Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian DLA-4693-1 Roundcube High Cross-Site Scripting Denial of Service

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 41: Critical Valkey Remote Code Execution Flaw CVE-2025-49844

Valkey 8.0.6 - Released Fri 03 October 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes CVE-2025-49844 A Lua script may lead to remote code execution. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-00e79c49ca 2025-10-13 02:01:36.127262+00:00 -------------------------------------------------------------------------------- Name : valkey Product : Fedora 41 Version : 8.0.6 Release : 1.fc41 URL : https://valkey.io Summary : A persistent key-value database Description : Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. -------------------------------------------------------------------------------- Update Information: Valkey 8.0.6 - Released Fri 03 October 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes CVE-2025-49844 A Lua script may lead to remote codeexecution CVE-2025-46817 A Lua script may lead to integer overflow and potential RCE CVE-2025-46818 A Lua script can be executed in the context of another user CVE-2025-46819 LUA out-of-bound read Bug fixes Fix accounting for dual channel RDB bytes in replication stats (#2616) Minor fix for dual rdb channel connection conn error log (#2658) Fix unsigned difference expression compared to zero (#2101) Valkey 8.0.5 - Released Thu 22 Aug 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix clients remaining blocked when reprocessing commands after certain blocking operations (#2109) Fix a memory corruption issue in the sharded pub/sub unsubscribe logic (#2137) Fix potential memory leak by ensuring module context is freed when aux_save2 callback writes no data (#2132) Fix CLIENT UNBLOCK triggering unexpected errors when used on paused clients (#2117) Fix missing NULL check on SSL_new() when creating outgoing TLS connections (#2140) Fix incorrect casting of ping extension lengths to prevent silent packet drops (#2144) Fix replica failover stall due to outdated config epoch (#2178) Fix incorrect port/tls-port info in CLUSTER SLOTS/CLUSTER NODES after dynamic config change (#2186) Ensure empty error tables in Lua scripts don't crash Valkey (#2229) Fix client tracking memory overhead calculation (#2360) Handle divergent shard-id from nodes.conf and reconcile to the primary node's shard-id (#2174) Fix pre-size hashtables per slot when reading RDB files (#2466) Behavior changes Trigger election immediately during a forced manual failover (CLUSTER FAILOVER FORCE) to avoid delay (#1067) Reset ongoing election state when initiating a new manual failover (#1274) Logging and Tooling Improvements Add support to drop all cluster packets (#1252) Improve log clarity in failover auth denial message (#1341) Security fixes CVE-2025-27151: Check length of AOF file name in valkey-check-aof and reject pathslonger than PATH_MAX (#2146) -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 4 2025 Remi Collet - 8.0.6-1 - update to 8.0.6 fixes CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 and CVE-2025-46819 - update documentation to 8.0.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2402050 - CVE-2025-49844 valkey: Redis Lua Use-After-Free may lead to remote code execution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2402050 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-00e79c49ca' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Upgrade Valkey on Fedora 41 to address critical remote code execution risks immediately.. remote code execution, Fedora security, Valkey update, Lua script vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 13, 2025 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 42: valkey Critical Remote Code Execution Threats 2025-3055a5b407

Valkey 8.0.6 - Released Fri 03 October 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes CVE-2025-49844 A Lua script may lead to remote code execution. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-3055a5b407 2025-10-13 00:40:04.312596+00:00 -------------------------------------------------------------------------------- Name : valkey Product : Fedora 42 Version : 8.0.6 Release : 1.fc42 URL : https://valkey.io Summary : A persistent key-value database Description : Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. -------------------------------------------------------------------------------- Update Information: Valkey 8.0.6 - Released Fri 03 October 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes CVE-2025-49844 A Lua script may lead to remote codeexecution CVE-2025-46817 A Lua script may lead to integer overflow and potential RCE CVE-2025-46818 A Lua script can be executed in the context of another user CVE-2025-46819 LUA out-of-bound read Bug fixes Fix accounting for dual channel RDB bytes in replication stats (#2616) Minor fix for dual rdb channel connection conn error log (#2658) Fix unsigned difference expression compared to zero (#2101) Valkey 8.0.5 - Released Thu 22 Aug 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix clients remaining blocked when reprocessing commands after certain blocking operations (#2109) Fix a memory corruption issue in the sharded pub/sub unsubscribe logic (#2137) Fix potential memory leak by ensuring module context is freed when aux_save2 callback writes no data (#2132) Fix CLIENT UNBLOCK triggering unexpected errors when used on paused clients (#2117) Fix missing NULL check on SSL_new() when creating outgoing TLS connections (#2140) Fix incorrect casting of ping extension lengths to prevent silent packet drops (#2144) Fix replica failover stall due to outdated config epoch (#2178) Fix incorrect port/tls-port info in CLUSTER SLOTS/CLUSTER NODES after dynamic config change (#2186) Ensure empty error tables in Lua scripts don't crash Valkey (#2229) Fix client tracking memory overhead calculation (#2360) Handle divergent shard-id from nodes.conf and reconcile to the primary node's shard-id (#2174) Fix pre-size hashtables per slot when reading RDB files (#2466) Behavior changes Trigger election immediately during a forced manual failover (CLUSTER FAILOVER FORCE) to avoid delay (#1067) Reset ongoing election state when initiating a new manual failover (#1274) Logging and Tooling Improvements Add support to drop all cluster packets (#1252) Improve log clarity in failover auth denial message (#1341) Security fixes CVE-2025-27151: Check length of AOF file name in valkey-check-aof and reject pathslonger than PATH_MAX (#2146) -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 4 2025 Remi Collet - 8.0.6-1 - update to 8.0.6 fixes CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 and CVE-2025-46819 - update documentation to 8.0.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2402051 - CVE-2025-49844 valkey: Redis Lua Use-After-Free may lead to remote code execution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2402051 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-3055a5b407' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Urgent Fedora update for Valkey 8.0.6 addresses security risks from Lua scripts, including potential RCE.. Fedora Valkey Lua Code Execution Remote. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 13, 2025 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianremote execution

Debian: DSA-2324-1 Moderate: Wireshark Remote Execution Risk

The Microsoft Vulnerability Research group discovered that insecure load path handling could lead to execution of arbitrary Lua script code. For the oldstable distribution (lenny), this problem has been fixed in . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2324-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2011 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : wireshark Vulnerability : programming error Problem type : remote Debian-specific: no CVE ID : CVE-2011-3360 The Microsoft Vulnerability Research group discovered that insecure load path handling could lead to execution of arbitrary Lua script code. For the oldstable distribution (lenny), this problem has been fixed in version 1.0.2-3+lenny15. This build will be released shortly. For the stable distribution (squeeze), this problem has been fixed in version 1.2.11-6+squeeze4. For the unstable distribution (sid), this problem has been fixed in version 1.6.2-1. We recommend that you upgrade your wireshark packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Ubuntu Security Notice regarding OpenSSL highlights a severe vulnerability in cryptographic functions and advises users to perform immediate updates.. wireshark security, debian update, wireshark exploit, debian fix. . LinuxSecurity.com Team

Calendar%202 Oct 20, 2011 Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics