Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 471
Alerts This Week
Warning Icon 1 471

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Advisory 2026-0259-1 gh Important Punycode Fix CVE-2026-39821

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Avahi Moderate DoS CVE-2025-59529 Advisory 2026-3217-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE avahi Moderate Denial of Service Fix 2026-3218-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE ImageMagick Important Security Fix for Multiple Flaws 2026-3219-1

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nmap Moderate Out-of-Bounds Crash Vulnern 2026-3220-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE 2026-3224-1 SVT-AV1 Important Remote Code Execution Fix

Calendar White Jul 24, 2026
Important
Debianlts Large Esm H800
Debian LTS

Debian LTS DLA-4698-1 Spice-Vdagent Critical DoS Path Traversal

Calendar White Jul 24, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1

Calendar White Jul 24, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian LTS Imagemagick Critical Denial of Service Code Exec Vuln DLA-4696-1

Calendar White Jul 24, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":75,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysecurity issuefedora

Fedora 43 BIRD Critical Bug Fixes and Enhancements 2026-564680920c

BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-564680920c 2026-06-17 08:24:34.389300+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 43 Version : 3.3.1 Release : 1.fc43 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics BGP: Fix several issues in Flowspec handling BMP/Nest: No refeed after listener or protocol restart MPLS: Fix crash on reconfiguring CS_DOWN channel OSPF: Fix handling of LLS data length field OSPF: Fix OOB read in authentication check OSPF: Fix OOB read in Router-LSA validation Proto: Fix regression in protocol enabling Channel: Fix refeeds and reloads during graceful restart Export: Mitigate duplicate withdrawals Filters: Fix crash when setting gateway on recursivenexthops Filters: Fix path matching when AS path is too long Table: Fix RCU double-anchor Table: Propagate thread group config into aux RCU: Catch leaks sooner See also: https://trubka.network.cz/pipermail/bird-users/2026-June/018790.html -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 10 2026 Robert Scheck - 3.3.1-1 - Upgrade to 3.3.1 (#2487252) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-564680920c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Critical Fedora 43 BIRD update resolves multiple crashes and issues in BGP and OSPF protocols, enhancing stability.. BIRD IP Daemon, Fedora update, critical security fixes, BGP enhancements, OSPF improvement. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 17, 2026 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraupdate

Fedora 44 rpki-client 9.8 Security Advisory 2026-879659f6c2

rpki-client 9.8 Various refactoring for improved compatibility with various libcrypto implementations and in CA/BGPsec certificate handling. Fixed an accounting issue in HTTP gzip compression detection. Added a warning in extra verbose mode (-vv) about standards non-compliant Issuer. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-879659f6c2 2026-04-25 01:21:36.173294+00:00 -------------------------------------------------------------------------------- Name : rpki-client Product : Fedora 44 Version : 9.8 Release : 1.fc44 URL : https://www.rpki-client.org/ Summary : OpenBSD RPKI validator to support BGP Origin Validation Description : The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure (RPKI) for Relying Parties (RP) to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisations (ROAs) and finally outputs Validated ROA Payloads (VRPs) in the configuration format of OpenBGPD, BIRD, and also as CSV or JSON objects for consumption by other routing stacks. -------------------------------------------------------------------------------- Update Information: rpki-client 9.8 Various refactoring for improved compatibility with various libcrypto implementations and in CA/BGPsec certificate handling. Fixed an accounting issue in HTTP gzip compression detection. Added a warning in extra verbose mode (-vv) about standards non-compliant Issuer and Subject ASN.1 string encodings. Added a check for canonical encoding of ASPA eContent in alignment with draft- ietf-sidrops-aspa-profile-22. Ensure that a repository timeout correctly stops repository processing. Fixed a defect in Canonical Cache Representation ROAIPAddressFamily sort order. As a result, rpki-client 9.8 cannot parse rpki-client 9.7's .ccr files and vice versa. Fixed anissue in the parser for the locally configured constraints. A malicious RRDP Publication Server can cause a NULL dereference. A malicious RPKI Publication Server can cause an incorrect error exit. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 16 2026 Robert Scheck 9.8-1 - Upgrade to 9.8 (#2458536) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2458536 - rpki-client-9.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2458536 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-879659f6c2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . The Fedora 44 rpki-client 9.8 update resolves compatibility issues while enhancing security measures thoroughly.. rpki-client RPKI BGP Origin Validation Fedora. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 25, 2026 •Important Fedora
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraupdate

Fedora 42: rpki-client 9.7 Security Update FEDORA-2026-d2431d8ac0

rpki-client 9.7 The Canonical Cache Representation underwent a breaking change after the adoption of https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpki-ccr/ as a SIDROPS working group item. Apart from several CMS-related cosmetics it now uses a IANA-assigned content type. As a result, rpki-client 9.7 cannot parse rpki-. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-d2431d8ac0 2026-01-22 01:14:01.609553+00:00 -------------------------------------------------------------------------------- Name : rpki-client Product : Fedora 42 Version : 9.7 Release : 1.fc42 URL : https://www.rpki-client.org/ Summary : OpenBSD RPKI validator to support BGP Origin Validation Description : The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure (RPKI) for Relying Parties (RP) to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisations (ROAs) and finally outputs Validated ROA Payloads (VRPs) in the configuration format of OpenBGPD, BIRD, and also as CSV or JSON objects for consumption by other routing stacks. -------------------------------------------------------------------------------- Update Information: rpki-client 9.7 The Canonical Cache Representation underwent a breaking change after the adoption of https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpki-ccr/ as a SIDROPS working group item. Apart from several CMS-related cosmetics it now uses a IANA-assigned content type. As a result, rpki-client 9.7 cannot parse rpki- client 9.6's .ccr files and vice versa. Support for Ghostbusters Record objects (RFC 6493) has been removed. Nobody showed interest in deploying this and there are other, widely supported ways of exchanging operational contact information such as RDAP. RFC 6493 is undergoing a status review to be marked ashistoric: https://datatracker.ietf.org/doc/status-change-rpki-ghostbusters-record-to- historic/ Prepare the code base for the opaque ASN1_STRING structure in OpenSSL 4. Fixed two reliability issues: one where a malicious RPKI Certification Authority can trigger a crash, one where malicious Trust Anchor can provoke memory exhaustion. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 13 2026 Robert Scheck 9.7-1 - Upgrade to 9.7 (#2429390) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2429390 - rpki-client-9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2429390 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d2431d8ac0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . The rpki-client 9.7 update for Fedora 42 introduces crucial changes for BGP origin validation and security stability.. rpki-caching, openbsd, BGP validation,RPKI, Fedora update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 22, 2026 •Critical Fedora
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorybuffer overflowdebian

Debian BIRD High Threat Buffer Overflow DSA-4528-1 CVE-2019-16159

Daniel McCarney discovered that the BIRD internet routing daemon incorrectly validated RFC 8203 messages in it's BGP daemon, resulting in a stack buffer overflow. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4528-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff September 19, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : bird CVE ID : CVE-2019-16159 Daniel McCarney discovered that the BIRD internet routing daemon incorrectly validated RFC 8203 messages in it's BGP daemon, resulting in a stack buffer overflow. For the stable distribution (buster), this problem has been fixed in version 1.6.6-1+deb10u1. In addition this update fixes an incomplete revocation of privileges and a crash triggerable via the CLI (the latter two bugs are also fixed in the oldstable distribution (stretch) which is not affected by CVE-2019-16159). We recommend that you upgrade your bird packages. For the detailed security status of bird please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/bird Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A critical buffer overflow in the BIRD routing daemon has been reported, affecting the Debian system. Immediate updates are recommended.. BGP Daemon, Buffer Overflow, Debian Security, BIRD Advisory, RFC 8203. . Severity: high. LinuxSecurity.com Team

Calendar%202 Sep 19, 2019 •high Debian
Banner 4 1028x280 1708121825 1771600306
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicedebian

Debian DSA-2197-1 Addresses Denial Of Service Risks in Quagga

It has been discovered that the Quagga routing daemon contains two denial-of-service vulnerabilities in its BGP implementation: CVE-2010-1674 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2197-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Florian Weimer March 21, 2011 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : quagga Vulnerability : denial of service Problem type : remote Debian-specific: no CVE ID : CVE-2010-1674 CVE-2010-1675 It has been discovered that the Quagga routing daemon contains two denial-of-service vulnerabilities in its BGP implementation: CVE-2010-1674 A crafted Extended Communities attribute triggers a null pointer dereference which causes the BGP daemon to crash. The crafted attributes are not propagated by the Internet core, so only explicitly configured direct peers are able to exploit this vulnerability in typical configurations. CVE-2010-1675 The BGP daemon resets BGP sessions when it encounters malformed AS_PATHLIMIT attributes, introducing a distributed BGP session reset vulnerability which disrupts packet forwarding. Such malformed attributes are propagated by the Internet core, and exploitation of this vulnerability is not restricted to directly configured BGP peers. This security update removes AS_PATHLIMIT processing from the BGP implementation, preserving the configuration statements for backwards compatibility. (Standardization of this BGP extension was abandoned long ago.) For the oldstable distribution (lenny), these problems have been fixed in version 0.99.10-1lenny5. For the stable distribution (squeeze), these problems have been fixed in version 0.99.17-2+squeeze2. For the testing distribution (wheezy) and the unstable distribution (sid), these problems will fixed soon. Werecommend that you upgrade your quagga packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Uncover the vulnerabilities related to denial-of-service found in the Quagga routing daemon, along with the suggested upgrade paths as outlined in the Debian Advisory DSA-2197-1.. Quagga Security, Debian Updates, BGP Flaws. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 21, 2011 •Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":75,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics