Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 44 Kernel Important Security Fix 2026-2b94d8d05c

Calendar White Jul 22, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Fractal Important Denial Of Service Advisory 2026-600530ae91

Calendar White Jul 22, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 SRT Significant Streaming Improvement 2026-45ce54d51e

Calendar White Jul 22, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 44 llvm Severe Buffer Overflow Resolution 2026-597e8f9de1

Calendar White Jul 22, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 Chromium Important Use After Free Issues 2026-310f620a68

Calendar White Jul 22, 2026
Important
Fedora Large Esm H900
Fedora

Critical Update Information for Fedora 44 libssh - 2026-0e46c91ccf

Calendar White Jul 22, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 44 perl-DBI Important Update Denial of Service CVEs 2026-1c5ffc6018

Calendar White Jul 22, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 nginx-mod-modsecurity Critical Update for CVE-2026-42533

Calendar White Jul 22, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 nginx-mod-naxsi Critical Arbitrary Code Exec Vuln 2026-60fc198d3b

Calendar White Jul 22, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":50,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 44 perl-YAML-Syck Important Memory-Safety CVEs 2026-2139aa7dce

Fedora 44's perl-YAML-Syck update addresses four memory-safety vulnerabilities, enhances security checks, and includes various bug fixes for better performance and stability.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-2139aa7dce 2026-07-23 01:18:29.467144+00:00 -------------------------------------------------------------------------------- Name : perl-YAML-Syck Product : Fedora 44 Version : 1.47 Release : 1.fc44 URL : https://metacpan.org/release/YAML-Syck Summary : Fast, lightweight YAML loader and dumper Description : This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around. -------------------------------------------------------------------------------- Update Information: This update addresses four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load() path on untrusted input with no special flags: CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder caused by signed-char indexing of the decode table on !!binary input CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared between the node and the anchors table CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer newline scan during block-scalar parsing (incomplete-fix follow-on to CVE-2025-11683) CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input There are also a few other bug-fixes included. -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 14 2026 Paul Howarth - 1.47-1 - Update to 1.47 Security: - Fix four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load() path on untrusted input with no special flags (GH#213) - CVE-2026-57075(CWE-125): Out-of-bounds read in the base64 decoder caused by signed-char indexing of the decode table on !!binary input - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared between the node and the anchors table - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer newline scan during block-scalar parsing (incomplete-fix follow-on to CVE-2025-11683) - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input - Harden syck_base64dec() to bounds-check each read so it cannot run past a non-NUL-terminated input buffer (defense-in-depth for callers passing raw buffers; GH#213) Bug Fixes: - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512, matching Dump (GH#204) - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in Dump so they roundtrip with ImplicitTyping instead of reloading as plain strings (GH#201) Maintenance: - CI: add an AddressSanitizer job that builds the XS with -fsanitize=address and runs the suite plus the CVE trigger inputs to catch libsyck memory-safety defects; de-pin the libasan version so it tracks the runner's GCC (GH#213) * Mon May 25 2026 Paul Howarth - 1.46-1 - Update to 1.46 Bug Fixes: - Preserve string nature of numeric-looking values in Dump; pure strings (POK only, no IOK/NOK) are now quoted to maintain roundtrip fidelity (GH#199, GH#200) - Accept trailing commas in flow sequences and mappings ([a, b,] and {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196) Maintenance: - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions prior to 5.24 in perldocker containers (GH#197, GH#198) - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries, exclude .claude/from distribution -------------------------------------------------------------------------------- References: [ 1 ] Bug #2501651 - CVE-2026-57075 perl-YAML-Syck: YAML::Syck: Information disclosure via out-of-bounds read in base64 decoder [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2501651 [ 2 ] Bug #2501653 - CVE-2026-57077 perl-YAML-Syck: YAML::Syck: Information disclosure via out-of-bounds read [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2501653 [ 3 ] Bug #2501654 - CVE-2026-57076 perl-YAML-Syck: YAML::Syck: Heap use-after-free via anchor name reuse [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2501654 [ 4 ] Bug #2501656 - CVE-2026-13713 perl-YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2501656 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2139aa7dce' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it:https://forge.fedoraproject.org/infra/tickets/issues/new . Four critical memory-safety issues resolved in perl-YAML-Syck for Fedora 44 ensure safer operation and patch security risks.. perl YAML Syck Fedora 44 memory safety. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 22, 2026 •Critical Fedora
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryremote DoSbug fix

Oracle Linux 9 389-ds-base Important DoS Issue Fix ELSA-2026-26455

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-26455 http://linux.oracle.com/errata/ELSA-2026-26455.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: 389-ds-base-2.8.0-7.el9_8.x86_64.rpm 389-ds-base-devel-2.8.0-7.el9_8.x86_64.rpm 389-ds-base-libs-2.8.0-7.el9_8.x86_64.rpm 389-ds-base-snmp-2.8.0-7.el9_8.x86_64.rpm python3-lib389-2.8.0-7.el9_8.noarch.rpm aarch64: 389-ds-base-2.8.0-7.el9_8.aarch64.rpm 389-ds-base-devel-2.8.0-7.el9_8.aarch64.rpm 389-ds-base-libs-2.8.0-7.el9_8.aarch64.rpm 389-ds-base-snmp-2.8.0-7.el9_8.aarch64.rpm python3-lib389-2.8.0-7.el9_8.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/389-ds-base-2.8.0-7.el9_8.src.rpm Related CVEs: CVE-2026-9064 Description of changes: [2.8.0-7] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 9 security advisory ELSA-2026-26455 addresses important bug fixes and a remote DoS issue with 389-ds-base.. Oracle Linux security, remote DoS, 389-ds-base, important updates. . Severity:Important. LinuxSecurity.com Team

Calendar%202 Jun 26, 2026 •Important Oracle
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorydenial of servicesecurity issue

Fedora 44 perl-Cpanel-JSON-XS Moderate Denial of Service CVE-2026-9516

This update addresses a number of bugs including these security issues: Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516) Fix dupkeys_as_arrayref type confusion (CVE-2026-9334). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-0a82e80353 2026-06-05 04:25:00.359045+00:00 -------------------------------------------------------------------------------- Name : perl-Cpanel-JSON-XS Product : Fedora 44 Version : 4.41 Release : 1.fc44 URL : https://metacpan.org/release/Cpanel-JSON-XS Summary : JSON::XS for Cpanel, fast and correct serializing Description : This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. -------------------------------------------------------------------------------- Update Information: This update addresses a number of bugs including these security issues: Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516) Fix dupkeys_as_arrayref type confusion (CVE-2026-9334) -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2026 Paul Howarth - 4.41-1 - Update to 4.41 - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516) - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334) - Fix incr_parse single-quote string delimiter (GH#245) - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on truncated input (GH#244) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2484331 - CVE-2026-9334 perl-Cpanel-JSON-XS: perl-Cpanel-JSON-XS: Denial of Service via type confusion with duplicate JSON object keys [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2484331 [ 2 ] Bug #2484333 - CVE-2026-9516 perl-Cpanel-JSON-XS: Cpanel::JSON::XS: Denial of Service via UTF-8 BOM prefixed input [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2484333 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-0a82e80353' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . This Fedora update addresses critical bugs and security issues in perl-Cpanel-JSON-XS, ensuring system integrity and safety.. Fedora perl-Cpanel-JSON-XS security issues. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •Important Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":50,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics