Smojver - 1:0.10.6.1-3 - Fix bug #2499948 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2502969 - CVE-2026-54538 xrdp: infinite loop denial-of-service vulnerability during RDP packet processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502969 [ 2 ] Bug #2502971 - CVE-2026-41521 xrdp: integer overflow leads to out-of-bounds read in vnc-any mode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502971 [ 3 ] Bug #2502973 - CVE-2026-44178 xrdp: heap-based buffer overflow in virtual channel forwarding [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502973 [ 4 ] Bug #2502974 - CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502974 [ 5 ] Bug #2502977 - CVE-2026-55626 xrdp: missing authentication when xrdplaunches Xvnc in UNIX domain socket mode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502977 [ 6 ] Bug #2502978 - CVE-2026-55645 xrdp: out-of-bounds read in client control PDU processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502978 [ 7 ] Bug #2502981 - CVE-2026-44978 xrdp: heap out-of-bounds read in non-TLS FIPS receive paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502981 [ 8 ] Bug #2502983 - CVE-2026-55238 xrdp: improper input validation in capability negotiation leads to denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502983 [ 9 ] Bug #2502985 - CVE-2026-42218 xrdp: timing side-channel allows username enumeration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502985 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-952a486b39' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 25, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 43 p11-kit Critical Stack Exhaustion Fix CVE-2026-13757
The Fedora update for p11-kit version 0.26.4 addresses stack exhaustion, error messages, and memory management issues, providing improved security and stability for PKCS#11 module management.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-566791181a 2026-07-26 01:15:59.915550+00:00 -------------------------------------------------------------------------------- Name : p11-kit Product : Fedora 43 Version : 0.26.4 Release : 1.fc43 URL : http://p11-glue.freedesktop.org/p11-kit.html Summary : Library for loading and sharing PKCS#11 modules Description : p11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable. -------------------------------------------------------------------------------- Update Information: server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit (CVE-2026-13757) fixed confusing error message when trying to store an existing cert with trust anchor fixed assert when parsing p11-kit files with value (") fixed numerous memory management issues Build and test fixes Updated translations -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 10 2026 Packit - 0.26.4-1 - Update to 0.26.4 upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #2494560 - CVE-2026-13757 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494560 [ 2 ] Bug #2498946 - p11-kit-0.26.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2498946 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program.Use su -c 'dnf upgrade --advisory FEDORA-2026-566791181a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 25, 2026
•Critical
Fedora
89
security advisoryfedoraimportantFedora 43 WebKitGTK Important Security Fixes Advisory 2026-ec8e535c6e
The Fedora update for WebKitGTK version 2.52.5 includes crash fixes, increased network timeout, and multiple CVE vulnerabilities resolved, enhancing overall stability and security.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ec8e535c6e 2026-07-26 01:15:59.915548+00:00 -------------------------------------------------------------------------------- Name : webkitgtk Product : Fedora 43 Version : 2.52.5 Release : 1.fc43 URL : https://www.webkitgtk.org/ Summary : GTK web content engine library Description : WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. -------------------------------------------------------------------------------- Update Information: Fire scrollend event for instant programmatic scrolls. Increase network idle connection timeout to 115 seconds. Fix several crashes and rendering issues. Fix CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 9 2026 Michael Catanzaro - 2.52.5-1 - Update to 2.52.5 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ec8e535c6e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 25, 2026
•Important
Fedora
89
security advisorydenial of servicefedoraFedora 43 python-idna Important Denial of Service Fix 2026-6215e65f6c
A new version of python-idna (3.18) has been released in Fedora 43, fixing vulnerabilities CVE-2026-45409 and CVE-2024-3651, while supporting updated IDNA protocols.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-6215e65f6c 2026-07-26 01:15:59.915545+00:00 -------------------------------------------------------------------------------- Name : python-idna Product : Fedora 43 Version : 3.18 Release : 1.fc43 URL : https://github.com/kjd/idna Summary : Internationalized Domain Names in Applications (IDNA) Description : A library to support the Internationalised Domain Names in Applications (IDNA) protocol as specified in RFC 5891 . This version of the protocol is often referred to as "IDNA2008" and can produce different results from the earlier standard from 2003. The library is also intended to act as a suitable drop-in replacement for the "encodings.idna" module that comes with the Python standard library but currently only supports the older 2003 specification. -------------------------------------------------------------------------------- Update Information: Update to the latest version to bring fixes for CVE-2026-45409 and CVE-2024-3651 into the stable releases. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 9 2026 Lumir Balhar - 3.18-1 - Update to 3.18 (rhbz#2483976) * Wed Jun 3 2026 Python Maint - 3.17-2 - Rebuilt for Python 3.15 * Sun May 31 2026 Lumir Balhar - 3.17-1 - Update to 3.17 (rhbz#2480667) * Wed May 13 2026 Lumir Balhar - 3.15-1 - Update to 3.15 (rhbz#2476912) * Mon May 11 2026 Lumir Balhar - 3.14-1 - Update to 3.14 (rhbz#2468686) * Thu Apr 23 2026 Lumir Balhar - 3.13-1 - Update to 3.13 (rhbz#2460821) * Sat Jan 17 2026 Fedora Release Engineering - 3.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Sun Oct 12 2025 Lumir Balhar - 3.11-1 - Updateto 3.11 (rhbz#2403375) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2498560 - CVE-2026-45409 python-idna: idna: Denial of Service via specially crafted long inputs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498560 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6215e65f6c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 25, 2026
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!