Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":547,"type":"x","order":1,"pct":78.48,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.88,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.34,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 5 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag 1security advisorysecurity issueimportant

openSUSE Leap 16.0 fluidsynth Important NULL Pointer Issue CVE-2025-56225

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for fluidsynth ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20291-1 Rating: important References: * bsc#1256435 Cross-References: * CVE-2025-56225 CVSS scores: * CVE-2025-56225 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-56225 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for fluidsynth fixes the following issues: - CVE-2025-56225: NULL pointer deference when loading and invalid MIDI file (bsc#1256435). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-329=1 Package List: - openSUSE Leap 16.0: fluidsynth-2.3.5-160000.3.1 fluidsynth-devel-2.3.5-160000.3.1 libfluidsynth3-2.3.5-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2025-56225.html . An important security update for openSUSE fluidsynth fixes a NULL pointer dereference vulnerability. Patch now.. openSUSE, fluidsynth, security patch, IMPORTANT update, software vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 02, 2026 •Important OpenSUSE
202
Ls Advisories Opensuse Esm H240
Price Tag 1security advisorymoderatenull pointer

openSUSE: fluidsynth Moderate NULL Pointer Deference CVE-2025-56225

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for fluidsynth ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0014-1 Rating: moderate References: #1256435 Cross-References: CVE-2025-56225 CVSS scores: CVE-2025-56225 (SUSE): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP7 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for fluidsynth fixes the following issues: - CVE-2025-56225: Fixed NULL pointer deference when loading and invalid MIDI file (boo#1256435). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2026-14=1 Package List: - openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64): fluidsynth-2.3.4-bp157.2.3.1 fluidsynth-devel-2.3.4-bp157.2.3.1 libfluidsynth3-2.3.4-bp157.2.3.1 - openSUSE Backports SLE-15-SP7 (aarch64_ilp32): libfluidsynth3-64bit-2.3.4-bp157.2.3.1 - openSUSE Backports SLE-15-SP7 (x86_64): libfluidsynth3-32bit-2.3.4-bp157.2.3.1 References: https://www.suse.com/security/cve/CVE-2025-56225.html https://bugzilla.suse.com/1256435 . An update for fluidsynth is now available addressing a moderate security issue that leads to a NULL pointer deference.. openSUSE fluidsynth update security moderate. . LinuxSecurity.com Team

Calendar 2 Jan 16, 2026 OpenSUSE
Banner 2 1028x280 1708121730 1 1771599631
202
Ls Advisories Opensuse Esm H240
Price Tag 1security advisorymoderatesecurity issue

openSUSE: alsa-utils Critical Buffer Overflow Flaw 2026:10039-2

An update that solves one vulnerability can now be installed.. # fluidsynth-2.5.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:10038-1 Rating: moderate Cross-References: * CVE-2025-56225 CVSS scores: * CVE-2025-56225 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-56225 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the fluidsynth-2.5.2-2.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * fluidsynth 2.5.2-2.1 * fluidsynth-devel 2.5.2-2.1 * libfluidsynth3 2.5.2-2.1 * libfluidsynth3-32bit 2.5.2-2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-56225.html . A moderate security advisory for openSUSE regarding fluidsynth package, addressing a critical buffer overflow vulnerability.. openSUSE fluidsynth security update CVE-2025-56225 moderate severity. . LinuxSecurity.com Team

Calendar 2 Jan 14, 2026 OpenSUSE
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorydenial of servicefedora

Fedora 43: MuseScore Critical FluidSynth DoS CVE-2025-56226

This update adds a patch to fix CVE-2025-56225, a flaw in the bundled version of fluidsynth.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-afe4be8cb3 2026-01-12 00:55:40.170795+00:00 -------------------------------------------------------------------------------- Name : musescore Product : Fedora 43 Version : 4.6.5 Release : 32.fc43 URL : https://musescore.org/ Summary : Music Composition & Notation Software Description : MuseScore is a free cross platform WYSIWYG music notation program. Some highlights: * WYSIWYG, notes are entered on a "virtual note sheet" * Unlimited number of staves * Up to four voices per staff * Easy and fast note entry with mouse, keyboard or MIDI * Integrated sequencer and FluidSynth software synthesizer * Import and export of MusicXML and Standard MIDI Files (SMF) * Translated in 26 languages -------------------------------------------------------------------------------- Update Information: This update adds a patch to fix CVE-2025-56225, a flaw in the bundled version of fluidsynth. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 9 2026 Jerry James - 4.6.5-32 - Patch for CVE-2025-56225 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2428300 - CVE-2025-56225 musescore: FluidSynth: Denial of Service via invalid MIDI file processing [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2428300 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-afe4be8cb3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with theFedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . A crucial update to Fedora 43 addresses CVE-2025-56225 in musescore; it fixes a potential denial of service risk.. CVE-2025-56225, Fedora 43, Musescore, FluidSynth, Denial of Service. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 12, 2026 •Important Fedora
Banner 2 1028x280 1708121730 1 1771599631
202
Ls Advisories Opensuse Esm H240
Price Tag 1security advisorymoderateupdate

openSUSE Tumbleweed: fluidsynth Moderate Update CVE-2025-68617

An update that solves one vulnerability can now be installed.. # fluidsynth-2.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10004-1 Rating: moderate Cross-References: * CVE-2025-68617 Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the fluidsynth-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * fluidsynth 2.5.2-1.1 * fluidsynth-devel 2.5.2-1.1 * libfluidsynth3 2.5.2-1.1 * libfluidsynth3-32bit 2.5.2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68617.html . An important moderate security update for fluidsynth addressed critical issues in openSUSE Tumbleweed.. fluidsynth, openSUSE Tumbleweed, security update. . LinuxSecurity.com Team

Calendar 2 Jan 04, 2026 OpenSUSE
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoracode execution

Fedora 42: Fluidsynth Important Race Condition CVE-2025-68617

Update to 2.5.2 Fix for CVE-2025-68617. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-202d079b40 2025-12-29 17:23:59.716712+00:00 -------------------------------------------------------------------------------- Name : fluidsynth Product : Fedora 42 Version : 2.5.2 Release : 1.fc42 URL : http://www.fluidsynth.org/ Summary : Real-time software synthesizer Description : FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI events from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a built-in command line shell. It can also play MIDI files (note: FluidSynth was previously called IIWU Synth). -------------------------------------------------------------------------------- Update Information: Update to 2.5.2 Fix for CVE-2025-68617 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 24 2025 Christoph Karl - 2.5.2-1 - Update to 2.5.2 - Fix for CVE-2025-68617 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2424828 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in DLS Unloading Allows Code Execution and Privilege Escalation [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2424828 [ 2 ] Bug #2424831 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in DLS Unloading Allows Code Execution and Privilege Escalation [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2424831 [ 3 ] Bug #2424833 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in DLS Unloading Allows Code Execution and Privilege Escalation [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2424833 [ 4 ] Bug #2424835 - CVE-2025-68617 fluidsynth: FluidSynth: RaceCondition in DLS Unloading Allows Code Execution and Privilege Escalation [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2424835 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-202d079b40' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Upgrade FluidSynth on Fedora 42 to resolve CVE-2025-68617, preventing potential code execution risks.. Fluidsynth Update, Fedora 42, CVE-2025-68617, Code Execution Risk. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 29, 2025 •Important Fedora
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoracode execution

Fedora 43: fluidSynth Race Condition Vulnerability CVE-2025-68617 Exploit

Update to 2.5.2 Fix for CVE-2025-68617. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-16548b7718 2025-12-28 01:06:50.261964+00:00 -------------------------------------------------------------------------------- Name : fluidsynth Product : Fedora 43 Version : 2.5.2 Release : 1.fc43 URL : http://www.fluidsynth.org/ Summary : Real-time software synthesizer Description : FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI events from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a built-in command line shell. It can also play MIDI files (note: FluidSynth was previously called IIWU Synth). -------------------------------------------------------------------------------- Update Information: Update to 2.5.2 Fix for CVE-2025-68617 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 24 2025 Christoph Karl - 2.5.2-1 - Update to 2.5.2 - Fix for CVE-2025-68617 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2424828 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in DLS Unloading Allows Code Execution and Privilege Escalation [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2424828 [ 2 ] Bug #2424831 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in DLS Unloading Allows Code Execution and Privilege Escalation [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2424831 [ 3 ] Bug #2424833 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in DLS Unloading Allows Code Execution and Privilege Escalation [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2424833 [ 4 ] Bug #2424835 - CVE-2025-68617 fluidsynth: FluidSynth: RaceCondition in DLS Unloading Allows Code Execution and Privilege Escalation [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2424835 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-16548b7718' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . FluidSynth update fixes race condition allowing code execution in Fedora 43. Important update for security enhancement.. Fedora fluidSynth runtime software synthesizer update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 28, 2025 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorymoderatefedora

Fedora 42 fluidsynth Moderate Permission Fix 2025-1131df0f70

Fix world writeable /run/lock/fluidsynth Update to 2.4.8. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-1131df0f70 2025-10-30 04:33:58.492895+00:00 -------------------------------------------------------------------------------- Name : fluidsynth Product : Fedora 42 Version : 2.4.8 Release : 2.fc42 URL : http://www.fluidsynth.org/ Summary : Real-time software synthesizer Description : FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI events from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a built-in command line shell. It can also play MIDI files (note: FluidSynth was previously called IIWU Synth). -------------------------------------------------------------------------------- Update Information: Fix world writeable /run/lock/fluidsynth Update to 2.4.8 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2025 Christoph Karl - 2.4.8-2 - Fix world writeable /run/lock/fluidsynth * Thu Oct 16 2025 Christoph Karl - 2.4.8-1 - Update to 2.4.8 - Fix world writeable /run/lock/fluidsynth -------------------------------------------------------------------------------- References: [ 1 ] Bug #2404360 - /run/lock/fluidsynth is world-writable https://bugzilla.redhat.com/show_bug.cgi?id=2404360 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-1131df0f70' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Fix for world writable /run/lock/fluidsynth in Fedora 42 with update to 2.4.8 to enhance system security.. Fedora fluidsynth permission update synthesizer security. . LinuxSecurity.com Team

Calendar 2 Oct 30, 2025 Fedora
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":547,"type":"x","order":1,"pct":78.48,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.88,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.34,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here