Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H900
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H800
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 5 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorydenial of servicebuffer overflow

openSUSE Assimp Important Fixes for Multiple Vulnerabilities 2026-21242-1

An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed.. openSUSE security update: security update for assimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21242-1 Rating: important References: * bsc#1251019 * bsc#1266996 * bsc#1266998 * bsc#1266999 * bsc#1267037 Cross-References: * CVE-2025-11277 * CVE-2026-10197 * CVE-2026-10199 * CVE-2026-10200 * CVE-2026-10232 CVSS scores: * CVE-2025-11277 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2025-11277 ( SUSE ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-10197 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-10197 ( SUSE ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-10199 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-10199 ( SUSE ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-10200 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-10200 ( SUSE ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-10232 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10232 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed. Description: This update for assimp fixes thefollowing issues - CVE-2025-11277: large mWidth and mHeight dimensions can lead to integer overflow and a heap-based buffer overflow (bsc#1251019). - CVE-2026-10197: NULL pointer dereference in ImportEmbeddedTextures when mimeType lacks '/' (bsc#1266996). - CVE-2026-10199: NULL pointer dereference in glTF2::LazyDict::operator[] due to unchecked node access in ImportAnimations (bsc#1266998). - CVE-2026-10200: [glTF] Heap-buffer-overflow in CopyValue() when parsing invalid 4x4 matrix with insufficient data (bsc#1266999). - CVE-2026-10232: heap use-after-free in aiNode::~aiNode due to invalid node tree when processing malformed ASE files (bsc#1267037). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1163=1 Package List: - openSUSE Leap 16.0: assimp-devel-5.4.3-160000.4.1 libassimp5-5.4.3-160000.4.1 References: * https://www.suse.com/security/cve/CVE-2025-11277.html * https://www.suse.com/security/cve/CVE-2026-10197.html * https://www.suse.com/security/cve/CVE-2026-10199.html * https://www.suse.com/security/cve/CVE-2026-10200.html * https://www.suse.com/security/cve/CVE-2026-10232.html . Important security fixes for assimp in openSUSE address multiple vulnerabilities and ensure system integrity. Update now!. openSUSE assimp security patch important. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 08, 2026 •Important OpenSUSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorythreatimportant

openSUSE assimp Important Heap Issue Fix CVE-2026-10232 2026-0223-1

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for assimp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0223-1 Rating: important References: #1267037 Cross-References: CVE-2026-10232 CVSS scores: CVE-2026-10232 (SUSE): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP7 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for assimp fixes the following issues: - CVE-2026-10232: heap use-after-free in aiNode::~aiNode due to invalid node tree when processing malformed ASE files (boo#1267037) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2026-223=1 Package List: - openSUSE Backports SLE-15-SP7 (aarch64 ppc64le s390x x86_64): assimp-devel-5.3.1-bp157.5.3.1 libassimp5-5.3.1-bp157.5.3.1 References: https://www.suse.com/security/cve/CVE-2026-10232.html https://bugzilla.suse.com/1267037 . An important update for openSUSE addresses a critical heap issue in the assimp application. Install for protection.. Security Update, Heap Issue, Assimp Fix, OpenSUSE Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 29, 2026 •Important OpenSUSE
Banner 1 1028x280 1708121660 1771599717
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatedenial of service

openSUSE assimp Serious Denial of Service CVE-2025-3548 Notice 2026-0045-1

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for assimp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0045-1 Rating: moderate References: #1241367 Cross-References: CVE-2025-3548 CVSS scores: CVE-2025-3548 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for assimp fixes the following issues: - CVE-2025-3548: Fixed denial of service when processing malformed files which may lead to an out-of-bounds read (boo#1241367). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2026-45=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 ppc64le s390x x86_64): assimp-devel-5.3.1-bp156.3.12.1 libassimp5-5.3.1-bp156.3.12.1 References: https://www.suse.com/security/cve/CVE-2025-3548.html https://bugzilla.suse.com/1241367 . Moderate security update for assimp on openSUSE to fix denial of service risk from malformed files.. openSUSE security update, assimp fix, denial of service, software vulnerability, SLE patch. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 11, 2026 •moderate OpenSUSE
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorybuffer overflowremote exploit

Mageia Assimp Critical Buffer Overflow Exploit Risks 2026-0170

Security update. Publication date: 02 Jun 2026 URL: https://advisories.mageia.org/MGASA-2026-0170.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-2750, CVE-2025-2751, CVE-2025-2757, CVE-2025-3158, CVE-2025-3548, CVE-2025-11277, CVE-2025-70067 Description: CVE-2025-2750,- A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. CVE-2025-2757, A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CVE-2025-2757, A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CVE-2025-3158, A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may beused. CVE-2025-3548, A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. CVE-2025-11277, A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. CVE-2025-70067, Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy() without runtime length validation References: - https://bugs.mageia.org/show_bug.cgi?id=34439 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/ZYGDCFEL3GZ5PDUZFKEVVISQWAENNBTB/ - https://lists.opensuse.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/2LQLM3OX7KPUJNJSKSVDROFQGZRJPVRF/ - https://www.cve.org/CVERecord?id=CVE-2025-2750 - https://www.cve.org/CVERecord?id=CVE-2025-2751 - https://www.cve.org/CVERecord?id=CVE-2025-2757 - https://www.cve.org/CVERecord?id=CVE-2025-3158 - https://www.cve.org/CVERecord?id=CVE-2025-3548 - https://www.cve.org/CVERecord?id=CVE-2025-11277 - https://www.cve.org/CVERecord?id=CVE-2025-70067 SRPMS: - 9/core/assimp-5.2.5-1.mga9 . Critical security advisory for Mageia 9 addressing multiple flaws in Assimp. Urgent updates recommended.. Mageia Assimp Critical Buffer Overflow Remote Attack. . Severity:Critical. LinuxSecurity.com Team

Calendar%202 Jun 02, 2026 •Critical Mageia
Banner 1 1028x280 1708121660 1771599717
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorybuffer overflowimportant

openSUSE Leap 16.0 Assimp Important Buffer Overflow Vuln 2026-20781-1

An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed.. openSUSE security update: security update for assimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20781-1 Rating: important References: * bsc#1239220 * bsc#1239916 * bsc#1239920 * bsc#1240412 * bsc#1241367 Cross-References: * CVE-2025-2151 * CVE-2025-2591 * CVE-2025-2592 * CVE-2025-3015 * CVE-2025-3548 CVSS scores: * CVE-2025-2151 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-2591 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-2591 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-2592 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-2592 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-3015 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-3015 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-3548 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed. Description: This update for assimp fixes the following issues - CVE-2025-2151: vulnerability affects the function Assimp: GetNextLine in the library ParsingUtils.h (bsc#1239220). - CVE-2025-2591: division by zero in code/AssetLib/MDL/MDLLoader.cpp (bsc#1239920). - CVE-2025-2592: heap-based buffer overflow in Assimp: CSMImporter: InternReadFile of code/AssetLib/CSM/CSMLoader.cpp (bsc#1239916). - CVE-2025-3015: manipulation of the argument mIndices leads to out-of-bounds read (bsc#1240412). - CVE-2025-3548: processing of malformed files may leads to an out-of-bounds read and potential application crash (bsc#1241367). Patch instructions: To install this openSUSE securityupdate use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-787=1 Package List: - openSUSE Leap 16.0: assimp-devel-5.4.3-160000.3.1 libassimp5-5.4.3-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2025-2151.html * https://www.suse.com/security/cve/CVE-2025-2591.html * https://www.suse.com/security/cve/CVE-2025-2592.html * https://www.suse.com/security/cve/CVE-2025-3015.html * https://www.suse.com/security/cve/CVE-2025-3548.html . Install the openSUSE security update for assimp addressing important issues and enhancing system reliability.. openSUSE assimp update buffer overflow application crash important security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 25, 2026 •Important OpenSUSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatedenial of service

openSUSE 2026-0045-1 Assimp Moderate Denial Of Service CVE-2025-3548

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for assimp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0045-1 Rating: moderate References: #1241367 Cross-References: CVE-2025-3548 CVSS scores: CVE-2025-3548 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for assimp fixes the following issues: - CVE-2025-3548: Fixed denial of service when processing malformed files which may lead to an out-of-bounds read (boo#1241367). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2026-45=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 ppc64le s390x x86_64): assimp-devel-5.3.1-bp156.3.12.1 libassimp5-5.3.1-bp156.3.12.1 References: https://www.suse.com/security/cve/CVE-2025-3548.html https://bugzilla.suse.com/1241367 . An update for openSUSE fixes moderate denial of service in Assimp. Immediate patch recommended for affected systems.. openSUSE update, assimp security, software patch, security threats. . LinuxSecurity.com Team

Calendar%202 Feb 13, 2026 OpenSUSE
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 42 Assimp Critical Heap Overflow Fix CVE-2025-11277 2026-7069f6c1c8

Backport fix for CVE-2025-11277.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-7069f6c1c8 2026-01-28 01:25:55.182807+00:00 -------------------------------------------------------------------------------- Name : assimp Product : Fedora 42 Version : 5.3.1 Release : 6.fc42 URL : https://github.com/assimp/assimp Summary : Library to import various 3D model formats into applications Description : Assimp, the Open Asset Import Library, is a free library to import various well-known 3D model formats into applications. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems, but is not limited to these applications. -------------------------------------------------------------------------------- Update Information: Backport fix for CVE-2025-11277. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 13 2026 Sandro Mani - 5.3.1-6 - Backport fix for CVE-2025-11277 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2401927 - CVE-2025-11277 assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2401927 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7069f6c1c8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Fix for critical heap overflow in Assimp library affects Fedora 42. Important update for security.. Assimp Fedora 42 security critical update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 28, 2026 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 43: assimp Library Critical CVE-2025-11277 Update

Backport fix for CVE-2025-11277. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-0f4b31c58e 2025-12-17 01:12:56.966718+00:00 -------------------------------------------------------------------------------- Name : assimp Product : Fedora 43 Version : 6.0.2 Release : 4.fc43 URL : https://github.com/assimp/assimp Summary : Library to import various 3D model formats into applications Description : Assimp, the Open Asset Import Library, is a free library to import various well-known 3D model formats into applications. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems, but is not limited to these applications. -------------------------------------------------------------------------------- Update Information: Backport fix for CVE-2025-11277 -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 14 2025 Sandro Mani - 6.0.2-4 - Backport fix for CVE-2025-11277 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-0f4b31c58e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Backport fix for critical CVE-2025-11277 in Fedora 43's assimp library enhances security and performance.. Fedora 43 assimp security patch critical CVE-2025-11277. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Dec 17, 2025 •Critical Fedora
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics