Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 24 articles for you...
203
security advisorycriticalthreatMageia Golang Critical Security Advisory CVE-2026-42504 CVE-2026-42507
Security update. Publication date: 20 Jul 2026 URL: https://advisories.mageia.org/MGASA-2026-0276.html Type: security Affected Mageia releases: 10, 9 CVE: CVE-2026-42504, CVE-2026-42507, CVE-2026-27145, CVE-2026-39822, CVE-2026-42505 Description: The updated packages fix security vulnerabilities: mime: quadratic complexity in WordDecoder.DecodeHeader. (CVE-2026-42504) net/textproto: arbitrary input are included in errors without any escaping. (CVE-2026-42507) crypto/x509: split candidate hostname only once. (CVE-2026-27145) os: Root escape via symlink plus trailing slash. (CVE-2026-39822) crypto/tls: Encrypted Client Hello privacy leak. (CVE-2026-42505) References: - https://bugs.mageia.org/show_bug.cgi?id=35624 - https://www.openwall.com/lists/oss-security/2026/06/03/2 - https://www.openwall.com/lists/oss-security/2026/07/08/10 - https://lists.opensuse.org/archives/list/
Jul 20, 2026
•Critical
Mageia
217
security advisorythreatimportantOracle Linux 10 Advisory ELSA-2026-36189 perl-HTTP-Daemon Important Fix
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-36189 http://linux.oracle.com/errata/ELSA-2026-36189.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: perl-HTTP-Daemon-6.16-7.el10_2.1.noarch.rpm aarch64: perl-HTTP-Daemon-6.16-7.el10_2.1.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/perl-HTTP-Daemon-6.16-7.el10_2.1.src.rpm Related CVEs: CVE-2026-8450 Description of changes: [6.16-7.1] - Fix CVE-2026-8450: send_file() shell-magic via 2-arg open() - Resolves: RHEL-184826 _______________________________________________ El-errata mailing list
Jul 20, 2026
•Important
Oracle
202
security advisorymoderateDoSopenSUSE Tumbleweed Zabbix Moderate Vulnerabilities Fixed 2026-11304-1
An update that solves 2 vulnerabilities can now be installed.. # system-user-zabbix-7.0.28-1.1 on GA media Announcement ID: openSUSE-SU-2026:11304-1 Rating: moderate Cross-References: * CVE-2026-25680 * CVE-2026-42502 CVSS scores: * CVE-2026-25680 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25680 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-42502 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-42502 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the system-user-zabbix-7.0.28-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * system-user-zabbix 7.0.28-1.1 * zabbix-agent 7.0.28-1.1 * zabbix-agent2 7.0.28-1.1 * zabbix-java-gateway 7.0.28-1.1 * zabbix-proxy 7.0.28-1.1 * zabbix-proxy-mysql 7.0.28-1.1 * zabbix-proxy-postgresql 7.0.28-1.1 * zabbix-proxy-sqlite 7.0.28-1.1 * zabbix-server 7.0.28-1.1 * zabbix-server-mysql 7.0.28-1.1 * zabbix-server-postgresql 7.0.28-1.1 * zabbix-ui 7.0.28-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25680.html * https://www.suse.com/security/cve/CVE-2026-42502.html . Update resolves two moderate issues in system-user-zabbix on openSUSE Tumbleweed, improving security measures.. Security Update, Zabbix, openSUSE, System User, Patch. . Severity: moderate. LinuxSecurity.com Team
Jul 19, 2026
•moderate
OpenSUSE
89
security advisoryfedoracriticalFedora 44 opam Important Fix Buffer Overflow CVE-2026-57825
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-239dbbff34 2026-07-19 05:46:37.002193+00:00 -------------------------------------------------------------------------------- Name : opam Product : Fedora 44 Version : 2.5.2 Release : 1.fc44 URL : https://opam.ocaml.org/ Summary : Source-based package manager for OCaml Description : Opam is a source-based package manager for OCaml. It supports multiple simultaneous compiler installations, flexible package constraints, and a Git-friendly development workflow. -------------------------------------------------------------------------------- Update Information: Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 10 2026 Jerry James - 2.5.2-1 - OCaml 5.5.0 rebuild - Version 2.5.2 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-239dbbff34' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 19, 2026
•Critical
Fedora
202
security advisoryMySQLthreatopenSUSE mariadb-connector-c Important Issue CVE-2026-44172
An update that solves one vulnerability can now be installed.. # Security update for mariadb-connector-c Announcement ID: SUSE-SU-2026:3110-1 Release Date: 2026-07-17T14:15:40Z Rating: important References: * bsc#1266438 Cross-References: * CVE-2026-44172 CVSS scores: * CVE-2026-44172 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-44172 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44172 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-44172 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for mariadb-connector-c fixes the following issue: * CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: * Update to 3.1.28. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3110=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-3110=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3110=1 * SUSE LinuxEnterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3110=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-3110=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libmariadb_plugins-debuginfo-3.1.28-150600.18.3.1 * libmariadb3-debuginfo-3.1.28-150600.18.3.1 * libmariadb-devel-3.1.28-150600.18.3.1 * libmariadb-devel-debuginfo-3.1.28-150600.18.3.1 * libmariadb3-3.1.28-150600.18.3.1 * libmariadb_plugins-3.1.28-150600.18.3.1 * mariadb-connector-c-debugsource-3.1.28-150600.18.3.1 * libmariadbprivate-3.1.28-150600.18.3.1 * libmariadbprivate-debuginfo-3.1.28-150600.18.3.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libmariadb_plugins-debuginfo-3.1.28-150600.18.3.1 * libmariadb3-debuginfo-3.1.28-150600.18.3.1 * libmariadb-devel-3.1.28-150600.18.3.1 * libmariadb3-3.1.28-150600.18.3.1 * libmariadb-devel-debuginfo-3.1.28-150600.18.3.1 * libmariadb_plugins-3.1.28-150600.18.3.1 * mariadb-connector-c-debugsource-3.1.28-150600.18.3.1 * libmariadbprivate-3.1.28-150600.18.3.1 * libmariadbprivate-debuginfo-3.1.28-150600.18.3.1 * openSUSE Leap 15.6 (x86_64) * libmariadb3-32bit-3.1.28-150600.18.3.1 * libmariadb3-32bit-debuginfo-3.1.28-150600.18.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libmariadb3-64bit-debuginfo-3.1.28-150600.18.3.1 * libmariadb3-64bit-3.1.28-150600.18.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libmariadb_plugins-debuginfo-3.1.28-150600.18.3.1 * libmariadb3-debuginfo-3.1.28-150600.18.3.1 * libmariadb-devel-3.1.28-150600.18.3.1 * libmariadb3-3.1.28-150600.18.3.1 * libmariadb-devel-debuginfo-3.1.28-150600.18.3.1 * libmariadb_plugins-3.1.28-150600.18.3.1 * mariadb-connector-c-debugsource-3.1.28-150600.18.3.1 * libmariadbprivate-3.1.28-150600.18.3.1 * libmariadbprivate-debuginfo-3.1.28-150600.18.3.1 * Basesystem Module15-SP7 (aarch64 ppc64le s390x x86_64) * libmariadb3-debuginfo-3.1.28-150600.18.3.1 * libmariadb3-3.1.28-150600.18.3.1 * mariadb-connector-c-debugsource-3.1.28-150600.18.3.1 * libmariadbprivate-3.1.28-150600.18.3.1 * libmariadbprivate-debuginfo-3.1.28-150600.18.3.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libmariadb_plugins-debuginfo-3.1.28-150600.18.3.1 * libmariadb-devel-3.1.28-150600.18.3.1 * libmariadb-devel-debuginfo-3.1.28-150600.18.3.1 * libmariadb_plugins-3.1.28-150600.18.3.1 * mariadb-connector-c-debugsource-3.1.28-150600.18.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44172.html * https://bugzilla.suse.com/show_bug.cgi?id=1266438 . Update for mariadb-connector-c addresses CVE-2026-44172 in openSUSE systems with important significance.. MariaDB Connector, openSUSE security, important updates. . Severity: Important. LinuxSecurity.com Team
Jul 17, 2026
•Important
OpenSUSE
217
security advisorythreatimportantOracle Linux 10 qt6-qtdeclarative Important Update ELSA-2026-20567
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-20567 http://linux.oracle.com/errata/ELSA-2026-20567.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: qt6-qtdeclarative-6.10.1-1.el10_2.1.x86_64.rpm qt6-qtdeclarative-devel-6.10.1-1.el10_2.1.x86_64.rpm qt6-qtdeclarative-examples-6.10.1-1.el10_2.1.x86_64.rpm qt6-qtdeclarative-static-6.10.1-1.el10_2.1.x86_64.rpm aarch64: qt6-qtdeclarative-6.10.1-1.el10_2.1.aarch64.rpm qt6-qtdeclarative-devel-6.10.1-1.el10_2.1.aarch64.rpm qt6-qtdeclarative-examples-6.10.1-1.el10_2.1.aarch64.rpm qt6-qtdeclarative-static-6.10.1-1.el10_2.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/qt6-qtdeclarative-6.10.1-1.el10_2.1.src.rpm Related CVEs: CVE-2025-14576 Description of changes: [6.10.1-1.1] - VectorImage: sanitize source string used in output (CVE-2025-14576) Resolves: RHEL-173494 _______________________________________________ El-errata mailing list
Jul 17, 2026
•Important
Oracle
219
security advisoryDoSimportantRocky Linux hplip Important Security Update CVE-2026-14544 RLSA-2026-39976
Important: hplip security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:39976", "synopsis": "Important: hplip security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for hplip.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2496772", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2496772", "description": ""}], "cves": [{"name": "CVE-2026-14544", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14544", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "9.8", "cwe": "CWE-190"}], "references": [], "publishedAt": "2026-07-16T12:05:50.790754Z", "rpms": {"Rocky Linux 10": {"nvras": ["hplip-0:3.23.12-10.el10_2.5.src.rpm", "hplip-libs-debuginfo-0:3.23.12-10.el10_2.5.x86_64.rpm", "hplip-0:3.23.12-10.el10_2.5.s390x.rpm", "hplip-debugsource-0:3.23.12-10.el10_2.5.x86_64.rpm", "libsane-hpaio-0:3.23.12-10.el10_2.5.x86_64.rpm", "hplip-libs-0:3.23.12-10.el10_2.5.aarch64.rpm", "hplip-libs-0:3.23.12-10.el10_2.5.ppc64le.rpm", "libsane-hpaio-0:3.23.12-10.el10_2.5.aarch64.rpm", "hplip-libs-debuginfo-0:3.23.12-10.el10_2.5.ppc64le.rpm", "libsane-hpaio-debuginfo-0:3.23.12-10.el10_2.5.ppc64le.rpm", "hplip-debuginfo-0:3.23.12-10.el10_2.5.s390x.rpm","libsane-hpaio-debuginfo-0:3.23.12-10.el10_2.5.s390x.rpm", "hplip-libs-debuginfo-0:3.23.12-10.el10_2.5.s390x.rpm", "hplip-debuginfo-0:3.23.12-10.el10_2.5.aarch64.rpm", "hplip-common-0:3.23.12-10.el10_2.5.x86_64.rpm", "hplip-common-0:3.23.12-10.el10_2.5.s390x.rpm", "hplip-common-0:3.23.12-10.el10_2.5.ppc64le.rpm", "hplip-debugsource-0:3.23.12-10.el10_2.5.ppc64le.rpm", "libsane-hpaio-debuginfo-0:3.23.12-10.el10_2.5.aarch64.rpm", "hplip-0:3.23.12-10.el10_2.5.x86_64.rpm", "hplip-debugsource-0:3.23.12-10.el10_2.5.s390x.rpm", "hplip-debuginfo-0:3.23.12-10.el10_2.5.ppc64le.rpm", "hplip-libs-0:3.23.12-10.el10_2.5.x86_64.rpm", "libsane-hpaio-0:3.23.12-10.el10_2.5.ppc64le.rpm", "hplip-libs-debuginfo-0:3.23.12-10.el10_2.5.aarch64.rpm", "hplip-0:3.23.12-10.el10_2.5.aarch64.rpm", "libsane-hpaio-debuginfo-0:3.23.12-10.el10_2.5.x86_64.rpm", "libsane-hpaio-0:3.23.12-10.el10_2.5.s390x.rpm", "hplip-common-0:3.23.12-10.el10_2.5.aarch64.rpm", "hplip-debuginfo-0:3.23.12-10.el10_2.5.x86_64.rpm", "hplip-libs-0:3.23.12-10.el10_2.5.s390x.rpm", "hplip-0:3.23.12-10.el10_2.5.ppc64le.rpm", "hplip-debugsource-0:3.23.12-10.el10_2.5.aarch64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for HPLIP on Rocky Linux 10, addressing issues with CVE-2026-14544 and CVE-2026-8631.. HPLIP security update, Rocky Linux 10, CVE-2026-14544, Important security advisory, printer drivers. . Severity: Important. LinuxSecurity.com Team
Jul 16, 2026
•Important
Rocky Linux
202
security advisorymoderateOpenSUSEopenSUSE Tumbleweed Jackson-Databind Moderate Threat Update 2026-11279-1
An update that solves 2 vulnerabilities can now be installed.. # jackson-databind-2.18.9-2.1 on GA media Announcement ID: openSUSE-SU-2026:11279-1 Rating: moderate Cross-References: * CVE-2026-59888 * CVE-2026-59889 CVSS scores: * CVE-2026-59888 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59888 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-59889 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59889 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the jackson-databind-2.18.9-2.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * jackson-databind 2.18.9-2.1 * jackson-databind-javadoc 2.18.9-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59888.html * https://www.suse.com/security/cve/CVE-2026-59889.html . An important update for openSUSE addresses two vulnerabilities in jackson-databind, enhancing system security. Install now.. openSUSE security update,jackson-databind security advisory,moderate severity threat. . Severity: moderate. LinuxSecurity.com Team
Jul 16, 2026
•moderate
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!