Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 471
Alerts This Week
Warning Icon 1 471

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Advisory 2026-0259-1 gh Important Punycode Fix CVE-2026-39821

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Avahi Moderate DoS CVE-2025-59529 Advisory 2026-3217-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE avahi Moderate Denial of Service Fix 2026-3218-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE ImageMagick Important Security Fix for Multiple Flaws 2026-3219-1

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nmap Moderate Out-of-Bounds Crash Vulnern 2026-3220-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE 2026-3224-1 SVT-AV1 Important Remote Code Execution Fix

Calendar White Jul 24, 2026
Important
Debianlts Large Esm H800
Debian LTS

Debian LTS DLA-4698-1 Spice-Vdagent Critical DoS Path Traversal

Calendar White Jul 24, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1

Calendar White Jul 24, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian LTS Imagemagick Critical Denial of Service Code Exec Vuln DLA-4696-1

Calendar White Jul 24, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":75,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorymemory corruptionheap overflow

Debian LTS DLA-4681-1 p7zip Memory Corruption Fix CVE-2026-48092

Multiple memory corruption vulnerabilities were discovered in p7zip, a now unmaintained fork of 7-Zip, which itself is a file archiver handling multiple formats. To address these security vulnerabilities, whose fixes are unfortunately not isolated, this update again replaces p7zip with a. Debian LTS Advisory DLA-4681-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Sylvain Beucler July 13, 2026 https://wiki.debian.org/LTS Package : p7zip Version : 16.02+really26.01+dfsg-0+deb11u1 CVE ID : CVE-2026-48092 CVE-2026-48095 CVE-2026-48101 CVE-2026-48102 CVE-2026-48103 CVE-2026-48104 CVE-2026-48111 CVE-2026-48112 Multiple memory corruption vulnerabilities were discovered in p7zip, a now unmaintained fork of 7-Zip, which itself is a file archiver handling multiple formats. To address these security vulnerabilities, whose fixes are unfortunately not isolated, this update again replaces p7zip with a recent 7-Zip (now v26.01), slightly modified to make it reasonably compatible with p7zip. CVE-2026-48092 SquashFS Fragment Offset Overflow CVE-2026-48095 Heap Buffer Write Overflow CVE-2026-48101 UEFI Capsule uninitialized heap memory disclosure CVE-2026-48102 UDF Field OOB Read CVE-2026-48103 WIM SecurityId OOB read CVE-2026-48104 SquashFS BlockToNode uninitialized heap read CVE-2026-48111 UEFI DEPEX OOB Read CVE-2026-48112 Ar SYMDEF OOB Read For Debian 11 bullseye, these problems have been fixed in version 16.02+really26.01+dfsg-0+deb11u1. We recommend that you upgrade your p7zip packages. For the detailed security status of p7zip please refer to its security tracker page at: https://security-tracker.debian.org/tracker/p7zip Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Multiple memory corruption issues in p7ziphave been resolved with this update. Upgrade your packages to ensure security.. p7zip memory issues, file archiving security, Debian LTS security. . LinuxSecurity.com Team

Calendar%202 Jul 13, 2026 Debian LTS
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedorabug fix

Fedora 44 7zip Important Bug Fix Advisory 2026-948b74882b

7-zip 26.02 Some bugs and vulnerabilities were fixed.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-948b74882b 2026-07-03 00:54:50.177281+00:00 -------------------------------------------------------------------------------- Name : 7zip Product : Fedora 44 Version : 26.02 Release : 1.fc44 URL : https://7-zip.org Summary : A file archiver Description : 7-Zip is a file archiver with a high compression ratio. The main features of 7-Zip are: * High compression ratio in 7z format with LZMA and LZMA2 compression * Supported formats: * Packing / unpacking: 7z, XZ, BZIP2, GZIP, TAR, ZIP and WIM * Unpacking only: AR, ARJ, CAB, CHM, CPIO, CramFS, DMG, EXT, FAT, GPT, HFS, IHEX, ISO, LZH, LZMA, MBR, MSI, NSIS, NTFS, QCOW2, RPM, SquashFS, UDF, UEFI, VDI, VHD, VMDK, WIM, XAR and Z. * For ZIP and GZIP formats, 7-Zip provides a compression ratio that is 2-10 % better than the ratio provided by PKZip and WinZip * Strong AES-256 encryption in 7z and ZIP formats * Powerful command line version -------------------------------------------------------------------------------- Update Information: 7-zip 26.02 Some bugs and vulnerabilities were fixed. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2026 Michel Lind - 26.02-1 - Update to version 26.02; Resolves: rhbz#2493347 * Wed Jul 1 2026 Michel Lind - 26.01-2 - Load 7z.so from a fixed libexec path instead of deriving it from argv[0] - Resolves: rhbz#2491337 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2491337 - 7-zip under the root account cannot extract RAR archives https://bugzilla.redhat.com/show_bug.cgi?id=2491337 [ 2 ] Bug #2493347 - 7zip-26.02 is available https://bugzilla.redhat.com/show_bug.cgi?id=2493347 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-948b74882b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . 7-Zip update for Fedora 44 addresses bugs and critical issues improving performance and security. Check details.. 7zip update Fedora 44 security fixes file archiver. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 02, 2026 •Important Fedora
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 43: 7zip Critical Directory Traversal RCE CVE-2025-11001

Various CVE fixes, most importantly CVE-2025-11001 This also backports the Debian patch (PR unfortunately stalled upstream, with no communication from upstream developers) to not echo passwords when dealing with encrypted archives.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-b6422d64f9 2025-11-27 00:46:38.116127+00:00 -------------------------------------------------------------------------------- Name : 7zip Product : Fedora 43 Version : 25.01 Release : 1.fc43 URL : https://7-zip.org Summary : A file archiver Description : 7-Zip is a file archiver with a high compression ratio. The main features of 7-Zip are: * High compression ratio in 7z format with LZMA and LZMA2 compression * Supported formats: * Packing / unpacking: 7z, XZ, BZIP2, GZIP, TAR, ZIP and WIM * Unpacking only: AR, ARJ, CAB, CHM, CPIO, CramFS, DMG, EXT, FAT, GPT, HFS, IHEX, ISO, LZH, LZMA, MBR, MSI, NSIS, NTFS, QCOW2, RPM, SquashFS, UDF, UEFI, VDI, VHD, VMDK, WIM, XAR and Z. * For ZIP and GZIP formats, 7-Zip provides a compression ratio that is 2-10 % better than the ratio provided by PKZip and WinZip * Strong AES-256 encryption in 7z and ZIP formats * Powerful command line version -------------------------------------------------------------------------------- Update Information: Various CVE fixes, most importantly CVE-2025-11001 This also backports the Debian patch (PR unfortunately stalled upstream, with no communication from upstream developers) to not echo passwords when dealing with encrypted archives. -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 26 2025 Michel Lind - 25.01-1 - Update to 25.01 - 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011 - Backport Debian patch to disable echo-ing password; Resolves: rhbz#2412315 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2376517 - 7zip-25.01 is available https://bugzilla.redhat.com/show_bug.cgi?id=2376517 [ 2 ] Bug #2381822 - CVE-2025-53817 7zip: 7-Zip Null pointer array write [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2381822 [ 3 ] Bug #2381825 - CVE-2025-53816 7zip: 7-Zip heap buffer overflow [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2381825 [ 4 ] Bug #2387643 - CVE-2025-55188 7zip: 7-Zip Symbolic Link Extraction Vulnerability [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2387643 [ 5 ] Bug #2412315 - 7z echoes a supplied password https://bugzilla.redhat.com/show_bug.cgi?id=2412315 [ 6 ] Bug #2416899 - CVE-2025-11001 7zip: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2416899 [ 7 ] Bug #2416900 - CVE-2025-11001 7zip: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2416900 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-b6422d64f9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Critical updates for 7zip in Fedora 43 addressing CVE-2025-11001, preventing password echoing in encrypted archives.. Fedora 43 Update, 7zip File Archiver, CVE-2025-11001, Linux Security Updates. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 27, 2025 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorycriticalsoftware update

Fedora 38: FEDORA-2024-8dc64f8f59 Critical: Engrampa Remote Command Risk

update to 1.26.2. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-8dc64f8f59 2024-02-15 01:41:57.775593 -------------------------------------------------------------------------------- Name : engrampa Product : Fedora 38 Version : 1.26.2 Release : 1.fc38 URL : https://mate-desktop.org/ Summary : MATE Desktop file archiver Description : Mate File Archiver is an application for creating and viewing archives files, such as zip, xv, bzip2, cab, rar and other compress formats. -------------------------------------------------------------------------------- Update Information: update to 1.26.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 6 2024 Wolfgang Ulbrich - 1.26.2-1 - update to 1.26.2 * Wed Jan 24 2024 Fedora Release Engineering - 1.26.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering - 1.26.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Jul 19 2023 Fedora Release Engineering - 1.26.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild > > > > > > > c3bab3b (update to 1.26.1) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2262840 - TRIAGE CVE-2023-52138 engrampa: remote command execution via path traversal vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2262840 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-8dc64f8f59' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used bythe Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The recent Fedora upgrade for engrampa version 1.26.2 mitigates vulnerabilities related to remote command execution and improves overall system security.. Fedora Updates, Engrampa Command Risks, Remote Command Execution. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 15, 2024 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":75,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics