Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
100
security advisorySuSEimportantSUSE Linux Micro 6.0 Kernel Important Patch CVE-2026-43284 CVE-2026-43500
An update that solves two vulnerabilities can now be installed.. # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:21625-1 Release Date: 2026-05-12T09:35:37Z Rating: important References: * bsc#1264449 * bsc#1264450 Cross-References: * CVE-2026-43284 * CVE-2026-43500 CVSS scores: * CVE-2026-43284 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43284 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43284 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43500 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix the following security issues: * CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449). * CVE-2026-43500: rxrpc: unshare DATA/RESPONSE packets when paged frags are present (bsc#1264450). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-400=1 ## Package List: * SUSE Linux Micro 6.0 (noarch) * kernel-macros-6.4.0-43.1 * kernel-devel-6.4.0-43.1 * kernel-source-6.4.0-43.1 * SUSE Linux Micro 6.0 (aarch64 nosrc s390x x86_64) * kernel-default-6.4.0-43.1 * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * kernel-default-debuginfo-6.4.0-43.1 * kernel-default-debugsource-6.4.0-43.1 * SUSE Linux Micro 6.0 (s390x x86_64) *kernel-default-livepatch-6.4.0-43.1 * SUSE Linux Micro 6.0 (aarch64 x86_64) * kernel-default-base-6.4.0-43.1.21.20 * SUSE Linux Micro 6.0 (nosrc x86_64) * kernel-kvmsmall-6.4.0-43.1 * SUSE Linux Micro 6.0 (x86_64) * kernel-kvmsmall-debuginfo-6.4.0-43.1 * kernel-kvmsmall-debugsource-6.4.0-43.1 ## References: * https://www.suse.com/security/cve/CVE-2026-43284.html * https://www.suse.com/security/cve/CVE-2026-43500.html * https://bugzilla.suse.com/show_bug.cgi?id=1264449 * https://bugzilla.suse.com/show_bug.cgi?id=1264450 . SUSE Linux Micro 6.0 kernel patch resolves important issues, requiring immediate attention and a system reboot.. SUSE Linux, kernel update, important security, Linux patch, kernel vulnerabilities. . Severity: Important. LinuxSecurity.com Team
May 15, 2026
•Important
SuSE
219
security advisoryimportantinformation disclosureRocky Linux 10 RLSA-2026-10225 Urgent Grafana Data Security Notice
Important: grafana security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:10223", "synopsis": "Important: grafana security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for grafana.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. \n\nSecurity Fix(es):\n\n* grafana: Grafana: Information disclosure of data-source passwords via public dashboards (CVE-2026-27877)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2452293", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2452293", "description": ""}], "cves": [{"name": "CVE-2026-27877", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27877", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cvss3BaseScore": "7.5", "cwe": "CWE-201"}], "references": [], "publishedAt": "2026-04-28T12:06:44.835475Z", "rpms": {"Rocky Linux 10": {"nvras": ["grafana-0:10.2.6-24.el10_1.ppc64le.rpm", "grafana-0:10.2.6-24.el10_1.src.rpm", "grafana-selinux-0:10.2.6-24.el10_1.x86_64.rpm", "grafana-selinux-0:10.2.6-24.el10_1.ppc64le.rpm", "grafana-selinux-0:10.2.6-24.el10_1.aarch64.rpm", "grafana-debuginfo-0:10.2.6-24.el10_1.x86_64.rpm", "grafana-debugsource-0:10.2.6-24.el10_1.x86_64.rpm", "grafana-0:10.2.6-24.el10_1.x86_64.rpm", "grafana-debugsource-0:10.2.6-24.el10_1.ppc64le.rpm", "grafana-debugsource-0:10.2.6-24.el10_1.s390x.rpm", "grafana-0:10.2.6-24.el10_1.s390x.rpm", "grafana-debuginfo-0:10.2.6-24.el10_1.s390x.rpm","grafana-debuginfo-0:10.2.6-24.el10_1.aarch64.rpm", "grafana-0:10.2.6-24.el10_1.aarch64.rpm", "grafana-selinux-0:10.2.6-24.el10_1.s390x.rpm", "grafana-debugsource-0:10.2.6-24.el10_1.aarch64.rpm", "grafana-debuginfo-0:10.2.6-24.el10_1.ppc64le.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. An important security advisory details a Grafana update for Rocky Linux that fixes an information disclosure vulnerability.. Grafana Update, Rocky Linux Security, Information Disclosure, CVSS Score. . Severity: Important. LinuxSecurity.com Team
Apr 28, 2026
•Important
Rocky Linux
89
security advisoryupdateFedoraFedora 41: FEDORA-2025-cd87acc644 critical: rust-icu_normalizer_data update
Update uv to 0.6.14, with various bugfixes and new features. Update rust-idna to 1.0.3 (fixing RUSTSEC-2024-0421), rust-url to 2.5.4, rust- adblock to 0.9.6, and rust-cookie_store to 0.21.1; adjust some reverse dependencies of rust-idna. Initial packages for many dependencies. Update rust-ron to 0.9.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-cd87acc644 2025-04-21 16:44:59.680841+00:00 -------------------------------------------------------------------------------- Name : rust-icu_normalizer_data Product : Fedora 41 Version : 1.5.1 Release : 1.fc41 URL : https://crates.io/crates/icu_normalizer_data Summary : Data for the icu_normalizer crate Description : Data for the icu_normalizer crate. -------------------------------------------------------------------------------- Update Information: Update uv to 0.6.14, with various bugfixes and new features. Update rust-idna to 1.0.3 (fixing RUSTSEC-2024-0421), rust-url to 2.5.4, rust- adblock to 0.9.6, and rust-cookie_store to 0.21.1; adjust some reverse dependencies of rust-idna. Initial packages for many dependencies. Update rust-ron to 0.9. Update rust-zip to 2.6.1, fixing GHSA-94vh-gphv-8pm8. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 9 2025 Benjamin A. Beasley - 1.5.1-1 - Initial package (close RHBZ#2358522) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2277901 - rust-adblock-0.9.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2277901 [ 2 ] Bug #2291175 - rust-idna-1.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2291175 [ 3 ] Bug #2323618 - rust-url-2.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2323618 [ 4 ] Bug #2324926 - rust-cookie_store-0.21.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2324926 [ 5 ] Bug #2352783 - rust-zip-2.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2352783 [ 6 ] Bug #2358015 - Review Request: rust-write16 - UTF-16 analog of the Write trait https://bugzilla.redhat.com/show_bug.cgi?id=2358015 [ 7 ] Bug #2358018 - Review Request: rust-utf16_iter - Iterator by char over potentially-invalid UTF-16 in &[u16] https://bugzilla.redhat.com/show_bug.cgi?id=2358018 [ 8 ] Bug #2358020 - Review Request: rust-icu_locid - API for managing Unicode Language and Locale Identifiers https://bugzilla.redhat.com/show_bug.cgi?id=2358020 [ 9 ] Bug #2358105 - Review Request: rust-icu_provider_macros - Proc macros for ICU data providers https://bugzilla.redhat.com/show_bug.cgi?id=2358105 [ 10 ] Bug #2358290 - Review Request: rust-icu_provider - Trait and struct definitions for the ICU data provider https://bugzilla.redhat.com/show_bug.cgi?id=2358290 [ 11 ] Bug #2358292 - Review Request: rust-icu_locid_transform_data - Data for the icu_locid_transform crate https://bugzilla.redhat.com/show_bug.cgi?id=2358292 [ 12 ] Bug #2358507 - Review Request: rust-icu_locid_transform - API for Unicode Language and Locale Identifiers canonicalization https://bugzilla.redhat.com/show_bug.cgi?id=2358507 [ 13 ] Bug #2358521 - Review Request: rust-icu_properties_data - Data for the icu_properties crate https://bugzilla.redhat.com/show_bug.cgi?id=2358521 [ 14 ] Bug #2358522 - Review Request: rust-icu_normalizer_data - Data for the icu_normalizer crate https://bugzilla.redhat.com/show_bug.cgi?id=2358522 [ 15 ] Bug #2358527 - Review Request: rust-icu_properties - Definitions for Unicode properties https://bugzilla.redhat.com/show_bug.cgi?id=2358527 [ 16 ] Bug #2358606 - Review Request: rust-icu_normalizer - API for normalizing text into Unicode Normalization Forms https://bugzilla.redhat.com/show_bug.cgi?id=2358606 [ 17 ] Bug #2358642 - Review Request: rust-idna_adapter -Back end adapter for idna https://bugzilla.redhat.com/show_bug.cgi?id=2358642 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-cd87acc644' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 21, 2025
•Critical
Fedora
200
security advisorycode executionimportantScientific Linux: Thunderbird CVE-2013-5591 Exposes Critical Data Risk
Important: thunderbird security update. Date: Wed, 30 Oct 2013 17:31:59 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Important: thunderbird on SL5.x, SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Important: thunderbird security update Advisory ID: SLSA-2013:1480-1 Issue Date: 2013-10-30 CVE Numbers: CVE-2013-5590 CVE-2013-5595 CVE-2013-5597 CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 CVE-2013-5602 CVE-2013-5604 -- Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2013-5590, CVE-2013-5597, CVE-2013-5599, CVE-2013-5600, CVE-2013-5601, CVE-2013-5602) It was found that the Thunderbird JavaScript engine incorrectly allocated memory for certain functions. An attacker could combine this flaw with other vulnerabilities to execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2013-5595) A flaw was found in the way Thunderbird handled certain Extensible Stylesheet Language Transformations (XSLT) files. An attacker could combine this flaw with other vulnerabilities to execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2013-5604) Note: All of the above issues cannot be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. They could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed. After installing the update, Thunderbird must be restarted for the changes to take effect. -- SL5 x86_64 thunderbird-17.0.10-1.el5_10.x86_64.rpm thunderbird-debuginfo-17.0.10-1.el5_10.x86_64.rpm i386 thunderbird-17.0.10-1.el5_10.i386.rpm thunderbird-debuginfo-17.0.10-1.el5_10.i386.rpm SL6 x86_64 thunderbird-17.0.10-1.el6_4.x86_64.rpm thunderbird-debuginfo-17.0.10-1.el6_4.x86_64.rpm i386 thunderbird-17.0.10-1.el6_4.i686.rpm thunderbird-debuginfo-17.0.10-1.el6_4.i686.rpm - Scientific Linux Development Team lastline . Important update issued for Thunderbird on SL5.x and SL6.x addressing multiple security flaws that could potentially enable unauthorized code execution.. thunderbird update, security patch, scientific linux, important security, email client fix. . Severity: Important. LinuxSecurity.com Team
Oct 30, 2013
•Important
Scientific Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!