Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -1 articles for you...
89

Fedora 44 BIRD Important Crash Fix Advisory 2026-8f225adf49

BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-8f225adf49 2026-06-17 08:41:51.002471+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 44 Version : 3.3.1 Release : 1.fc44 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics BGP: Fix several issues in Flowspec handling BMP/Nest: No refeed after listener or protocol restart MPLS: Fix crash on reconfiguring CS_DOWN channel OSPF: Fix handling of LLS data length field OSPF: Fix OOB read in authentication check OSPF: Fix OOB read in Router-LSA validation Proto: Fix regression in protocol enabling Channel: Fix refeeds and reloads during graceful restart Export: Mitigate duplicate withdrawals Filters: Fix crash when setting gateway on recursivenexthops Filters: Fix path matching when AS path is too long Table: Fix RCU double-anchor Table: Propagate thread group config into aux RCU: Catch leaks sooner See also: https://trubka.network.cz/pipermail/bird-users/2026-June/018790.html -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 10 2026 Robert Scheck - 3.3.1-1 - Upgrade to 3.3.1 (#2487252) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8f225adf49' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Critical updates for Fedora 44's BIRD router fix crashes and improve functionality. Update now for better stability.. BIRD routing, Fedora 44, security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 17, 2026 Important Fedora
89

Fedora 41: BIRD Critical Memory Access Issue CVE-2025-59688

BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-702902f388 2025-10-01 15:00:59.894579+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 41 Version : 3.1.4 Release : 1.fc41 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-702902f388' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . BIRD 3.1.4 addresses critical memory access issues in BGP for Fedora 41. Immediate updates are advised for system security.. Fedora, BIRD, security update, application update, BGP issue. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 01, 2025 Critical Fedora
89

Fedora 42: BIRD Critical Fix for Memory Access Issue CVE-2025-59688

BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-f6b553e67d 2025-10-01 14:43:51.750536+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 42 Version : 3.1.4 Release : 1.fc42 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f6b553e67d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . BIRD 3.1.4 in Fedora 42 addresses critical issues including crashes and memory access flaws. Update recommended.. BIRD update,Fedora advisory,BIRD security patch,network management,security update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 01, 2025 Critical Fedora
89

Fedora 43: Critical BIRD 3.1.4 Updates Address Crash and Memory Problems

BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-182c305561 2025-10-01 00:14:58.043524+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 43 Version : 3.1.4 Release : 1.fc43 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-182c305561' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . BIRD update fixes crash and memory issues in Fedora 43, improving routing performance and stability.. Fedora BIRD BGP routing update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 01, 2025 Important Fedora
202

openSUSE: 2019:2180-1 Moderate: Bird Buffer Overflow Fix

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for bird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2180-1 Rating: moderate References: #1150108 Cross-References: CVE-2019-16159 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bird fixes the following issues: - CVE-2019-16159: Fixed a stack-based buffer overflow via administrative shutdown communication messages. (bnc#1150108) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2180=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): bird-1.6.8-bp151.2.3.1 bird-common-1.6.8-bp151.2.3.1 bird-doc-1.6.8-bp151.2.3.1 bird6-1.6.8-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-16159.html https://bugzilla.suse.com/1150108 -- . openSUSE Security Announcement: Addresses critical flaw in Firefox buffer overflow. Essential information enclosed.. openSUSE Update, bird Security Fix, buffer Overflow Patch. . LinuxSecurity.com Team

Calendar%202 Sep 24, 2019 OpenSUSE
202

openSUSE: 2019:2178-1 Moderate: Bird Stack Overflow Issue

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for bird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2178-1 Rating: moderate References: #1150108 Cross-References: CVE-2019-16159 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bird fixes the following issues: - CVE-2019-16159: Fixed a stack-based buffer overflow via administrative shutdown communication messages. (bnc#1150108) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2178=1 Package List: - openSUSE Leap 15.1 (x86_64): bird-1.6.8-lp151.2.3.1 bird-common-1.6.8-lp151.2.3.1 bird-debuginfo-1.6.8-lp151.2.3.1 bird-debugsource-1.6.8-lp151.2.3.1 bird-doc-1.6.8-lp151.2.3.1 bird6-1.6.8-lp151.2.3.1 bird6-debuginfo-1.6.8-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-16159.html https://bugzilla.suse.com/1150108 -- . New patch released for openSUSE Sparrow, addressing notable buffer overflow vulnerability with crucial instructions provided.. openSUSE Update, bird Security Patch, stack buffer overflow, administrative shutdown fix. . LinuxSecurity.com Team

Calendar%202 Sep 24, 2019 OpenSUSE
87

Debian BIRD High Threat Buffer Overflow DSA-4528-1 CVE-2019-16159

Daniel McCarney discovered that the BIRD internet routing daemon incorrectly validated RFC 8203 messages in it's BGP daemon, resulting in a stack buffer overflow. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4528-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff September 19, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : bird CVE ID : CVE-2019-16159 Daniel McCarney discovered that the BIRD internet routing daemon incorrectly validated RFC 8203 messages in it's BGP daemon, resulting in a stack buffer overflow. For the stable distribution (buster), this problem has been fixed in version 1.6.6-1+deb10u1. In addition this update fixes an incomplete revocation of privileges and a crash triggerable via the CLI (the latter two bugs are also fixed in the oldstable distribution (stretch) which is not affected by CVE-2019-16159). We recommend that you upgrade your bird packages. For the detailed security status of bird please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/bird Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A critical buffer overflow in the BIRD routing daemon has been reported, affecting the Debian system. Immediate updates are recommended.. BGP Daemon, Buffer Overflow, Debian Security, BIRD Advisory, RFC 8203. . Severity: high. LinuxSecurity.com Team

Calendar%202 Sep 19, 2019 high Debian
89

Fedora 29: FEDORA-2018-9g1d4530e4 High: Kernel Memory Leak Resolution

Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-8f0d2429d3 2018-12-07 02:13:26.114657 --------------------------------------------------------------------------------Name : bird Product : Fedora 28 Version : 1.6.4 Release : 2.fc28 URL : https://bird.network.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is dynamic routing daemon supporting IPv4 and IPv6 versions of routing protocols BGP, RIP and OSPF. This package contains IPv4 version. --------------------------------------------------------------------------------Update Information: Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root --------------------------------------------------------------------------------ChangeLog: * Mon Nov 12 2018 Stanislav Kozina - 1.6.4-2 - bird should run under bird user and group rather than root (#1397574) - bird should run in foreground (#1285672) * Mon Nov 12 2018 Stanislav Kozina - 1.6.4-1 - Update bird to 1.6.4 (#1642737) --------------------------------------------------------------------------------References: [ 1 ] Bug #1285672 - Bird should start in foreground in the systemd unit https://bugzilla.redhat.com/show_bug.cgi?id=1285672 [ 2 ] Bug #1642737 - bird-1.6.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1642737 [ 3 ] Bug #1588771 - CVE-2018-12066 bird: Stack overflow in BGP mask expressions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1588771 [ 4 ] Bug #1397574 - Bird should drop privileges https://bugzilla.redhat.com/show_bug.cgi?id=1397574 --------------------------------------------------------------------------------This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-8f0d2429d3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . A significant revision for Fedora 28's eagle software tackles CVE-2018-12067 along with pertinent operational modifications.. Fedora Updates,Bird Daemon,Stack Overflow Fix,BGP Security,User Privilege Management. . LinuxSecurity.com Team

Calendar%202 Dec 07, 2018 Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200