Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Kernel Important Security Fix for net/can 2026-f1fc7772c3

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Nuclei Important Cross-site Scripting DoS Threat 2026-d36ca2dd19

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 perl-Crypt-OpenSSL-X509 Important Fix CVE-2026-58101

Calendar White Jul 21, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 rust-syslog Critical Path Traversal DoS Vuln 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Rust RPKI Critical Path Traversal Issues Fix 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Routinator Important Security Fixes CVE-2026-49232 to 49235

Calendar White Jul 21, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 rust-fern Important Path Traversal Fix Advisory 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Kernel Important Net CAN Issue Fix Advisory 2026-2dd8b600bb

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 btrbk Critical Update Snapshot Tool Fix CVE-2026-62943

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 17 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorybuffer overflowimportant

openSUSE Leap 16.0 Severe Fixes for Mapserver Vulnerabilities 2026-20857-1

An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.. openSUSE security update: security update for mapserver ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20857-1 Rating: important References: * bsc#1260869 * bsc#1266663 Cross-References: * CVE-2026-33721 * CVE-2026-45104 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed. Description: This update for mapserver fixes the following issues: Changes in mapserver: - Update to releasee 8.6.3 * SLD parser: fix out of bounds access on SLD with only a Rule with a ElseFilter but without a symbolizer [CVE-2026-33721, boo#1260869] [CVE-2026-45104, boo#1266663] Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-287=1 Package List: - openSUSE Leap 16.0: libjavamapscript-8.6.3-bp160.1.1 libmapserver2-8.6.3-bp160.1.1 mapserver-8.6.3-bp160.1.1 mapserver-devel-8.6.3-bp160.1.1 perl-mapscript-8.6.3-bp160.1.1 php-mapscriptng-8.6.3-bp160.1.1 python313-mapserver-8.6.3-bp160.1.1 References: * https://www.suse.com/security/cve/CVE-2026-33721.html * https://www.suse.com/security/cve/CVE-2026-45104.html . Update for openSUSE Leap 16.0 mapserver addresses critical bugs and security issues requiring immediate attention.. openSUSE mapserver update security vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 02, 2026 •Important OpenSUSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorydenial of servicebuffer overflow

openSUSE MapServer Important Vulnerabilities Resolved 2026-20857-1

An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.. openSUSE security update: security update for mapserver ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20857-1 Rating: important References: * bsc#1260869 * bsc#1266663 Cross-References: * CVE-2026-33721 * CVE-2026-45104 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed. Description: This update for mapserver fixes the following issues: Changes in mapserver: - Update to releasee 8.6.3 * SLD parser: fix out of bounds access on SLD with only a Rule with a ElseFilter but without a symbolizer [CVE-2026-33721, boo#1260869] [CVE-2026-45104, boo#1266663] Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-287=1 Package List: - openSUSE Leap 16.0: libjavamapscript-8.6.3-bp160.1.1 libmapserver2-8.6.3-bp160.1.1 mapserver-8.6.3-bp160.1.1 mapserver-devel-8.6.3-bp160.1.1 perl-mapscript-8.6.3-bp160.1.1 php-mapscriptng-8.6.3-bp160.1.1 python313-mapserver-8.6.3-bp160.1.1 References: * https://www.suse.com/security/cve/CVE-2026-33721.html * https://www.suse.com/security/cve/CVE-2026-45104.html . An important update for openSUSE Leap 16.0 addresses two critical issues in mapserver with patching instructions.. openSUSE mapserver patch important vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 02, 2026 •Important OpenSUSE
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraupdate

Fedora 43 MapServer Key Reflected XSS Vulnerability Alert 2026-1aa6743d40

Update to mapserver-8.6.3.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-1aa6743d40 2026-05-29 01:26:24.644293+00:00 -------------------------------------------------------------------------------- Name : mapserver Product : Fedora 43 Version : 8.6.3 Release : 1.fc43 URL : https://mapserver.org Summary : Platform for publishing spatial data and interactive mapping applications to the web Description : MapServer is an Open Source platform for publishing spatial data and interactive mapping applications to the web. -------------------------------------------------------------------------------- Update Information: Update to mapserver-8.6.3. -------------------------------------------------------------------------------- ChangeLog: * Fri May 8 2026 Sandro Mani - 8.6.3-1 - Update to 8.6.3 * Wed Apr 22 2026 Sandro Mani - 8.6.2-1 - Update to 8.6.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2477882 - CVE-2026-42030 mapserver: MapServer: Reflected Cross-Site Scripting (XSS) via unsanitized WMS parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2477882 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1aa6743d40' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. Tounsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Critical update for Fedora 43 addressing reflected XSS in mapserver-8.6.3. Upgrade recommended for security.. Fedora mapserver update reflected XSS. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 29, 2026 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorydenial of servicefedora

Fedora 44 mapserver 8.6.1 Critical DoS Advisory FEDORA-2026-b5a2da2c73

Update to mapserver 8.6.1.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-b5a2da2c73 2026-04-25 01:21:36.171079+00:00 -------------------------------------------------------------------------------- Name : mapserver Product : Fedora 44 Version : 8.6.1 Release : 1.fc44 URL : https://mapserver.org Summary : Platform for publishing spatial data and interactive mapping applications to the web Description : MapServer is an Open Source platform for publishing spatial data and interactive mapping applications to the web. -------------------------------------------------------------------------------- Update Information: Update to mapserver 8.6.1. -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 27 2026 Sandro Mani - 8.6.1-1 - Update to 8.6.1 * Sun Jan 25 2026 Elliott Sales de Andrade - 8.6.0-4 - Drop support for i686 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452126 - CVE-2026-33721 mapserver: MapServer: Denial of Service via crafted Styled Layer Descriptor [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452126 [ 2 ] Bug #2452127 - CVE-2026-33721 mapserver: MapServer: Denial of Service via crafted Styled Layer Descriptor [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452127 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b5a2da2c73' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Critical mapserver 8.6.1 update for Fedora 44 addresses Denial of Service. Install advised for system security.. mapserver update, Fedora 44 security, Denial of Service fix, GIS software update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 25, 2026 •Critical Fedora
Banner 2 1028x280 1708121730 1 1771599631
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydenial of servicecritical

Debian 11 DLA-4537-1 Mapserver Critical Heap Buffer Overflow DoS

A heap-buffer-overflow was found in mapserver, a CGI-based framework for Internet map services, which could lead to Denial of Service via crafted SLD (Styled Layer Descriptor) sent by a remote unauthenticated attacker. For Debian 11 bullseye, this problem has been fixed in version 7.6.2-1+deb11u2.. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4537-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Guilhem Moulin April 17, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : mapserver Version : 7.6.2-1+deb11u2 CVE ID : CVE-2026-33721 A heap-buffer-overflow was found in mapserver, a CGI-based framework for Internet map services, which could lead to Denial of Service via crafted SLD (Styled Layer Descriptor) sent by a remote unauthenticated attacker. For Debian 11 bullseye, this problem has been fixed in version 7.6.2-1+deb11u2. We recommend that you upgrade your mapserver packages. For the detailed security status of mapserver please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/mapserver Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . A heap buffer overflow in mapserver on Debian 11 could lead to Denial of Service. Upgrade to version 7.6.2-1+deb11u2.. Denial of Service, security update, Debian mapserver, heap buffer overflow, software security. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 17, 2026 •Critical Debian LTS
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderateupdate

openSUSE 16.0 mapserver Moderate Buffer Overflow Fix 20476-1

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for mapserver ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20476-1 Rating: moderate References: * bsc#1260869 Cross-References: * CVE-2026-33721 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for mapserver fixes the following issues: Changes in mapserver: - Update to release 8.6.1 * msSLDParseRasterSymbolizer: fix potential heap buffer overflow [boo#1260869] [CVE-2026-33721] * GetFeatureInfo with IDENTIFY CLASSAUTO: take into account SYMBOL.ANCHORPOINT * WCS 2.0: fix issue when input raster in a rotated pole lon/lat CRS with lon_0> 180 * UVRaster: fix WMS-Time support on layers with TILEINDEX pointing to a shapefile * WMS GetCapabilities response: use group title and abstract when using wms_layer_group instead of GROUP - Update to release 8.6.0 * Add `CONNECTIONTYPE RASTERLABEL` * Set `MS_LEGEND_KEYSIZE_MAX` to 1000 * Add 4 new `COMPOSITE.COMPOP` blending operations * Allow encryption key files to use paths relative to a mapfile * Allow `use_default_extent_for_getfeature` to be used for OGC Features API and PostGIS * Allow append of additional query parameters for OGCAPI * New MapServer index page * WMS `GetFeatureInfo`: add options to precisely identify points through their symbols * Add `FALLBACK` parameter for the `CLASS` object, to be applied if none of the previously defined classes has been applied Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patchopenSUSE-Leap-16.0-packagehub-190=1 Package List: - openSUSE Leap 16.0: libjavamapscript-8.6.1-bp160.1.1 libmapserver2-8.6.1-bp160.1.1 mapserver-8.6.1-bp160.1.1 mapserver-devel-8.6.1-bp160.1.1 perl-mapscript-8.6.1-bp160.1.1 php-mapscriptng-8.6.1-bp160.1.1 python313-mapserver-8.6.1-bp160.1.1 References: * https://www.suse.com/security/cve/CVE-2026-33721.html . A security update for openSUSE addresses moderate issues in mapserver, including a heap buffer overflow. Learn more.. openSUSE mapserver update heap buffer overflow security. . LinuxSecurity.com Team

Calendar%202 Apr 09, 2026 OpenSUSE
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraDoS

Fedora 42 mapserver Advisory FEDORA-2026-178c482e71 CVE-2026-33721 DoS

Backport fix for CVE-2026-33721.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-178c482e71 2026-04-05 00:58:39.921993+00:00 -------------------------------------------------------------------------------- Name : mapserver Product : Fedora 42 Version : 8.4.1 Release : 3.fc42 URL : http://www.mapserver.org Summary : Platform for publishing spatial data and interactive mapping applications to the web Description : MapServer is an Open Source platform for publishing spatial data and interactive mapping applications to the web. -------------------------------------------------------------------------------- Update Information: Backport fix for CVE-2026-33721. -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 27 2026 Sandro Mani - 8.4.1-3 - Backport fix for CVE-2026-33721 * Wed Oct 1 2025 Sandro Mani - 8.4.1-2 - Sync package description with upstream text -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452127 - CVE-2026-33721 mapserver: MapServer: Denial of Service via crafted Styled Layer Descriptor [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452127 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-178c482e71' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Backport fix for CVE-2026-33721 in Fedora 42 mapserver addresses Denial of Service issue and enhances security.. Fedora 42,mapserver,security advisory,backport fix,CVE-2026-33721. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 05, 2026 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorydenial of servicefedora

Fedora 43 MapServer Important Denial of Service Vuln FEDORA-2026-6d7e0a8b45

Backport fix for CVE-2026-33721.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-6d7e0a8b45 2026-04-05 00:52:10.725708+00:00 -------------------------------------------------------------------------------- Name : mapserver Product : Fedora 43 Version : 8.4.1 Release : 3.fc43 URL : http://www.mapserver.org Summary : Platform for publishing spatial data and interactive mapping applications to the web Description : MapServer is an Open Source platform for publishing spatial data and interactive mapping applications to the web. -------------------------------------------------------------------------------- Update Information: Backport fix for CVE-2026-33721. -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 27 2026 Sandro Mani - 8.4.1-3 - Backport fix for CVE-2026-33721 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452127 - CVE-2026-33721 mapserver: MapServer: Denial of Service via crafted Styled Layer Descriptor [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452127 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6d7e0a8b45' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Backport fix for CVE-2026-33721 in Fedora 43 MapServer addressing Denial of Service risk. Immediate action required.. Fedora MapServer CVE-2026-33721 Update Denial of Service Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 05, 2026 •Important Fedora
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics