Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Java-17-OpenJDK Important Denial of Service Fix 2026-21440-1

Calendar White Jul 26, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE NGINX Important Buffer Overflow DoS Vuln 2026-21439-1

Calendar White Jul 26, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Java Moderate 9 Vulnerabilities Advisory 2026-11363-1

Calendar White Jul 26, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE MozillaFirefox Security Update - 2026-11358-1 - Moderate Level

Calendar White Jul 26, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE MozillaThunderbird Moderate Security Fix 2026-11359-1

Calendar White Jul 26, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed ffmpeg Moderate Vulnerability 2026-11361-1

Calendar White Jul 26, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed libsrt1 Moderate Vulnerability Fix 2026-11357-1

Calendar White Jul 26, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Moderate Python313-Urwid Security Issue CVE-2026-9323

Calendar White Jul 26, 2026
moderate
Debianlts Large Esm H900
Debian LTS

Debian LTS linux-6.1 DLA-4700-1 CVE-2025-23131 to CVE-2026-64529

Calendar White Jul 26, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedorabuffer overflow

Fedora 43 munge 0.5.18 Critical Buffer Overflow CVE-2026-25506

Update to 0.5.18, resolve CVE-2026-25506. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ec8baadd48 2026-02-26 01:08:36.076651+00:00 -------------------------------------------------------------------------------- Name : munge Product : Fedora 43 Version : 0.5.18 Release : 1.fc43 URL : https://dun.github.io/munge/ Summary : Enables uid & gid authentication across a host cluster Description : MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods. -------------------------------------------------------------------------------- Update Information: Update to 0.5.18, resolve CVE-2026-25506 -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 13 2026 Michal Schmidt - 0.5.18-1 - Update to 0.5.18 * Fri Jan 16 2026 Fedora Release Engineering - 0.5.16-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2414773 - munge-0.5.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=2414773 [ 2 ] Bug #2438833 - CVE-2026-25506 munge: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438833 -------------------------------------------------------------------------------- This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ec8baadd48' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . MUNGE 0.5.18 update in Fedora 43 addresses critical buffer overflow issues affecting credential integrity.. Munge Fedora Update, Software Security, Linux Authentication. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 26, 2026 •Critical Fedora
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorybuffer overflowimportant

Rocky Linux 10 RLSA-2026-3038 MUNGE Severe Buffer Overflow Vulnerability

Important: munge security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:3033", "synopsis": "Important: munge security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for munge.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.\n\nSecurity Fix(es):\n\n* MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2438715", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2438715", "description": ""}], "cves": [{"name": "CVE-2026-25506", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-25506", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L", "cvss3BaseScore": "7.7", "cwe": "CWE-120"}], "references": [], "publishedAt": "2026-02-24T18:56:34.668877Z", "rpms": {"Rocky Linux 10": {"nvras": ["munge-libs-0:0.5.15-11.el10_1.aarch64.rpm", "munge-debuginfo-0:0.5.15-11.el10_1.aarch64.rpm", "munge-debuginfo-0:0.5.15-11.el10_1.s390x.rpm","munge-devel-0:0.5.15-11.el10_1.x86_64.rpm", "munge-debugsource-0:0.5.15-11.el10_1.aarch64.rpm", "munge-libs-0:0.5.15-11.el10_1.ppc64le.rpm", "munge-devel-0:0.5.15-11.el10_1.s390x.rpm", "munge-0:0.5.15-11.el10_1.s390x.rpm", "munge-debugsource-0:0.5.15-11.el10_1.x86_64.rpm", "munge-debugsource-0:0.5.15-11.el10_1.ppc64le.rpm", "munge-libs-0:0.5.15-11.el10_1.x86_64.rpm", "munge-0:0.5.15-11.el10_1.src.rpm", "munge-libs-0:0.5.15-11.el10_1.s390x.rpm", "munge-libs-debuginfo-0:0.5.15-11.el10_1.aarch64.rpm", "munge-debugsource-0:0.5.15-11.el10_1.s390x.rpm", "munge-0:0.5.15-11.el10_1.ppc64le.rpm", "munge-libs-debuginfo-0:0.5.15-11.el10_1.ppc64le.rpm", "munge-0:0.5.15-11.el10_1.x86_64.rpm", "munge-debuginfo-0:0.5.15-11.el10_1.ppc64le.rpm", "munge-libs-debuginfo-0:0.5.15-11.el10_1.x86_64.rpm", "munge-devel-0:0.5.15-11.el10_1.aarch64.rpm", "munge-libs-debuginfo-0:0.5.15-11.el10_1.s390x.rpm", "munge-0:0.5.15-11.el10_1.aarch64.rpm", "munge-debuginfo-0:0.5.15-11.el10_1.x86_64.rpm", "munge-devel-0:0.5.15-11.el10_1.ppc64le.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. MUNGE security update for Rocky Linux addresses critical buffer overflow issue allowing credential forgery. Stay safe!. MUNGE update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 24, 2026 •Important Rocky Linux
Banner 3 1028x280 1708121785 1771599793
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorybuffer overflowimportant

Rocky Linux 9 Munge Key Security Update RLSA-2026-3035 Release

Important: munge security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:3034", "synopsis": "Important: munge security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for munge.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.\n\nSecurity Fix(es):\n\n* MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2438715", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2438715", "description": ""}], "cves": [{"name": "CVE-2026-25506", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-25506", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L", "cvss3BaseScore": "7.7", "cwe": "CWE-120"}], "references": [], "publishedAt": "2026-02-24T18:54:11.875441Z", "rpms": {"Rocky Linux 9": {"nvras": ["munge-0:0.5.13-14.el9_7.aarch64.rpm", "munge-0:0.5.13-14.el9_7.ppc64le.rpm", "munge-0:0.5.13-14.el9_7.s390x.rpm", "munge-0:0.5.13-14.el9_7.src.rpm","munge-0:0.5.13-14.el9_7.x86_64.rpm", "munge-debuginfo-0:0.5.13-14.el9_7.aarch64.rpm", "munge-debuginfo-0:0.5.13-14.el9_7.i686.rpm", "munge-debuginfo-0:0.5.13-14.el9_7.ppc64le.rpm", "munge-debuginfo-0:0.5.13-14.el9_7.s390x.rpm", "munge-debuginfo-0:0.5.13-14.el9_7.x86_64.rpm", "munge-debugsource-0:0.5.13-14.el9_7.aarch64.rpm", "munge-debugsource-0:0.5.13-14.el9_7.i686.rpm", "munge-debugsource-0:0.5.13-14.el9_7.ppc64le.rpm", "munge-debugsource-0:0.5.13-14.el9_7.s390x.rpm", "munge-debugsource-0:0.5.13-14.el9_7.x86_64.rpm", "munge-devel-0:0.5.13-14.el9_7.aarch64.rpm", "munge-devel-0:0.5.13-14.el9_7.i686.rpm", "munge-devel-0:0.5.13-14.el9_7.ppc64le.rpm", "munge-devel-0:0.5.13-14.el9_7.s390x.rpm", "munge-devel-0:0.5.13-14.el9_7.x86_64.rpm", "munge-libs-0:0.5.13-14.el9_7.aarch64.rpm", "munge-libs-0:0.5.13-14.el9_7.i686.rpm", "munge-libs-0:0.5.13-14.el9_7.ppc64le.rpm", "munge-libs-0:0.5.13-14.el9_7.s390x.rpm", "munge-libs-0:0.5.13-14.el9_7.x86_64.rpm", "munge-libs-debuginfo-0:0.5.13-14.el9_7.aarch64.rpm", "munge-libs-debuginfo-0:0.5.13-14.el9_7.i686.rpm", "munge-libs-debuginfo-0:0.5.13-14.el9_7.ppc64le.rpm", "munge-libs-debuginfo-0:0.5.13-14.el9_7.s390x.rpm", "munge-libs-debuginfo-0:0.5.13-14.el9_7.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important Munge security update for Rocky Linux 9 addresses key leakage, ensuring secure authentication. Read for details.. Munge Security Update, Rocky Linux Important Patch, Credential Forgery Fix, Buffer Overflow Resolution. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 24, 2026 •Important Rocky Linux
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorybuffer overflowimportant

AlmaLinux 9 Mumble Resource Exhaustion Flaw RLSA-2026-4035 CVE-2026-35510

Important: munge security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:3032", "synopsis": "Important: munge security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for munge.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.\n\nSecurity Fix(es):\n\n* MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2438715", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2438715", "description": ""}], "cves": [{"name": "CVE-2026-25506", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-25506", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L", "cvss3BaseScore": "7.7", "cwe": "CWE-120"}], "references": [], "publishedAt": "2026-02-24T18:52:02.882818Z", "rpms": {"Rocky Linux 8": {"nvras": ["munge-0:0.5.13-3.el8_10.aarch64.rpm", "munge-0:0.5.13-3.el8_10.src.rpm", "munge-0:0.5.13-3.el8_10.x86_64.rpm", "munge-debuginfo-0:0.5.13-3.el8_10.aarch64.rpm","munge-debuginfo-0:0.5.13-3.el8_10.i686.rpm", "munge-debuginfo-0:0.5.13-3.el8_10.x86_64.rpm", "munge-debugsource-0:0.5.13-3.el8_10.aarch64.rpm", "munge-debugsource-0:0.5.13-3.el8_10.i686.rpm", "munge-debugsource-0:0.5.13-3.el8_10.x86_64.rpm", "munge-devel-0:0.5.13-3.el8_10.aarch64.rpm", "munge-devel-0:0.5.13-3.el8_10.i686.rpm", "munge-devel-0:0.5.13-3.el8_10.x86_64.rpm", "munge-libs-0:0.5.13-3.el8_10.aarch64.rpm", "munge-libs-0:0.5.13-3.el8_10.i686.rpm", "munge-libs-0:0.5.13-3.el8_10.x86_64.rpm", "munge-libs-debuginfo-0:0.5.13-3.el8_10.aarch64.rpm", "munge-libs-debuginfo-0:0.5.13-3.el8_10.i686.rpm", "munge-libs-debuginfo-0:0.5.13-3.el8_10.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Munge security update for Rocky Linux 8 addresses an important buffer overflow risk affecting credential integrity.. Munge Update Rocky Linux Important Buffer Overflow Credential Forgery. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 24, 2026 •Important Rocky Linux
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics