Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H900
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H800
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraapplication issue

Fedora 44 libre 4.8.1 Critical Update Details for Real-Time Communication

libre v4.8.1 (2026-05-28) fmt/pl: add pl_strip_html() sys/fs: add getpwuid fallback for fs_gethome tls: remove unused include rsa.h ice: check source address of incoming application packets. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-837d6ef455 2026-06-05 04:25:00.359060+00:00 -------------------------------------------------------------------------------- Name : libre Product : Fedora 44 Version : 4.8.1 Release : 1.fc44 URL : https://github.com/baresip/re Summary : Generic library for real-time communications Description : Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack (RFC 3261), SDP, RTP and RTCP, SRTP and SRTCP (Secure RTP), DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O (poll, epoll, select, kqueue), UDP/TCP/TLS/DTLS transport, JSON parser and Real Time Messaging Protocol (RTMP). -------------------------------------------------------------------------------- Update Information: libre v4.8.1 (2026-05-28) fmt/pl: add pl_strip_html() sys/fs: add getpwuid fallback for fs_gethome tls: remove unused include rsa.h ice: check source address of incoming application packets websock: Fix integer overflow in websock_decode() masked frame check https://github.com/baresip/re/security/advisories/GHSA-hvxv-v2gp-v93h https://github.com/baresip/baresip/issues/3705 -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2026 Robert Scheck 4.8.1-1 - Upgrade to 4.8.1 (#2482756) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2482756 - libre-4.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2482756 -------------------------------------------------------------------------------- This update can be installed with the "dnf" updateprogram. Use su -c 'dnf upgrade --advisory FEDORA-2026-837d6ef455' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Discover the recent Fedora update for libre library addressing security enhancements and function improvements.. Fedora Update, Libre Library, Real-Time Communications, Security Fix, Application Upgrade. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorynetwork securityfedora

Fedora 43 libre Important Buffer Overflow Fix 2026-bfba5a213d

libre v4.8.1 (2026-05-28) fmt/pl: add pl_strip_html() sys/fs: add getpwuid fallback for fs_gethome tls: remove unused include rsa.h ice: check source address of incoming application packets. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-bfba5a213d 2026-06-05 04:07:33.980048+00:00 -------------------------------------------------------------------------------- Name : libre Product : Fedora 43 Version : 4.8.1 Release : 1.fc43 URL : https://github.com/baresip/re Summary : Generic library for real-time communications Description : Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack (RFC 3261), SDP, RTP and RTCP, SRTP and SRTCP (Secure RTP), DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O (poll, epoll, select, kqueue), UDP/TCP/TLS/DTLS transport, JSON parser and Real Time Messaging Protocol (RTMP). -------------------------------------------------------------------------------- Update Information: libre v4.8.1 (2026-05-28) fmt/pl: add pl_strip_html() sys/fs: add getpwuid fallback for fs_gethome tls: remove unused include rsa.h ice: check source address of incoming application packets websock: Fix integer overflow in websock_decode() masked frame check https://github.com/baresip/re/security/advisories/GHSA-hvxv-v2gp-v93h https://github.com/baresip/baresip/issues/3705 -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2026 Robert Scheck 4.8.1-1 - Upgrade to 4.8.1 (#2482756) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2482756 - libre-4.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2482756 -------------------------------------------------------------------------------- This update can be installed with the "dnf" updateprogram. Use su -c 'dnf upgrade --advisory FEDORA-2026-bfba5a213d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update to libre 4.8.1 in Fedora 43 addresses crucial functionality and security aspects for real-time communications.. Fedora security advisory, libre update, real-time communications, buffer overflow fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •Important Fedora
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedorabuffer overflow

Fedora 43 libre 4.8.1 Application Update Security Notification

libre v4.8.1 (2026-05-28) fmt/pl: add pl_strip_html() sys/fs: add getpwuid fallback for fs_gethome tls: remove unused include rsa.h ice: check source address of incoming application packets. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-bfba5a213d 2026-06-05 04:07:33.980048+00:00 -------------------------------------------------------------------------------- Name : libre Product : Fedora 43 Version : 4.8.1 Release : 1.fc43 URL : https://github.com/baresip/re Summary : Generic library for real-time communications Description : Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack (RFC 3261), SDP, RTP and RTCP, SRTP and SRTCP (Secure RTP), DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O (poll, epoll, select, kqueue), UDP/TCP/TLS/DTLS transport, JSON parser and Real Time Messaging Protocol (RTMP). -------------------------------------------------------------------------------- Update Information: libre v4.8.1 (2026-05-28) fmt/pl: add pl_strip_html() sys/fs: add getpwuid fallback for fs_gethome tls: remove unused include rsa.h ice: check source address of incoming application packets websock: Fix integer overflow in websock_decode() masked frame check https://github.com/baresip/re/security/advisories/GHSA-hvxv-v2gp-v93h https://github.com/baresip/baresip/issues/3705 -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2026 Robert Scheck 4.8.1-1 - Upgrade to 4.8.1 (#2482756) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2482756 - libre-4.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2482756 -------------------------------------------------------------------------------- This update can be installed with the "dnf" updateprogram. Use su -c 'dnf upgrade --advisory FEDORA-2026-bfba5a213d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update for libre 4.8.1 in Fedora 43 addresses security enhancements and resolves issues.. fedora libre update application buffer overflow security. . Severity: Informational. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •Informational Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysoftware updateFedora

Fedora 40 Advisory: FEDORA-2024-a63e807450 Critical: Baresip DoS

Baresip v3.10.1 (2024-03-12) Security Release (possible Denial of Service): A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang forever, for details see: #2954 aureceiver: fix mtx_unlock on discard. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-a63e807450 2024-03-23 00:20:56.400411 -------------------------------------------------------------------------------- Name : libre Product : Fedora 40 Version : 3.10.0 Release : 1.fc40 URL : https://github.com/baresip/re Summary : Generic library for real-time communications Description : Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack (RFC 3261), SDP, RTP and RTCP, SRTP and SRTCP (Secure RTP), DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O (poll, epoll, select, kqueue), UDP/TCP/TLS/DTLS transport, JSON parser and Real Time Messaging Protocol (RTMP). -------------------------------------------------------------------------------- Update Information: Baresip v3.10.1 (2024-03-12) Security Release (possible Denial of Service): A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang forever, for details see: #2954 aureceiver: fix mtx_unlock on discard Baresip v3.10.0 (2024-03-06) cmake: use default value for CMAKE_C_EXTENSIONS cmake: add /usr/{local,}/include/re and /usr/{local,}/lib{64,} to FindRE.cmake test/main: fix NULL pointer arg on err ci: add Fedora workflow to avoid e.g. rpath issues mediatrack/start: add audio_decoder_set config: support distribution-specific/default CA paths readme: cosmetic changes ci/fedora: fix dependency config: add default CA path for Android transp,tls: add TLS client verification account,message,ua: secure incoming SIP MESSAGEs aufile: avoid race condition in case of fast destruction aufile: join thread if writefails video: add video_req_keyframe api call: start streams in sipsess_estab_handler webrtc: add av1 codec cmake: fix relative source dir find paths echo: fix re_snprintf pointer ARG cmake: Add include PATH so that GST is found also on Debian 11 call: improve glare handling call: set estdir in call_set_media_direction audio,aur: start audio player after early-video ctrl_dbus: add busctl example to module documentation debian: bump to v3.9.0 release v3.10.0 libre v3.10.0 (2024-03-06) transp: deref qent only if qentp is not set sipsess: fix doxygen comments aufile: fix doxygen comment ci/codeql: bump action v3 misc: text2pcap helpers (RTP/RTCP capturing) ci/mingw: bump upload/download-artifact and cache versions transp,tls: add TLS client verification fmt/text2pcap: cleanup ci/android: cache openssl build ci/misc: fix double push/pull runs fmt/text2pcap: fix coverity return value warning sipsess/listen: improve glare handling conf: add conf_get_i32 debian: bump version v3.9.0 sip/transp: reset tcp timeout on websocket receive release v3.10.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 10 2024 Robert Scheck 3.10.0-1 - Upgrade to 3.10.0 (#2268236) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2268236 - libre-3.10.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2268236 [ 2 ] Bug #2268424 - baresip-3.10.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2268424 [ 3 ] Bug #2269261 - baresip-3.10.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2269261 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-a63e807450' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html Allpackages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora's latest update has released version 3.10.1 of baresip to address a Denial of Service vulnerability, enhancing system security and resilience.. Baresip Denial of Service,Fedora 40 Security Update,Libre 3.10.1,Real-Time Communication Library. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 23, 2024 •Critical Fedora
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics