Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
89
security advisoryfedorasoftware updateFedora 44 kf6-ki18n Update Advisory 2026-04-16 KDE Frameworks 6.25.0
Frameworks 6.25.0 + KDE Plasma 6.6.4. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-fe3d8d4767 2026-04-16 23:40:54.273526+00:00 -------------------------------------------------------------------------------- Name : kf6-ki18n Product : Fedora 44 Version : 6.25.0 Release : 1.fc44 URL : https://invent.kde.org/frameworks/ki18n Summary : KDE Frameworks 6 Tier 1 addon for localization Description : KDE Frameworks 6 Tier 1 addon for localization. -------------------------------------------------------------------------------- Update Information: Frameworks 6.25.0 + KDE Plasma 6.6.4 -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 9 2026 Steve Cossette - 6.25.0-1 - 6.25.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2455469 - Configuring WifI network via Network pane appears to not work https://bugzilla.redhat.com/show_bug.cgi?id=2455469 [ 2 ] Bug #2457573 - FE: KDE Frameworks 6.25.0 + Plasma 6.6.4 https://bugzilla.redhat.com/show_bug.cgi?id=2457573 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fe3d8d4767' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 16, 2026
Fedora
89
security advisoryFedorasecurity fixFedora 32: FEDORA-2020-cf8ef2f333 Moderate: Eclipse Remote Services Fix
Updates to the latest upstream release of Eclipse. See the upstream release notes for details: https://eclipseide.org/release/noteworthy/ Also contains security fixes for CVE-2019-17566 and CVE-2019-17638.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-cf8ef2f333 2020-08-31 15:48:37.485399 --------------------------------------------------------------------------------Name : eclipse-remote Product : Fedora 32 Version : 3.0.1 Release : 6.fc32 URL : https://www.eclipse.org/projects/archives.php Summary : Eclipse Remote Services plug-in Description : Remote Services provides an extensible remote services framework. --------------------------------------------------------------------------------Update Information: Updates to the latest upstream release of Eclipse. See the upstream release notes for details: https://eclipseide.org/release/noteworthy/ Also contains security fixes for CVE-2019-17566 and CVE-2019-17638. --------------------------------------------------------------------------------ChangeLog: * Fri Aug 14 2020 Mat Booth - 3.0.1-6 - Update dep on tm-terminal * Mon Jul 27 2020 Fedora Release Engineering - 3.0.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jan 28 2020 Fedora Release Engineering - 3.0.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Jul 24 2019 Fedora Release Engineering - 3.0.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href" https://bugzilla.redhat.com/show_bug.cgi?id=1848617 [ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1864680 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Aug 31, 2020
Fedora
89
security advisoryBugzillaFedoraFedora 26: 2018-b79f325c48 Moderate: Bugzilla CSRF Issue
A CSRF vulnerability in Bugzilla's report.cgi would allow a third-party site to extract confidential information from a bug the victim had access to. This security bug has been published as CVE-2018-5123. This updates contains Bugzilla 5.0.4, which fixes the issue.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-b79f325c48 2018-03-06 17:26:39.509141 --------------------------------------------------------------------------------Name : bugzilla Product : Fedora 26 Version : 5.0.4 Release : 1.fc26 URL : https://www.bugzilla.org/ Summary : Bug tracking system Description : Bugzilla is a popular bug tracking system used by multiple open source projects It requires a database engine installed - either MySQL, PostgreSQL or Oracle. Without one of these database engines (local or remote), Bugzilla will not work - see the Release Notes for details. --------------------------------------------------------------------------------Update Information: A CSRF vulnerability in Bugzilla's report.cgi would allow a third-party site to extract confidential information from a bug the victim had access to. This security bug has been published as CVE-2018-5123. This updates contains Bugzilla 5.0.4, which fixes the issue. --------------------------------------------------------------------------------References: [ 1 ] Bug #1438957 - icons are missing on bugzilla's front page https://bugzilla.redhat.com/show_bug.cgi?id=1438957 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bugzilla' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Mar 06, 2018
Fedora
89
security advisorymoderateupdateFedora 22: FEDORA-2016-0123 Important: SQLite Security Patch
Update to latest release. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-9090 2015-10-14 23:00:41.814383 -------------------------------------------------------------------------------- Name : fossil Product : Fedora 21 Version : 1.33 Release : 1.fc21 URL : https://www.fossil-scm.org/home/doc/trunk/www/index.wiki Summary : A distributed SCM with bug tracking and wiki Description : Fossil is a simple, high-reliability, distributed software configuration management with distributed bug tracking, distributed wiki and built-in web interface. -------------------------------------------------------------------------------- Update Information: Update to latest release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1191203 - fossil: version 1.30 is available with CVE-2014-3566 (POODLE) fixed https://bugzilla.redhat.com/show_bug.cgi?id=1191203 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fossil' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Oct 15, 2015
•Important
Fedora
89
security advisoryFedoracritical updateFedora 22 FEDORA-2015-9110 Critical Fossil Security Update
Update to latest release. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-9110 2015-10-14 23:00:48.503821 -------------------------------------------------------------------------------- Name : fossil Product : Fedora 22 Version : 1.33 Release : 1.fc22 URL : https://www.fossil-scm.org/home/doc/trunk/www/index.wiki Summary : A distributed SCM with bug tracking and wiki Description : Fossil is a simple, high-reliability, distributed software configuration management with distributed bug tracking, distributed wiki and built-in web interface. -------------------------------------------------------------------------------- Update Information: Update to latest release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1191203 - fossil: version 1.30 is available with CVE-2014-3566 (POODLE) fixed https://bugzilla.redhat.com/show_bug.cgi?id=1191203 [ 2 ] Bug #1180999 - Non-free code included. https://bugzilla.redhat.com/show_bug.cgi?id=1180999 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fossil' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Oct 15, 2015
•Critical
Fedora
87
security advisorydebiansql injectionDebian DSA-3120-1 Moderate: Mantis SQL Injection And Phishing Risk
Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3120-1
Jan 06, 2015
•Important
Debian
87
security advisorycriticaldebianDebian: DSA-3030-1 Critical: Mantis SQL Injection Threats Resolved
Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system. For the stable distribution (wheezy), these problems have been fixed in . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3030-1
Sep 20, 2014
•Critical
Debian
89
security advisorysoftware updateFedoraFedora: 2009-3410 Critical Update for Bugzilla CSRF Vulnerability Fix
fix CVE-2009-1213. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-3410 2009-04-07 15:17:56 --------------------------------------------------------------------------------Name : bugzilla Product : Fedora 10 Version : 3.2.3 Release : 1.fc10 URL : https://www.bugzilla.org/ Summary : Bug tracking system Description : Bugzilla is a popular bug tracking system used by multiple open source projects It requires a database engine installed - either MySQL, PostgreSQL or Oracle. Without one of these database engines (local or remote), Bugzilla will not work - see the Release Notes for details. --------------------------------------------------------------------------------ChangeLog: * Mon Apr 6 2009 Itamar Reis Peixoto 3.2.3-1 - fix CVE-2009-1213 * Thu Mar 5 2009 Itamar Reis Peixoto 3.2.2-2 - fix from BZ #474250 Comment #16, from Chris Eveleigh --> - add python BR for contrib subpackage - fix description - change Requires perl-SOAP-Lite to perl(SOAP::Lite) according guidelines * Sun Mar 1 2009 Itamar Reis Peixoto 3.2.2-1 - thanks to Chris Eveleigh - for contributing with patches :-) - Upgrade to upstream 3.2.2 to fix multiple security vulns - Removed old perl_requires exclusions, added new ones for RADIUS, Oracle and sanitycheck.cgi - Added Oracle to supported DBs in description (and moved line breaks) - Include a patch to fix max_allowed_packet warnin when using with mysql * Sat Feb 28 2009 Itamar Reis Peixoto 3.0.8-1 - Upgrade to 3.0.8, fix #466077 #438080 - fix macro in changelog rpmlint warning - fix files-attr-not-set rpmlint warning for doc and contrib sub-packages * Mon Feb 23 2009 Fedora Release Engineering - 3.0.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Mon Feb 2 2009 Stepan Kasal - 3.0.4-3 - do not require perl-Email-Simple, it is (no longer) in use - remove several explicit perl-* requires; the automaticdependencies do handle them --------------------------------------------------------------------------------References: [ 1 ] Bug #494398 - CVE-2009-1213 bugzilla: CSRF vulnerability in attachment editing https://bugzilla.redhat.com/show_bug.cgi?id=494398 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update bugzilla' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Apr 07, 2009
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!