Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e

Calendar White Jul 20, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 libseccomp Critical Security Fixes 2026-9afc6b6bb3

Calendar White Jul 20, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 dnsx Update Addresses Critical DoS Cross-Site Scripting Issues

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 OpenSSH Significant Update for Remote File Misplacement Issue

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 freerdp Important Update Notification 2026-fa672d26a8

Calendar White Jul 20, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 LibTIFF Critical Security Update for Arbitrary Code Execution

Calendar White Jul 20, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 mingw-python-idna Critical DoS Risk Update 2026-9dbf4d0ca8

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mingw-python-pip Critical Path Traversal Risk Advisory

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 1 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorydenial of servicebuffer overflow

openSUSE Leap 16.0 lrzip Important Issues Fixed Advisory 2026-21179-1

An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.. openSUSE security update: security update for lrzip ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21179-1 Rating: important References: * bsc#1248598 * bsc#1258016 * bsc#1258023 Cross-References: * CVE-2025-15570 * CVE-2025-15571 * CVE-2025-9396 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed. Description: This update for lrzip fixes the following issues: Changes in lrzip: - Update to version 0.660: * Do not clean up thread structures in decompression failure conditions, fixing a use-after-free in lzma_decompress_buf() and a NULL pointer dereference in ucompthread() on corrupt/malicious archives (CVE-2025-15570, boo#1258016; CVE-2025-15571, boo#1258023) * Handle -L given without a parameter, fixing a NULL pointer dereference (CVE-2025-9396, boo#1248598) * Add write bounds checking in libzpaq and sanity checks for maliciously encoded headers and oversized allocations * Various STDIO, portability and build fixes (OpenBSD support, non-x86 zpaq, autoconf warnings); drop Doxygen doc build Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-374=1 Package List: - openSUSE Leap 16.0: lrzip-0.660-bp160.1.1 References: * https://www.suse.com/security/cve/CVE-2025-15570.html * https://www.suse.com/security/cve/CVE-2025-15571.html * https://www.suse.com/security/cve/CVE-2025-9396.html . Update for lrzip on openSUSE Leap 16.0 resolves important security issues and includes bug fixes. Act promptly!. opensuse security lrzip updatevulnerabilities patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 01, 2026 •Important OpenSUSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderateupdate

openSUSE Tumbleweed lrzip Moderate Security Advisory 2026-11093-1

An update that solves 2 vulnerabilities can now be installed.. # lrzip-0.660-1.1 on GA media Announcement ID: openSUSE-SU-2026:11093-1 Rating: moderate Cross-References: * CVE-2025-15570 * CVE-2025-9396 Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the lrzip-0.660-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * lrzip 0.660-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-15570.html * https://www.suse.com/security/cve/CVE-2025-9396.html . Fixes for two lrzip vulnerabilities in openSUSE Tumbleweed available for installation. Stay secure with this update.. opensusetumbleweed, lrzipupdate, securitypatch, softwarevulnerability, opensusesecurity. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 25, 2026 •moderate OpenSUSE
Banner 3 1028x280 1708121785 1771599793
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebianimportant

Debian 11 lrzip Important Use After Free Fix DLA-4567-1 CVE-2025-15570

It was discovered that there was a potential use-after-free issue in the lrzip compression/decompression program. For Debian 11 bullseye, this problem has been fixed in version 0.641-1+deb11u2. We recommend that you upgrade your lrzip packages.. Debian LTS Advisory DLA-4567-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Chris Lamb May 06, 2026 https://wiki.debian.org/LTS Package : lrzip Version : 0.641-1+deb11u2 CVE ID : CVE-2025-15570 Debian Bug : 1128069 It was discovered that there was a potential use-after-free issue in the lrzip compression/decompression program. For Debian 11 bullseye, this problem has been fixed in version 0.641-1+deb11u2. We recommend that you upgrade your lrzip packages. For the detailed security status of lrzip please refer to its security tracker page at: https://security-tracker.debian.org/tracker/lrzip Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . A use-after-free issue in lrzip on Debian 11 bullseye has been fixed. Upgrade to prevent potential exploits.. Debian lrzip Use After Free Upgrade Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 06, 2026 •Important Debian LTS
99
Ls Advisories Slackware Esm H240
Price Tag%201security advisoryremote exploitcritical

Slackware 15.0 lrzip Security Update Announcement SSA-2026-047-02

New lrzip packages are available for Slackware 15.0 and -current to fix security issues.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] lrzip (SSA:2026-047-02) New lrzip packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/lrzip-0.660-i586-1_slack15.0.txz: Upgraded. Address multiple potential security issues with crafted or corrupt archives. (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/lrzip-0.660-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/lrzip-0.660-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/lrzip-0.660-i686-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/lrzip-0.660-x86_64-1.txz MD5 signatures: +-------------+ Slackware 15.0 package: 7b7195853cd42008bbd327cc88a07cfa lrzip-0.660-i586-1_slack15.0.txz Slackware x86_64 15.0 package: 50fd7554d133d65497d024504718589f lrzip-0.660-x86_64-1_slack15.0.txz Slackware -current package: c270926a910420338e7d75da75fda273 a/lrzip-0.660-i686-1.txz Slackware x86_64 -current package: e066a5ac143089cbccf361730706a5a9 a/lrzip-0.660-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg lrzip-0.660-i586-1_slack15.0.txz +-----+ . Find out about the critical lrzip security fix for Slackware15.0 addressing multiple potential issues with crafted archives.. lrzip package Slackware upgrade, secure lrzip installation, Slackware 15.0 archive fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 16, 2026 •Critical Slackware
Banner 3 1028x280 1708121785 1771599793
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of servicecritical

Ubuntu 22.04 LTS: USN-5840-1 Critical: lrzip DoS and Memory Corruption

Several security issues were fixed in Long Range ZIP.. =========================================================================Ubuntu Security Notice USN-5840-1 February 02, 2023 lrzip vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: Several security issues were fixed in Long Range ZIP. Software Description: - lrzip: compression program with a very high compression ratio Details: It was discovered that Long Range ZIP incorrectly handled pointers. If a user or an automated system were tricked into opening a certain specially crafted ZIP file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-25467) It was discovered that Long Range ZIP incorrectly handled pointers. If a user or an automated system were tricked into opening a certain specially crafted ZIP file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-27345, CVE-2021-27347) It was discovered that Long Range ZIP incorrectly handled pointers. If a user or an automated system were tricked into opening a certain specially crafted ZIP file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2022-26291) It was discovered that Long Range ZIP incorrectly handled memory allocation, which could lead to a heap memory corruption. An attacker could possibly use this issue to cause denial of service. This issue affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-28044) Updateinstructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: lrzip 0.651-2ubuntu0.22.10.1 Ubuntu 22.04 LTS: lrzip 0.651-2ubuntu0.22.04.1 Ubuntu 20.04 LTS: lrzip 0.631+git180528-1+deb10u1build0.20.04.1 Ubuntu 18.04 LTS: lrzip 0.631-1+deb9u3build0.18.04.1 Ubuntu 16.04 ESM: lrzip 0.621-1ubuntu0.1~esm2 Ubuntu 14.04 ESM: lrzip 0.616-1ubuntu0.1~esm2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5840-1 CVE-2018-5786, CVE-2020-25467, CVE-2021-27345, CVE-2021-27347, CVE-2022-26291, CVE-2022-28044 Package Information: https://launchpad.net/ubuntu/+source/lrzip/0.651-2ubuntu0.22.10.1 https://launchpad.net/ubuntu/+source/lrzip/0.651-2ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/lrzip/0.631+git180528-1+deb10u1build0.20.04.1 https://launchpad.net/ubuntu/+source/lrzip/0.631-1+deb9u3build0.18.04.1 . Essential update required to resolve lrzip vulnerabilities in Ubuntu that may result in service disruptions and memory-related problems.. lrzip Issues, Ubuntu Security Update, Memory Corruption Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 02, 2023 •Critical Ubuntu
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicedebian

Debian: DSA-5146-1 Moderate: Wget Security Vulnerability Alert

Multiple vulnerabilities have been discovered in the lrzip compression program which could result in denial of service or potentially the execution of arbitrary code. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5145-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 24, 2022 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lrzip CVE ID : CVE-2018-5786 CVE-2022-26291 CVE-2022-28044 Multiple vulnerabilities have been discovered in the lrzip compression program which could result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (buster), these problems have been fixed in version 0.631+git180528-1+deb10u1. This update also addresses CVE-2021-27345, CVE-2020-25467 and CVE-2021-27347. For the stable distribution (bullseye), these problems have been fixed in version 0.641-1+deb11u1. We recommend that you upgrade your lrzip packages. For the detailed security status of lrzip please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lrzip Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance your tar packages to resolve various vulnerabilities that may lead to denial of service and unauthorized code execution threats.. lrzip Update, Software Fix, Debian Security Advisory, vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 24, 2022 •Important Debian
Banner 3 1028x280 1708121785 1771599793
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorysoftware updatedebian

Debian 9 Stretch DLA-3005-1 Moderate: Lrzip Memory Corruption Fix

lrzip, a compression program, was found to have a heap memory corruption bug. For Debian 9 stretch, this problem has been fixed in version 0.631-1+deb9u3. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3005-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Stefano Rivera May 13, 2022 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : lrzip Version : 0.631-1+deb9u3 CVE ID : CVE-2022-28044 lrzip, a compression program, was found to have a heap memory corruption bug. For Debian 9 stretch, this problem has been fixed in version 0.631-1+deb9u3. We recommend that you upgrade your lrzip packages. For the detailed security status of lrzip please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lrzip Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Announcement DLA-3006-1 provides information about a security fix for libxml2 vulnerability in Debian 9 Stretch.. Debian LTS, LRZIP Memory Fix, Debian Update, Security Advisory. . LinuxSecurity.com Team

Calendar%202 May 13, 2022 Debian LTS
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydenial of servicedebian

Debian: DLA-2981-1 Moderate: Lrzip DoS Due To Crafted Files

Several security vulnerabilities have been discovered in lrzip, a compression program. Invalid pointers, use-after-free and infinite loops would allow attackers to cause a denial of service or possibly other unspecified impact via a crafted compressed file. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2981-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Sylvain Beucler April 13, 2022 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : lrzip Version : 0.631-1+deb9u2 CVE ID : CVE-2018-5786 CVE-2020-25467 CVE-2021-27345 CVE-2021-27347 CVE-2022-26291 Debian Bug : 888506 990583 Several security vulnerabilities have been discovered in lrzip, a compression program. Invalid pointers, use-after-free and infinite loops would allow attackers to cause a denial of service or possibly other unspecified impact via a crafted compressed file. CVE-2018-5786 There is an infinite loop and application hang in the get_fileinfo function (lrzip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file. CVE-2020-25467 A null pointer dereference was discovered lzo_decompress_buf in stream.c which allows an attacker to cause a denial of service (DOS) via a crafted compressed file. CVE-2021-27345 A null pointer dereference was discovered in ucompthread in stream.c which allows attackers to cause a denial of service (DOS) via a crafted compressed file. CVE-2021-27347 Use after free in lzma_decompress_buf function in stream.c in allows attackers to cause Denial of Service (DoS) via a crafted compressed file. CVE-2022-26291 lrzip was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerabilityallows attackers to cause a Denial of Service (DoS) via a crafted lrz file. For Debian 9 stretch, these problems have been fixed in version 0.631-1+deb9u2. We recommend that you upgrade your lrzip packages. For the detailed security status of lrzip please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lrzip Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Advisory DLA-2982-1 tackles vulnerabilities found in zlib library, introducing patches to mitigate potential exploitation risks.. Debian Security Update, Lrzip Security, Denial of Service, Debian Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 13, 2022 •Important Debian LTS
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics