Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 409 articles for you...
89
security advisoryfedoraimportantFedora 43 systemd 258.10 Important Bugfix Advisory 2026-289c38d6f2
Fedora 43 systemd update to version 258.10 includes numerous bugfixes and security improvements. Users can upgrade using the dnf command for enhanced system and service management.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-289c38d6f2 2026-07-27 01:12:03.303815+00:00 -------------------------------------------------------------------------------- Name : systemd Product : Fedora 43 Version : 258.10 Release : 1.fc43 URL : https://systemd.io Summary : System and Service Manager Description : systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. systemd supports SysV and LSB init scripts and works as a replacement for sysvinit. Other parts of this package are a logging daemon, utilities to control basic system configuration like the hostname, date, locale, maintain a list of logged-in users, system accounts, runtime directories and settings, and a logging daemons. This package was built from the v258-stable branch of systemd. -------------------------------------------------------------------------------- Update Information: Latest upstream bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 25 2026 Zbigniew Jędrzejewski-Szmek - 258.10-1 - Version 258.10 - a bugfix release with correctness and security-relevant fixes too. 184 patches, so too many to describe here. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-289c38d6f2' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 43 systemd 258.10 latest upstream release with critical bugfixes and updates for service management.. Fedora Updates, systemd Service Manager, security fixes, system administration, upstream release. . Severity: Important. LinuxSecurity.com Team
Jul 26, 2026
•Important
Fedora
89
security advisorydenial of servicefedoraFedora 43 Skopeo Significant Denial of Service Resolution CVE-2026-27145
Fedora released an update for skopeo addressing a DoS vulnerability related to DNS SAN processing, enhancing security and including a rebuild with a fixed version of Go.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-4d9a2870e5 2026-07-27 01:12:03.303805+00:00 -------------------------------------------------------------------------------- Name : skopeo Product : Fedora 43 Version : 1.22.2 Release : 2.fc43 URL : https://github.com/containers/skopeo Summary : Inspect container images and repositories on registries Description : Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2026-27145 (Go stdlib crypto/x509 DoS vulnerability). Rebuild with golang-1.25.12 which includes the fix. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 22 2026 Lokesh Mandvekar - 1:1.22.2-2 - Rebuild for CVE-2026-27145 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2494281 - CVE-2026-27145 skopeo: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494281 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4d9a2870e5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Critical
Fedora
89
security advisoryfedoracriticalFedora 43 Trafficserver Critical DoS Issue Fix 2026-ddaabe38ab
The Fedora update for Traffic Server version 10.1.3 addresses a DoS vulnerability, includes numerous fixes and enhancements, and supports extensible features for high-performance HTTP caching.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ddaabe38ab 2026-07-27 01:12:03.303800+00:00 -------------------------------------------------------------------------------- Name : trafficserver Product : Fedora 43 Version : 10.1.3 Release : 1.fc43 URL : https://trafficserver.apache.org/ Summary : Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server Description : Traffic Server is a high-performance building block for cloud services. It's more than just a caching proxy server; it also has support for plugins to build large scale web applications. Key features: Caching - Improve your response time, while reducing server load and bandwidth needs by caching and reusing frequently-requested web pages, images, and web service calls. Proxying - Easily add keep-alive, filter or anonymize content requests, or add load balancing by adding a proxy layer. Fast - Scales well on modern SMP hardware, handling 10s of thousands of requests per second. Extensible - APIs to write your own plug-ins to do anything from modifying HTTP headers to handling ESI requests to writing your own cache algorithm. Proven - Handling over 400TB a day at Yahoo! both as forward and reverse proxies, Apache Traffic Server is battle hardened. -------------------------------------------------------------------------------- Update Information: Resolves CVE-2026-59173 - DoS vulnerability in HTTP/2 via stalled flow-control Additional Changes with Apache Traffic Server 9.2.14 #12910 - Fix connection-level window mismatch causing 408/504 timeouts #13266 - Add Claude Code project guide for the 9.2.x branch #13267 - [9.2.x] Backport format scripts fixes #13377 - 9.2.x: http2: Trackscheduled events Additional Changes with Apache Traffic Server 10.1.3 #12192 - Return a 400 on chunk parse errors #12733 - Fix retry logic for TSHttpTxnServerAddrSet (issue #12611) #12854 - Fix LoadedPlugins::remove crash during static destruction #12855 - Fix header_rewrite run-plugin relative path resolution #12857 - Fix autest compatibility with Fedora 43 / Python 3.14 #12943 - Address incompatibility with BoringSSL #12959 - Fix crash in HttpSM::tunnel_handler on unhandled VC events #12972 - Fix cache retry assert on ServerAddrSet #12990 - Update to Proxy Verifier v3.0.0 #13008 - cmake: limit GENERAL_NAME bssl probe #13020 - Align AuTests with latest proxy-verifier checks (#12986) #13025 - hrw: Refix loading geodb files #13033 - tests/gold_tests/headers tests: use ATSReplayTest #13113 - slice: Fix crash caused by use-after-free #13114 - Fix bg fill teardown crash in update_size_and_time_stats #13138 - Remove cache alternate vector detach #13144 - Fix XPACK relative index underflow #13162 - hrw: Fix an index bug in run plugin operator #13177 - Correct records.yaml record drift #13178 - 10.1.x: proxy.config.dns.search_default_domains: allow 2 #13182 - Stabilize parallel AuTest helpers #13192 - yaml-cpp-0.9.0 #13193 - GCC 16: Regex header integer includes #13198 - Fedora 44 test fixes #13200 - Single source of truth for Proxy Verifier metadata #13217 - Proxy Verifier v3.1.3 #13218 - Fix hdrHeap/hdrStrHeap allocator inuse metric underflow #13220 - Fix flaky Fedora 44 AuTest helpers #13223 - Fix mismatched sINT/dINT log field types #13252 - cache: apply per-volume settings on first start after clear #13256 - Fix mismatched log field types more #13261 - header_rewrite: Improve URL Error messages #13263 - Fix bounds check in CacheVC::scanObject #13264 - Handle OpenSSL without dynamic ENGINE #13280 - Enable probes in Fedora C++20 CI #13293 - ProxyProtocol: free pp_info heap on NetVConnection recycle #13294- Fix pending HostDB DNS queue removal race #13295 - Fix server entry cleanup after request tunnel setup #13297 - 10.1.x: Add sni.yaml session ticket overrides (#13006) #13303 - header_rewrite: Fix a leak and truncation in set-body-from #13307 - dns: destruct HostEnt on free to fix SRV vector leak #13318 - TLS: Fix memory leaks in cert load and OCSP stapling #13325 - HttpSM.cc: fix cache read end milestone order #13336 - 10.1.x: Fix redirected cache write without write VC #13365 - 10.1.x: USDT: normalize names for STATE_ENTER #13366 - 10.1.x: Fix set-status crash inside if/endif at remap time #13387 - Hard-enforce max_active_streams_in at HTTP/2 stream creation -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 15 2026 Jered Floyd - 10.1.3-1 - Update to upstream 10.1.3 * Fri Jun 12 2026 Yaakov Selkowitz - 10.1.2-2 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2501029 - trafficserver-10.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2501029 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ddaabe38ab' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Critical
Fedora
89
security advisorydenial of servicefedoraFedora 43 libwebsockets Important Denial of Service Update 2026-59fdef3e5
Fedora has released an update for libwebsockets, version 4.5.8, addressing various bugs and ensuring compatibility with OpenSSL 4.0, available via the dnf update program.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-59fdef3e5f 2026-07-27 01:12:03.303787+00:00 -------------------------------------------------------------------------------- Name : libwebsockets Product : Fedora 43 Version : 4.5.8 Release : 2.fc43 URL : http://libwebsockets.org Summary : Lightweight C library for Websockets Description : This is the libwebsockets C library for lightweight websocket clients and servers. -------------------------------------------------------------------------------- Update Information: Update to 4.5.8 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 18 2026 Peter Robinson - 4.5.8-1 - Update to 4.5.8 * Thu Jul 16 2026 Fedora Release Engineering - 4.5.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz - 4.5.7-3 - Rebuilt for openssl 4.0 * Thu Apr 30 2026 Dmitry Belyavskiy - 4.5.7-2 - Migrated to OpenSSL 4.0: use ASN1_STRING accessors instead of direct struct access -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452084 - libwebsockets-4.5.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452084 [ 2 ] Bug #2487519 - CVE-2026-10650 libwebsockets: libwebsockets: Denial of Service via SSH Protocol Handler resource consumption [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2487519 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-59fdef3e5f' at the command line. For more information, refer to the dnf documentationavailable at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Important
Fedora
89
security advisoryfedoracriticalFedora 44 systemd Critical Bugfix Advisory 2026-230ba36543
Fedora 44 has released an update for systemd version 259.8, addressing bugs and security issues, and enhancing system management capabilities. Install via the dnf update command.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-230ba36543 2026-07-27 00:54:18.641585+00:00 -------------------------------------------------------------------------------- Name : systemd Product : Fedora 44 Version : 259.8 Release : 1.fc44 URL : https://systemd.io Summary : System and Service Manager Description : systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. systemd supports SysV and LSB init scripts and works as a replacement for sysvinit. Other parts of this package are a logging daemon, utilities to control basic system configuration like the hostname, date, locale, maintain a list of logged-in users, system accounts, runtime directories and settings, and a logging daemons. This package was built from the v259-stable branch of systemd. -------------------------------------------------------------------------------- Update Information: Latest upstream bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 25 2026 Zbigniew Jędrzejewski-Szmek - 259.8-1 - Version 259.8 - a bugfix release with correctness and security-relevant fixes too. 205 patches, so too much to describe here. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-230ba36543' at the command line. Formore information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Discover the latest Fedora 44 systemd bugfix release addressing key security issues. Update to enhance system management.. Fedora 44, systemd, bugfix release, security update, service manager. . Severity: Critical. LinuxSecurity.com Team
Jul 26, 2026
•Critical
Fedora
89
security advisoryfedoraremote accessFedora 44 libgit2 Update 1.9.6 Security Fixes CVE-2026-53583 CVE-2026-53584
Fedora has released an update for libgit2 version 1.9.6, which includes fixes for multiple security issues, ensuring the package remains secure and reliable for users.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d59721e9b 2026-07-27 00:54:18.641579+00:00 -------------------------------------------------------------------------------- Name : libgit2 Product : Fedora 44 Version : 1.9.6 Release : 1.fc44 URL : https://libgit2.org/ Summary : C implementation of the Git core methods as a library with a solid API Description : libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings. -------------------------------------------------------------------------------- Update Information: Update libgit2 to version 1.9.6. Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security issues, including - but not limited to: CVE-2026-53583 CVE-2026-53584 CVE-2026-53585 CVE-2026-53586 CVE-2026-53587 The Fedora package is not affected by GHSA-wfx7-g85r-q6vw since Fedora packages always linked the system PCRE2 and did not use the bundled PCRE. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 23 2026 Fabio Valentini - 1.9.6-1 - Update to version 1.9.6 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d59721e9b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the FedoraProject can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Critical
Fedora
89
security advisoryfedoraimportantFedora 44 rust-libgit2-sys Important Security Updates 2026-9d59721e9b
Fedora 44 has updated the rust-libgit2-sys package to version 0.18.7, addressing several security vulnerabilities while maintaining compatibility with system PCRE2, not using the bundled version.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d59721e9b 2026-07-27 00:54:18.641579+00:00 -------------------------------------------------------------------------------- Name : rust-libgit2-sys Product : Fedora 44 Version : 0.18.7 Release : 1.fc44 URL : https://crates.io/crates/libgit2-sys Summary : Native bindings to the libgit2 library Description : Native bindings to the libgit2 library. -------------------------------------------------------------------------------- Update Information: Update libgit2 to version 1.9.6. Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security issues, including - but not limited to: CVE-2026-53583 CVE-2026-53584 CVE-2026-53585 CVE-2026-53586 CVE-2026-53587 The Fedora package is not affected by GHSA-wfx7-g85r-q6vw since Fedora packages always linked the system PCRE2 and did not use the bundled PCRE. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 23 2026 Fabio Valentini - 0.18.7-1 - Update to version 0.18.7; Fixes RHBZ#2506308 * Fri Jul 17 2026 Fedora Release Engineering - 0.18.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d59721e9b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can befound at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Important
Fedora
89
security advisoryfedoraimportantFedora 44 Lego Important Off-Path Poisoning Update 2026-30e8e9a2b2
Fedora has released a notification for updating the lego package to version 5.3.1, an ACME client in Go, addressing issue rhbz#2504092 and related security concerns.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-30e8e9a2b2 2026-07-27 00:54:18.641577+00:00 -------------------------------------------------------------------------------- Name : lego Product : Fedora 44 Version : 5.3.1 Release : 2.fc44 URL : https://github.com/go-acme/lego Summary : Let's Encrypt/ACME client written in Go Description : Let's Encrypt/ACME client written in Go. -------------------------------------------------------------------------------- Update Information: Update to 5.3.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 21 2026 Packit - 5.3.1-1 - Update to 5.3.1 upstream release - Resolves: rhbz#2504092 * Thu Jul 16 2026 Fedora Release Engineering - 5.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2500376 - CVE-2026-10846 lego: ldns: Off-path poisoning attacks due to insufficient query-response matching [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2500376 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-30e8e9a2b2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!