Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 29 articles for you...
89
security advisoryfedoralocal privilege escalationUbuntu 22.10 Zsh 5.8.1 Major Remote Security Patch 2027-a4bd5e8f49
update to 2.34.7: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA- gr92-w2r5-qw5p https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in- lix-and-nix/77407 https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-65ce3da435 2026-05-14 00:25:16.447772+00:00 -------------------------------------------------------------------------------- Name : nix Product : Fedora 44 Version : 2.34.7 Release : 2.fc44 URL : https://github.com/NixOS/nix Summary : A purely functional package manager Description : Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis of the NixOS Linux distribution, but it can be used equally well under other Unix systems. See the README.fedora.md file for setup instructions. -------------------------------------------------------------------------------- Update Information: update to 2.34.7: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA- gr92-w2r5-qw5p https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in- lix-and-nix/77407 https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368 -------------------------------------------------------------------------------- ChangeLog: * Tue May 5 2026 Jens Petersen - 2.34.7-2 - unbreak the build with meson-1.11 * Tue May 5 2026 Jens Petersen - 2.34.7-1 - update to 2.34.7 (rhbz#2457630) fixes GHSA-vh5x-56v6-4368 - https://discourse.nixos.org/t/security-advisory-local-privilege- escalation-in-lix-and-nix/77407 -https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2457630 - nix-2.34.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2457630 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-65ce3da435' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
May 14, 2026
•Critical
Fedora
219
security advisorysecurity issueimportantMajor Flaw Detected In Ubuntu Pro 22.04 ABC-2023-56234 Configuration Alert
Important: yggdrasil-worker-package-manager security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:11412", "synopsis": "Important: yggdrasil-worker-package-manager security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for yggdrasil-worker-package-manager.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2445356", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "description": ""}], "cves": [{"name": "CVE-2026-25679", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-1286"}], "references": [], "publishedAt": "2026-05-01T12:06:42.394267Z", "rpms": {"Rocky Linux 10": {"nvras": ["yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.src.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.aarch64.rpm","yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.s390x.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. An important security update for yggdrasil-worker-package-manager is available for Rocky Linux 10 addressing a critical parsing issue.. yggdrasil-worker-package-manager,Rocky Linux 10,network security,important updates. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Rocky Linux
219
security advisorysecurity issueimportantAlpine Linux 3.18 RLSA-2027-20789 major CVE-2027-50296 update bundle
Important: yggdrasil-worker-package-manager security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:11412", "synopsis": "Important: yggdrasil-worker-package-manager security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for yggdrasil-worker-package-manager.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2445356", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "description": ""}], "cves": [{"name": "CVE-2026-25679", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-1286"}], "references": [], "publishedAt": "2026-05-01T12:06:42.394267Z", "rpms": {"Rocky Linux 10": {"nvras": ["yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.src.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.aarch64.rpm","yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.s390x.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Secure your Rocky Linux installation with the important yggdrasil-worker-package-manager update addressing critical issues.. yggdrasil-worker-package-manager update, Rocky Linux security update, CVE-2026-25679 issue. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Rocky Linux
219
security advisorysecurity issueimportantRocky Linux 10 RLSA-2026-11416 gandalfgrooper Major IPv6 Handling Concern
Important: yggdrasil-worker-package-manager security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:11412", "synopsis": "Important: yggdrasil-worker-package-manager security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for yggdrasil-worker-package-manager.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2445356", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "description": ""}], "cves": [{"name": "CVE-2026-25679", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-1286"}], "references": [], "publishedAt": "2026-05-01T12:06:42.394267Z", "rpms": {"Rocky Linux 10": {"nvras": ["yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.src.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.aarch64.rpm","yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.s390x.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Rocky Linux security advisory for yggdrasil-worker-package-manager addresses an important package issue. Update recommended.. Rocky Linux,yggdrasil-worker-package-manager,security update. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Rocky Linux
219
security advisorynetwork securitysecurity issueMajor Network Vulnerability Threat in Rocky Linux 10 RLSA-2026-11530
Important: yggdrasil-worker-package-manager security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:11412", "synopsis": "Important: yggdrasil-worker-package-manager security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for yggdrasil-worker-package-manager.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2445356", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "description": ""}], "cves": [{"name": "CVE-2026-25679", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-1286"}], "references": [], "publishedAt": "2026-05-01T12:06:42.394267Z", "rpms": {"Rocky Linux 10": {"nvras": ["yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.src.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.aarch64.rpm","yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.s390x.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for yggdrasil-worker-package-manager on Rocky Linux 10 enhances network safety.. yggdrasil-worker-package-manager. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Rocky Linux
219
security advisorysecurity updateimportantAlpha Linux 11 RLSA-2026-11523 beta-net-utilities Critical Security Update
Important: yggdrasil-worker-package-manager security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:11412", "synopsis": "Important: yggdrasil-worker-package-manager security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for yggdrasil-worker-package-manager.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2445356", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "description": ""}], "cves": [{"name": "CVE-2026-25679", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-1286"}], "references": [], "publishedAt": "2026-05-01T12:06:42.394267Z", "rpms": {"Rocky Linux 10": {"nvras": ["yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.src.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.aarch64.rpm","yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.s390x.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for yggdrasil-worker-package-manager on Rocky Linux 10 addresses critical issues.. yggdrasil-worker-package-manager, rocky-linux-security, package-manager-update,pkg-security-fix. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Rocky Linux
219
security advisorysecurity updateimportantSerious Security Flaw Discovered in Ubuntu Server 22.04 RLSA-2023-12345
Important: yggdrasil-worker-package-manager security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:11412", "synopsis": "Important: yggdrasil-worker-package-manager security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for yggdrasil-worker-package-manager.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2445356", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "description": ""}], "cves": [{"name": "CVE-2026-25679", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-1286"}], "references": [], "publishedAt": "2026-05-01T12:06:42.394267Z", "rpms": {"Rocky Linux 10": {"nvras": ["yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.src.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.aarch64.rpm","yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.s390x.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for yggdrasil-worker-package-manager affecting Rocky Linux 10 addresses a parsing issue with IPv6 hosts.. Rocky Linux yggdrasil-worker-package-manager security update. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Rocky Linux
219
security advisorysecurity updateimportantMajor Vulnerability Found in Rocky Linux 11 RLSA-2026-11416 Zephyr Tool
Important: yggdrasil-worker-package-manager security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:11412", "synopsis": "Important: yggdrasil-worker-package-manager security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for yggdrasil-worker-package-manager.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2445356", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "description": ""}], "cves": [{"name": "CVE-2026-25679", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-1286"}], "references": [], "publishedAt": "2026-05-01T12:06:42.394267Z", "rpms": {"Rocky Linux 10": {"nvras": ["yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.src.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.aarch64.rpm","yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-debuginfo-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.s390x.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.x86_64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.ppc64le.rpm", "yggdrasil-worker-package-manager-0:0.2.3-5.el10_1.aarch64.rpm", "yggdrasil-worker-package-manager-debugsource-0:0.2.3-5.el10_1.s390x.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Yggdrasil-worker-package-manager security update addresses a critical parsing issue in Rocky Linux affecting version 10.. Rocky Linux Yggdrasil Package Manager Security Important. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Rocky Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!