Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
89
security advisoryfedoracriticalFedora 44 librabbitmq Critical Out-of-Bounds Read Risk 2026-7174ee9a91
Version 0.16.0 - 2026-06-08 Security Fix out-of-bounds read via undersized frames in amqp_handle_input (GHSA-9mmv-r8g3-qp46, #878) Fix client crash when server negotiates frame_max below the AMQP protocol. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-7174ee9a91 2026-06-17 08:41:51.002473+00:00 -------------------------------------------------------------------------------- Name : librabbitmq Product : Fedora 44 Version : 0.16.0 Release : 1.fc44 URL : https://github.com/alanxz/rabbitmq-c Summary : Client library for AMQP Description : This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1. -------------------------------------------------------------------------------- Update Information: Version 0.16.0 - 2026-06-08 Security Fix out-of-bounds read via undersized frames in amqp_handle_input (GHSA-9mmv-r8g3-qp46, #878) Fix client crash when server negotiates frame_max below the AMQP protocol minimum (GHSA-jh48-qjf5-fx5v) Added Add amqp_bytes_from_buffer macro to create amqp_bytes_t from an arbitrary byte buffer with explicit length (#856, #866) Fixed Fix NULL pointer dereferences on allocation failure in tools/publish.c (#860, #861) Fix NULL pointer dereference in tools/consume.c stringify_bytes() on allocation failure (#858) Fix file stream leak in tools/common.c read_authfile() (#859) Fix handling of absolute CMAKE_INSTALL_INCLUDEDIR in exported CMake targets (#849) Changed amqp_literal_bytes macro now uses an explicit (void *) cast (#853) -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 10 2026 Remi Collet - 0.16.0-1 - update to 0.16.0 - re-license spec file to CECILL-2.1 - spec file cleanup -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2026-7174ee9a91' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 17, 2026
•Critical
Fedora
89
security advisoryFedoraclient libraryFedora 37 Libmemcached Update: 2023-c9bbaadcbf Moderate API Fixes
**Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection of `libsasl2`). * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131): Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`) * Fix [gh. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-c9bbaadcbf 2023-03-15 01:04:52.025066 --------------------------------------------------------------------------------Name : libmemcached-awesome Product : Fedora 37 Version : 1.1.4 Release : 1.fc37 URL : https://github.com/awesomized/libmemcached Summary : Client library and command line tools for memcached server Description : libmemcached-awesome is a C/C++ client library and tools for the memcached server (https://memcached.org/). It has been designed to be light on memory usage, and provide full access to server side methods. This is a resurrection of the original work from Brian Aker at libmemcached.org. --------------------------------------------------------------------------------Update Information: **Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection of `libsasl2`). * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131): Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`) * Fix [gh #132](https://github.com/awesomized/libmemcached/issues/132): Add build of static library (add `BUILD_SHARED_LIBS` build option; default: `ON`). * Fix [gh #134](https://github.com/awesomized/libmemcached/issues/134): Update client option documentation. * Fix [gh #136](https://github.com/awesomized/libmemcached/issues/136): `libmemcachedutil` is underlinked (link against libmemcached). * Fix [CVE-2023-27478](https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59) `get` returns random values when lower than default `OPT_POLL_TIMEOUT` is set. --------------------------------------------------------------------------------ChangeLog: * Mon Mar 6 2023 Remi Collet - 1.1.4-1 - update to 1.1.4 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-c9bbaadcbf' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 15, 2023
Fedora
89
security advisorysecurity fixcritical threatFedora 36: 2023-7da1639d3f Critical: Libmemcached Client Library Fix
**Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection of `libsasl2`). * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131): Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`) * Fix [gh. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-7da1639d3f 2023-03-15 00:44:59.865597 --------------------------------------------------------------------------------Name : libmemcached-awesome Product : Fedora 36 Version : 1.1.4 Release : 1.fc36 URL : https://github.com/awesomized/libmemcached Summary : Client library and command line tools for memcached server Description : libmemcached-awesome is a C/C++ client library and tools for the memcached server (https://memcached.org/). It has been designed to be light on memory usage, and provide full access to server side methods. This is a resurrection of the original work from Brian Aker at libmemcached.org. --------------------------------------------------------------------------------Update Information: **Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection of `libsasl2`). * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131): Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`) * Fix [gh #132](https://github.com/awesomized/libmemcached/issues/132): Add build of static library (add `BUILD_SHARED_LIBS` build option; default: `ON`). * Fix [gh #134](https://github.com/awesomized/libmemcached/issues/134): Update client option documentation. * Fix [gh #136](https://github.com/awesomized/libmemcached/issues/136): `libmemcachedutil` is underlinked (link against libmemcached). * Fix [CVE-2023-27478](https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59) `get` returns random values when lower than default `OPT_POLL_TIMEOUT` is set. --------------------------------------------------------------------------------ChangeLog: * Mon Mar 6 2023 Remi Collet - 1.1.4-1 - update to 1.1.4 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-7da1639d3f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 15, 2023
•Critical
Fedora
89
security advisoryFedoraupdate informationFedora 38: 2023-fd848970c4 Critical: libmemcached Buffer Issue Fix
**Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection of `libsasl2`). * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131): Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`) * Fix [gh. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-fd848970c4 2023-03-11 03:04:11.189874 --------------------------------------------------------------------------------Name : libmemcached-awesome Product : Fedora 38 Version : 1.1.4 Release : 1.fc38 URL : https://github.com/awesomized/libmemcached Summary : Client library and command line tools for memcached server Description : libmemcached-awesome is a C/C++ client library and tools for the memcached server (https://memcached.org/). It has been designed to be light on memory usage, and provide full access to server side methods. This is a resurrection of the original work from Brian Aker at libmemcached.org. --------------------------------------------------------------------------------Update Information: **Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection of `libsasl2`). * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131): Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`) * Fix [gh #132](https://github.com/awesomized/libmemcached/issues/132): Add build of static library (add `BUILD_SHARED_LIBS` build option; default: `ON`). * Fix [gh #134](https://github.com/awesomized/libmemcached/issues/134): Update client option documentation. * Fix [gh #136](https://github.com/awesomized/libmemcached/issues/136): `libmemcachedutil` is underlinked (link against libmemcached). * Fix [CVE-2023-27478](https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59) `get` returns random values when lower than default `OPT_POLL_TIMEOUT` is set. --------------------------------------------------------------------------------ChangeLog: * Mon Mar 6 2023 Remi Collet - 1.1.4-1 - update to 1.1.4 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-fd848970c4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 11, 2023
•Critical
Fedora
172
security advisorymoderateupdateUbuntu 16.04 ESM USN-5021-2 Moderate: Curl Info Exposure
curl could be made to expose sensitive information if it received a specially crafted input.. =========================================================================Ubuntu Security Notice USN-5021-2 January 20, 2022 curl vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM Summary: curl could be made to expose sensitive information if it received a specially crafted input. Software Description: - curl: HTTP, HTTPS, and FTP client and client libraries Details: USN-5021-1 fixed vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled TELNET connections when the -t option was used on the command line. Uninitialized data possibly containing sensitive information could be sent to the remote server, contrary to expectations. (CVE-2021-22898, CVE-2021-22925) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: curl 7.47.0-1ubuntu2.19+esm3 libcurl3 7.47.0-1ubuntu2.19+esm3 libcurl3-gnutls 7.47.0-1ubuntu2.19+esm3 libcurl3-nss 7.47.0-1ubuntu2.19+esm3 In general, a standard system update will make all the necessary changes. References: CVE-2021-22898, CVE-2021-22925 . A critical curl vulnerability on Ubuntu may lead to unauthorized access to sensitive info. Users should update to secure their systems promptly. curl Vulnerability, Ubuntu Security Update, Information Disclosure. . LinuxSecurity.com Team
Jan 20, 2022
Ubuntu
89
security advisorysecurity issueupdateFedora 33: 2021-3286ac2acc Moderate libpq Update for PostgreSQL Client
Update postgresql and libpq to the new upstream release.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-3286ac2acc 2021-02-26 01:07:35.019067 --------------------------------------------------------------------------------Name : libpq Product : Fedora 33 Version : 12.6 Release : 1.fc33 URL : https://www.postgresql.org/ Summary : PostgreSQL client library Description : The libpq package provides the essential shared library for any PostgreSQL client program or interface. You will need to install this package to use any other PostgreSQL package or any clients that need to connect to a PostgreSQL server. --------------------------------------------------------------------------------Update Information: Update postgresql and libpq to the new upstream release. --------------------------------------------------------------------------------ChangeLog: * Tue Feb 16 2021 Honza Horak - 12.6-1 - Update to 12.6 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-3286ac2acc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 25, 2021
•Medium
Fedora
89
security advisorymoderatesoftware updateFedora: 2021-3db6876545 Moderate: libpq Client Library Update
Update to the latest upstream release.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-3db6876545 2021-02-26 01:08:09.396888 --------------------------------------------------------------------------------Name : libpq Product : Fedora 32 Version : 12.6 Release : 1.fc32 URL : https://www.postgresql.org/ Summary : PostgreSQL client library Description : The libpq package provides the essential shared library for any PostgreSQL client program or interface. You will need to install this package to use any other PostgreSQL package or any clients that need to connect to a PostgreSQL server. --------------------------------------------------------------------------------Update Information: Update to the latest upstream release. --------------------------------------------------------------------------------ChangeLog: * Tue Feb 16 2021 Honza Horak - 12.6-1 - Update to 12.6 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-3db6876545' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 25, 2021
Fedora
89
security advisorysecurity issuefedoraFedora 32: FEDORA-2020-35f52d9370 critical: mariadb-connector-c flaws
**MariaDB 10.4.13 , Galera 26.4.4 , MariaDB CONC/C 3.1.8** Release notes: https://mariadb.com/docs/release-notes/community-server/old-releases/release-notes-mariadb-10-4-series/mariadb-10413-release-notes https://mariadb.com/docs/release-notes/connectors/c/3.1/3.1.8. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-35f52d9370 2020-06-16 01:25:41.304833 --------------------------------------------------------------------------------Name : mariadb-connector-c Product : Fedora 32 Version : 3.1.8 Release : 1.fc32 URL : http://mariadb.org/ Summary : The MariaDB Native Client library (C driver) Description : The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases. --------------------------------------------------------------------------------Update Information: **MariaDB 10.4.13 , Galera 26.4.4 , MariaDB CONC/C 3.1.8** Release notes: https://mariadb.com/docs/release-notes/community-server/old-releases/release-notes-mariadb-10-4-series/mariadb-10413-release-notes https://mariadb.com/docs/release-notes/connectors/c/3.1/3.1.8 --------------------------------------------------------------------------------ChangeLog: * Thu May 14 2020 Lukas Javorsky - 3.1.8-1 - Rebase to 3.1.8 --------------------------------------------------------------------------------References: [ 1 ] Bug #1546787 - FTBFS: -Wp,-D_GLIBCXX_ASSERTIONS https://bugzilla.redhat.com/show_bug.cgi?id=1546787 [ 2 ] Bug #1830118 - CVE-2020-2752 CVE-2020-2760 CVE-2020-2812 CVE-2020-2814 mariadb: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1830118 [ 3 ] Bug #1839828 - CVE-2020-13249 mariadb-connector-c: Improper validation of content in a OK packet received from a client [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1839828 [ 4 ] Bug #1840649 - CVE-2020-2752 mariadb-connector-c: mysql: CAPI unspecified vulnerability (CPU Apr 2020) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1840649 [ 5 ] Bug #1843795 - CVE-2020-13249 mariadb: mariadb-connector-c: Improper validation of content in a OK packet received from server [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1843795 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-35f52d9370' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jun 15, 2020
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!