Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 4 articles for you...
217
security advisoryimportantperlOracle Linux 10 perl-IO-Compress Important File Fix CVE-2026-48962
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-30860 http://linux.oracle.com/errata/ELSA-2026-30860.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: perl-IO-Compress-2.212-512.el10_2.1.noarch.rpm aarch64: perl-IO-Compress-2.212-512.el10_2.1.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/perl-IO-Compress-2.212-512.el10_2.1.src.rpm Related CVEs: CVE-2026-48962 Description of changes: [2.212-512.1] - Fix CVE-2026-48962: remove use of eval in File::GlobMapper - Resolves: RHEL-180415 _______________________________________________ El-errata mailing list
Jul 17, 2026
•Important
Oracle
87
security advisorydebianpath traversalDebian usbmuxd DSA-6125-1 Path Traversal Risk CVE-2025-66004
A path traversal vulnerability was discovered in usbmuxd, a multiplexor daemon used to coordinate USB connections from and to Apple devices (iPhone, iPad, iPod). Exploiting this vulnerability enables an unprivileged user to create and delete files named `*.plist` (and, in some cases, arbitrarily named) as the user. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6125-1
Feb 09, 2026
•Important
Debian
197
security advisorycriticaldebianDebian 11: Advisories for Erlang Resource Leak & Critical Path Issues
Multiple vulnerabilities were fixed in Erlang an concurrent, real-time, distributed functional language. CVE-2025-4748 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4376-1
Nov 24, 2025
•Critical
Debian LTS
91
security advisorygentoosoftware updateGentoo: GLSA 202407-19 Normal: MyApp Remote Code Execution
A vulnerability has been discovered in Stellarium, which can lead to arbitrary file writes.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202407-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Stellarium: Arbitrary File Write Date: July 05, 2024 Bugs: #905300 ID: 202407-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in Stellarium, which can lead to arbitrary file writes. Background ========== Stellarium is a free open source planetarium for your computer. It shows a realistic sky in 3D, just like what you see with the naked eye, binoculars or a telescope. Affected packages ================= Package Vulnerable Unaffected ------------------------ ------------ ------------ sci-astronomy/stellarium < 23.1 > = 23.1 Description =========== A vulnerability has been discovered in Stellarium. Please review the CVE identifier referenced below for details. Impact ====== Attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal. Workaround ========== There is no known workaround at this time. Resolution ========== All Stellarium users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =sci-astronomy/stellarium-23.1" References ========== [ 1 ] CVE-2023-28371 https://nvd.nist.gov/vuln/detail/CVE-2023-28371 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202407-18 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security ofour users' machines is of utmost importance to us. Any security concerns should be addressed to
Jul 05, 2024
Gentoo
89
security advisoryupdatecriticalFedora 39 2024-b458482d48 Critical: Pandoc File Manipulation Threats
Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745 pandoc-cli: new package for pandoc binary. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-b458482d48 2024-03-30 01:08:11.513507 -------------------------------------------------------------------------------- Name : pandoc Product : Fedora 39 Version : 3.1.3 Release : 29.fc39 URL : https://hackage.haskell.org/package/pandoc Summary : Conversion between markup formats Description : Pandoc is a Haskell library for converting from one markup format to another. The formats it can handle include - light markup formats (many variants of Markdown, reStructuredText, AsciiDoc, Org-mode, Muse, Textile, txt2tags) - HTML formats (HTML 4 and 5) - Ebook formats (EPUB v2 and v3, FB2) - Documentation formats (GNU TexInfo, Haddock) - Roff formats (man, ms) - TeX formats (LaTeX, ConTeXt) - Typst - XML formats (DocBook 4 and 5, JATS, TEI Simple, OpenDocument) - Outline formats (OPML) - Bibliography formats (BibTeX, BibLaTeX, CSL JSON, CSL YAML, RIS) - Word processor formats (Docx, RTF, ODT) - Interactive notebook formats (Jupyter notebook ipynb) - Page layout formats (InDesign ICML) - Wiki markup formats (MediaWiki, DokuWiki, TikiWiki, TWiki, Vimwiki, XWiki, ZimWiki, Jira wiki, Creole) - Slide show formats (LaTeX Beamer, PowerPoint, Slidy, reveal.js, Slideous, S5, DZSlides) - Data formats (CSV and TSV tables) - PDF (via external programs such as pdflatex or wkhtmltopdf) Pandoc can convert mathematical content in documents between TeX, MathML, Word equations, roff eqn, typst, and plain text. It includes a powerful system for automatic citations and bibliographies, and it can be customized extensively using templates, filters, and custom readers and writers written in Lua. For the pandoc command-line program, see the 'pandoc-cli' package. For pdf output please also installpandoc-pdf or weasyprint. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745 pandoc-cli: new package for pandoc binary patat: update to 0.11.0.0 and enable tests base64, isocline, toml-parser: now packaged in Fedora -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 5 2024 Jens Petersen - 3.1.3-29 - toml-parser is now packaged in Fedora * Tue Feb 27 2024 Jens Petersen - 3.1.3-28 - pandoc-cli is now packaged in Fedora - move hslua subpackages to pandoc-cli - backport fixes for CVE-2023-35936 and CVE-2023-38745 * Thu Jan 25 2024 Fedora Release Engineering - 3.1.3-27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 3.1.3-26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2220871 - CVE-2023-35936 pandoc: allows attacker to create or overwrite arbitrary files on the system https://bugzilla.redhat.com/show_bug.cgi?id=2220871 [ 2 ] Bug #2225379 - CVE-2023-38745 pandoc: allows attacker to create or overwrite arbitrary files on the system (incomplete fix in upstream for CVE-2023-35936) https://bugzilla.redhat.com/show_bug.cgi?id=2225379 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-b458482d48' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 30, 2024
•Critical
Fedora
89
security advisoryFedoracritical updateFedora 36: FEDORA-2022-37aef44d1e Critical Update for Golang Filetools
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- enable s390x build (rhbz#1971028). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-37aef44d1e 2022-07-30 01:52:05.591856 --------------------------------------------------------------------------------Name : golang-github-mrunalp-fileutils Product : Fedora 36 Version : 0.5.0 Release : 6.fc36 URL : https://github.com/mrunalp/fileutils Summary : Collection of utilities for file manipulation in Go Description : Collection of utilities for file manipulation in Go. --------------------------------------------------------------------------------Update Information: Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- enable s390x build (rhbz#1971028) --------------------------------------------------------------------------------ChangeLog: * Tue Jul 19 2022 Maxwell G - 0.5.0-6 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-37aef44d1e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jul 29, 2022
•Critical
Fedora
89
security advisorycritical issuesoftware updateFedora 28: 2018:ea05fcd378 Critical: vcftools Use After Free Issue
- Update to latest upstream release 0.1.16. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-ea05fcd378 2018-12-30 01:38:50.660979 --------------------------------------------------------------------------------Name : vcftools Product : Fedora 28 Version : 0.1.16 Release : 1.fc28 URL : https://vcftools.github.io/ Summary : VCF file manipulation tools Description : A program package designed for working with VCF files, such as those generated by the 1000 Genomes Project. The aim of VCFtools is to provide methods for working with VCF files: validating, merging, comparing and calculate some basic population genetic statistics. --------------------------------------------------------------------------------Update Information: - Update to latest upstream release 0.1.16 --------------------------------------------------------------------------------ChangeLog: * Sun Aug 5 2018 Adam Huffman - 0.1.16-1 - Update to latest upstream release 0.1.16 * Sat Jul 14 2018 Fedora Release Engineering - 0.1.15-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon Apr 9 2018 Filipe Rosset - 0.1.15-6 - added gcc-c++ as BR --------------------------------------------------------------------------------References: [ 1 ] Bug #1580228 - CVE-2018-11130 vcftools: Use after free in headerp.cpp:header::add_FORMAT_descriptor() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1580228 [ 2 ] Bug #1580225 - CVE-2018-11129 vcftools: Use after free in header.cpp:header::add_INFO_descriptor() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1580225 [ 3 ] Bug #1580222 - CVE-2018-11099 vcftools: Heap-based buffer over-read in header.cpp:header::add_INFO_descriptor() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1580222 --------------------------------------------------------------------------------This update can be installed with the"dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-ea05fcd378' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Dec 30, 2018
•Critical
Fedora
99
security advisoryupdatecriticalSlackware 14.1: SSA:2016-132-01 Critical: Imagemagick Code Execution Threat
New imagemagick packages are available for Slackware 14.0, 14.1, and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] imagemagick (SSA:2016-132-01) New imagemagick packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/imagemagick-6.8.6_10-i486-2_slack14.1.txz: Rebuilt. This update addresses several security issues in ImageMagick, including: Insufficient shell characters filtering allows code execution (CVE-2016-3714) Server Side Request Forgery (CVE-2016-3718) File deletion (CVE-2016-3715) File moving (CVE-2016-3716) Local file read (CVE-2016-3717) To mitigate these issues, the default policy.xml config file has been modified to disable all of the vulnerable coders. For more information, see: https://imagetragick.com https://www.cve.org/CVERecord?id=CVE-2016-3714 https://www.cve.org/CVERecord?id=CVE-2016-3718 https://www.cve.org/CVERecord?id=CVE-2016-3715 https://www.cve.org/CVERecord?id=CVE-2016-3716 https://www.cve.org/CVERecord?id=CVE-2016-3717 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 14.0 package: e78d8825fc122e9411b9bbde341ce8da imagemagick-6.7.7_10-i486-2_slack14.0.txz Slackware x86_64 14.0 package: 20bbb69e3a774f9493b3c87a90692b8f imagemagick-6.7.7_10-x86_64-2_slack14.0.txz Slackware 14.1 package: 26aa6ce379628b85df0818b17d5b855d imagemagick-6.8.6_10-i486-2_slack14.1.txz Slackware x86_64 14.1 package: 3060644c634984224e448ecd03bd0eb1 imagemagick-6.8.6_10-x86_64-2_slack14.1.txz Slackware -current package: 7add4b4c162a9e59ae309ea38430e44e xap/imagemagick-6.9.4_1-i586-1.txz Slackware x86_64 -current package: 73a376cb32a9fbf529340982dfdb9b88 xap/imagemagick-6.9.4_1-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg imagemagick-6.8.6_10-i486-2_slack14.1.txz +-----+ . Enhanced ImageMagick versions for Slackware rectify vital vulnerabilities related to potential code execution and unauthorized file handling risks.. Imagemagick Packages, Slackware Security, Security Updates. . Severity: Critical. LinuxSecurity.com Team
May 11, 2016
•Critical
Slackware
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!