Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 512
Alerts This Week
Warning Icon 1 512

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Chromium Important Buffer Overflow Input Issues 2026-acf674bc6a

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-django5 Low Risk Data Exposure Bugs 2026-fbb9501b22

Calendar White Jul 24, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 43 dotnet10.0 Critical CVE Fixes Update 2026-d9817786d6

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 mupdf Critical Out-of-Bounds Read Fix Advisory 2026-8870088088

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 wget1 Critical Memory Corruption DoS Fix 2026-7bbb52b49d

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mbedtls 3.6.7 Important Fixes for Multiple CVEs

Calendar White Jul 24, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 sssd Critical Use-After-Free and GPO Cache Issues 2026-9ab663dcd4

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 Chromium Significant Buffer Overflow and Input Validation Issues

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Skopeo Critical DoS Fix CVE-2026-27145 Advisory 2026-9b2e56edf5

Calendar White Jul 24, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracode execution

Fedora 44 Pie Emergency Fix for Critical Sudo Execution and File Deletion

Version 1.4.5 This release contains vulnerability fixes for the following security advisories: GHSA-h842-vjwg-pxxx - Sudo-elevated arbitrary file deletion via extra.pie- installed-binary metadata in UninstallUsingUnlink GHSA-pm6p-666q-hvj5 - Sudo-elevated root code execution via TOCTOU between self-. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-e5d5fc359d 2026-06-04 01:48:27.004460+00:00 -------------------------------------------------------------------------------- Name : pie Product : Fedora 44 Version : 1.4.5 Release : 1.fc44 URL : https://github.com/php/pie Summary : PHP Installer for Extensions Description : PIE (PHP Installer for Extensions). PIE can install an extension to any installed PHP version. A list of extensions that support PIE can be found on https://packagist.org/extensions. Documentation: /usr/share/doc/pie/docs/usage.md -------------------------------------------------------------------------------- Update Information: Version 1.4.5 This release contains vulnerability fixes for the following security advisories: GHSA-h842-vjwg-pxxx - Sudo-elevated arbitrary file deletion via extra.pie- installed-binary metadata in UninstallUsingUnlink GHSA-pm6p-666q-hvj5 - Sudo-elevated root code execution via TOCTOU between self- update verify and write GHSA-f67f-c344-cqqr - PIE self-update accepts any historically-attested pie.phar (rollback gap) GHSA-vcv4-gmjc-mxvq - php-ext.build-path traversal escapes PIE's vendor extract directory GHSA-8xmh-xrvp-hwrf - WindowsInstall::copyExtraFile lacks destination containment check (Windows-only path traversal) GHSA-p4j8-36rr-gjfq - Self-update attestation verification is scoped to --owner=php, not --repo=php/pie -------------------------------------------------------------------------------- ChangeLog: * Tue May 26 2026 Remi Collet - 1.4.5-1 - update to1.4.5 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e5d5fc359d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Updates for Fedora 44 address multiple security risks in PIE, enhancing system protection against critical threats.. Fedora security update, PIE vulnerabilities, Fedora code execution risk, PHP installer security, arbitrary file deletion. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 03, 2026 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysoftware updateFedora

Fedora 35: FEDORA-2022-0f1653e269 moderate: thefuck Path Traversal

Security fix for CVE-2021-34363. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-0f1653e269 2022-01-19 02:10:14.239494 --------------------------------------------------------------------------------Name : thefuck Product : Fedora 35 Version : 3.32 Release : 1.fc35 URL : https://github.com/nvbn/thefuck Summary : App that corrects your previous console command Description : This application corrects your previous console command. If you use BASH, you should add these lines to your .bashrc: alias fuck='eval $(thefuck $(fc -ln -1)); history -r' alias FUCK='fuck' For other shells please check /usr/share/doc/thefuck/README.md --------------------------------------------------------------------------------Update Information: Security fix for CVE-2021-34363 --------------------------------------------------------------------------------ChangeLog: * Mon Jan 10 2022 Arthur Bols - 3.32-1 - Upstream release 3.32 - Updated spec to comply with updated guidelines --------------------------------------------------------------------------------References: [ 1 ] Bug #1970598 - CVE-2021-34363 thefuck: arbitrary file deletion via path traversal https://bugzilla.redhat.com/show_bug.cgi?id=1970598 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-0f1653e269' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Resolution implemented for the vulnerability CVE-2021-34363 impacting the Fedora package thefuck utilized for command adjustments.. Fedora Thefuck Update, Path Traversal Security, Command Correction Tool. . LinuxSecurity.com Team

Calendar%202 Jan 18, 2022 Fedora
Banner 4 1028x280 1708121825 1771600306
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryremote code executionimportant update

openSUSE Leap 15.2: Security Update for xstream - Important Issues Resolved

An update that fixes three vulnerabilities is now available. . openSUSE Security Update: Security update for xstream ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0140-1 Rating: important References: #1180145 #1180146 #1180994 Cross-References: CVE-2020-26217 CVE-2020-26258 CVE-2020-26259 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for xstream fixes the following issues: xstream was updated to version 1.4.15. - CVE-2020-26217: Fixed a remote code execution due to insecure XML deserialization when relying on blocklists (bsc#1180994). - CVE-2020-26258: Fixed a server-side request forgery vulnerability (bsc#1180146). - CVE-2020-26259: Fixed an arbitrary file deletion vulnerability (bsc#1180145). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-140=1 Package List: - openSUSE Leap 15.2 (noarch): xstream-1.4.15-lp152.2.3.1 xstream-benchmark-1.4.15-lp152.2.3.1 xstream-javadoc-1.4.15-lp152.2.3.1 xstream-parent-1.4.15-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-26217.html https://www.suse.com/security/cve/CVE-2020-26258.html https://www.suse.com/security/cve/CVE-2020-26259.html https://bugzilla.suse.com/1180145 https://bugzilla.suse.com/1180146 https://bugzilla.suse.com/1180994 . openSUSE has released a security patch for xstream to address severe vulnerabilities, accompanied by installationinstructions.. openSUSE Security Update,xstream 1.4.15,remote code execution,arbitrary file deletion,server-side request forgery. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 22, 2021 •Important OpenSUSE
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracommand execution

Fedora 10: 2009-1824 Critical Update for Jhead Command Execution

* fixes "CVE-2008-4640 jhead: arbitrary file deletion" (#468056) * fixes "CVE-2008-4641 jhead: command exection caused by incorrect handling of the shell escapes" (#468057). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-1824 2009-02-17 14:51:58 --------------------------------------------------------------------------------Name : jhead Product : Fedora 10 Version : 2.86 Release : 1.fc10 URL : https://www.sentex.ca/~mwandel/jhead/ Summary : Tool for displaying EXIF data embedded in JPEG images Description : Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras. --------------------------------------------------------------------------------Update Information: * fixes "CVE-2008-4640 jhead: arbitrary file deletion" (#468056) * fixes "CVE-2008-4641 jhead: command exection caused by incorrect handling of the shell escapes" (#468057) --------------------------------------------------------------------------------ChangeLog: * Mon Feb 16 2009 Adrian Reber - 2.86-1 - updated to 2.86 - fixes "CVE-2008-4640 jhead: arbitrary file deletion" (#468056) - fixes "CVE-2008-4641 jhead: command exection caused by incorrect handling of the shell escapes" (#468057) - fixes "build ignores optflags" (#485697) --------------------------------------------------------------------------------References: [ 1 ] Bug #468056 - CVE-2008-4640 jhead: arbitrary file deletion https://bugzilla.redhat.com/show_bug.cgi?id=468056 [ 2 ] Bug #468057 - CVE-2008-4641 jhead: command exection caused by incorrect handling of the shell escapes https://bugzilla.redhat.com/show_bug.cgi?id=468057 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update jhead' at the command line. For more information,refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora 10 jhead revision addresses command injection and unauthorized removal vulnerabilities discovered in CVE-2008-4650 and CVE-2008-4651.. Fedora Update,jhead Security,Arbitrary Deletion Fix,Command Execution Issue. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 05, 2009 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics