Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Firefox Important Update to Version 153.0 - Performance Boost

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 2026-4a2d23b470 google-osconfig-agent Important DoS Issues

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 moby-engine Update v29.6.2 Denial of Service Vulnerability

Calendar White Jul 25, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 xrdp Important Denial Of Service Risks Advisory 2026-952a486b39

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Libreswan Important IKE Tunnel Security Update CVE-2026-14957

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 WebKitGTK Important Security Fixes Advisory 2026-ec8e535c6e

Calendar White Jul 25, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 p11-kit Critical Stack Exhaustion Fix CVE-2026-13757

Calendar White Jul 25, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 python-idna Important Denial of Service Fix 2026-6215e65f6c

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 pam Important Timing Attack Fix 2026-adc8ddbeaa

Calendar White Jul 25, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorydenial of serviceSuSE

SUSE: curl Critical DoS Vulnerability Patch 2025:20675-1 Released

* bsc#1243397 * bsc#1243706 * bsc#1243933 * bsc#1246197 * jsc#PED-13055 . # Security update for curl Announcement ID: SUSE-SU-2025:20675-1 Release Date: 2025-09-09T10:22:04Z Rating: important References: * bsc#1243397 * bsc#1243706 * bsc#1243933 * bsc#1246197 * jsc#PED-13055 * jsc#PED-13056 Cross-References: * CVE-2025-4947 * CVE-2025-5025 * CVE-2025-5399 CVSS scores: * CVE-2025-4947 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-4947 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2025-4947 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-5025 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-5025 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2025-5025 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-5399 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-5399 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-5399 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves three vulnerabilities, contains two features and has one fix can now be installed. ## Description: This update for curl fixes the following issues: * CVE-2025-5399: libcurl can possibly get trapped in an endless busy-loop when processing specially crafted packets (bsc#1243933). * CVE-2025-5025: No QUIC certificate pinning with wolfSSL (bsc#1243706). * CVE-2025-4947: QUIC certificate check skip with wolfSSL (bsc#1243397). Other bugfixes: * Fix the --ftp-pasv option in curl v8.14.1 (bsc#1246197). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patchSUSE-SLE-Micro-6.1-254=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * curl-debuginfo-8.14.1-slfo.1.1_1.1 * curl-debugsource-8.14.1-slfo.1.1_1.1 * curl-8.14.1-slfo.1.1_1.1 * libcurl4-8.14.1-slfo.1.1_1.1 * libcurl4-debuginfo-8.14.1-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4947.html * https://www.suse.com/security/cve/CVE-2025-5025.html * https://www.suse.com/security/cve/CVE-2025-5399.html * https://bugzilla.suse.com/show_bug.cgi?id=1243397 * https://bugzilla.suse.com/show_bug.cgi?id=1243706 * https://bugzilla.suse.com/show_bug.cgi?id=1243933 * https://bugzilla.suse.com/show_bug.cgi?id=1246197 * https://jira.suse.com/login.jsp?permissionViolation=true&os_destination=%2Fbrowse%2FPED-13055&page_caps=&user_role= * https://jira.suse.com/login.jsp?permissionViolation=true&os_destination=%2Fbrowse%2FPED-13056&page_caps=&user_role= . SUSE has published a critical update for wget addressing major vulnerabilities related to service disruption and SSL/TLS certificate validation problems.. curl security update,SUSE advisory,curl busy-loop fix,SUSE Linux Micro,curl certificate check. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 10, 2025 •Important SuSE
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisoryimportant fixthunderbird update

SL7: SLSA-2023-0600-1 Important: Thunderbird Security Update

This update upgrades Thunderbird to version 102.7.1. * Mozilla: Revocation status of S/Mime signature certificates was not checked (CVE-2023-0430) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 thunderbird-102.7.1-2.el7_9.x86_64.rpm thunderbird-debuginfo-102.7.1-2.el7_9.x86 [More...]. Synopsis: Important: thunderbird security update Advisory ID: SLSA-2023:0600-1 Issue Date: 2023-02-07 CVE Numbers: CVE-2023-0430 -- This update upgrades Thunderbird to version 102.7.1. Security Fix(es): * Mozilla: Revocation status of S/Mime signature certificates was not checked (CVE-2023-0430) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE -- SL7 x86_64 thunderbird-102.7.1-2.el7_9.x86_64.rpm thunderbird-debuginfo-102.7.1-2.el7_9.x86_64.rpm - Scientific Linux Development Team . Important Thunderbird patch for Scientific Linux SL7. Update to version 102.7.1 to resolve certificate validation issue.. Thunderbird Security Update, SL7 Fixes, Mozilla Certificate Checks. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 07, 2023 •Important Scientific Linux
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics