Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 115 articles for you...
89
security advisoryfedoraupdateFedora 44 Lighttpd 1.4.84 Security Advisory FEDORA-2026-1907dd9339
1.4.84 1.4.83 https://wiki.lighttpd.net/Release-1_4_83. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-1907dd9339 2026-06-27 01:10:00.374817+00:00 -------------------------------------------------------------------------------- Name : lighttpd Product : Fedora 44 Version : 1.4.84 Release : 1.fc44 URL : http://www.lighttpd.net/ Summary : Lightning fast webserver with light system requirements Description : lighttpd (pronounced /lighty/) is a secure, fast, compliant, and very flexible web server that has been optimized for high-performance environments. lighttpd uses memory and CPU efficiently and has lower resource use than other popular web servers. Its advanced feature-set (FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and much more) make lighttpd the perfect web server for all systems, small and large. -------------------------------------------------------------------------------- Update Information: 1.4.84 1.4.83 https://wiki.lighttpd.net/Release-1_4_83 -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 18 2026 Gwyn Ciesla - 1.4.84-1 - 1.4.84 * Mon Jun 15 2026 Gwyn Ciesla - 1.4.83-1 - 1.4.83 * Fri Jun 12 2026 Yaakov Selkowitz - 1.4.82-5 - Rebuilt for openssl 4.0 * Thu Apr 16 2026 Tom Callaway - 1.4.82-4 - rebuild * Tue Mar 3 2026 Tom Callaway - 1.4.82-3 - rebuild for lua 5.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2488792 - lighttpd-1.4.83 is available https://bugzilla.redhat.com/show_bug.cgi?id=2488792 [ 2 ] Bug #2490240 - lighttpd-1.4.84 is available https://bugzilla.redhat.com/show_bug.cgi?id=2490240 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1907dd9339'at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 26, 2026
Fedora
89
security advisoryfedoraimportantFedora 43 WebKitGTK Important Performance and Content Fixes 2026-1557aaef26
Add support for half-width fonts. Improve content filter compilation by avoiding file copies. Improve handling of out of disk space conditions when the NetworkProcess tried to write data in caches. Fix painting scrollbars when their width changes.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-1557aaef26 2026-06-20 01:06:42.654447+00:00 -------------------------------------------------------------------------------- Name : webkitgtk Product : Fedora 43 Version : 2.52.4 Release : 1.fc43 URL : https://www.webkitgtk.org/ Summary : GTK web content engine library Description : WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. -------------------------------------------------------------------------------- Update Information: Add support for half-width fonts. Improve content filter compilation by avoiding file copies. Improve handling of out of disk space conditions when the NetworkProcess tried to write data in caches. Fix painting scrollbars when their width changes. Fix playback of certain YouTube videos with low frame rates. Fix webkit://gpu not working in systems where neither libGL.so.1 nor libOpenGL.so.0 are available. Fix several crashes and rendering issues. Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902, CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958, CVE-2026-43658, CVE-2026-43660 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 3 2026 Michael Catanzaro - 2.52.4-1 - Update to 2.52.4 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1557aaef26' at the command line. For more information, refer to thednf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 19, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 44 pie 1.4.4 Dependencies Update Advisory 2026-3d8d946f69
Version 1.4.4 Dependencies Update Composer to 2.9.8 Version 1.4.3 add output check for dnf permission denied thanks to @asgrim and @hackel. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-3d8d946f69 2026-05-23 00:56:16.173276+00:00 -------------------------------------------------------------------------------- Name : pie Product : Fedora 44 Version : 1.4.4 Release : 1.fc44 URL : https://github.com/php/pie Summary : PHP Installer for Extensions Description : PIE (PHP Installer for Extensions). PIE can install an extension to any installed PHP version. A list of extensions that support PIE can be found on https://packagist.org/extensions. Documentation: /usr/share/doc/pie/docs/usage.md -------------------------------------------------------------------------------- Update Information: Version 1.4.4 Dependencies Update Composer to 2.9.8 Version 1.4.3 add output check for dnf permission denied thanks to @asgrim and @hackel don't auto install re2c and bison thanks to @asgrim and @hackel fix two packages found for same ext in pie show etc thanks to @asgrim and @hackel -------------------------------------------------------------------------------- ChangeLog: * Wed May 13 2026 Remi Collet - 1.4.4-1 - update to 1.4.4 * Tue May 12 2026 Remi Collet - 1.4.3-1 - update to 1.4.3 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3d8d946f69' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
May 23, 2026
Fedora
89
security advisoryfedoramozillaFedora 43 Firefox Update 150.0.3 Improve Performance and Compliance
New upstream release (150.0.3). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-4542b2d7aa 2026-05-15 03:06:23.642326+00:00 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 43 Version : 150.0.3 Release : 1.fc43 URL : https://www.mozilla.org/firefox/ Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: New upstream release (150.0.3) -------------------------------------------------------------------------------- ChangeLog: * Tue May 12 2026 Martin Stransky - 150.0.3-1 - Update to latest upstream (150.0.3) * Mon May 11 2026 Martin Stransky - 150.0.2-1 - Update to latest upstream (150.0.2) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4542b2d7aa' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
May 15, 2026
Fedora
89
security advisorydenial of servicefedoraFedora 44 Coturn 4.10.0 Moderate STUN Memory Access Issue 2026-1c11dc3e37
Coturn 4.10.0 Performance Add Linux-only recvmmsg client receive path for DTLS/UDP listener Skip response buffer allocation for STUN indications Remove mutex from per-thread super_memory allocator. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-1c11dc3e37 2026-04-25 01:21:36.173379+00:00 -------------------------------------------------------------------------------- Name : coturn Product : Fedora 44 Version : 4.10.0 Release : 1.fc44 URL : https://github.com/coturn/coturn/ Summary : TURN/STUN & ICE Server Description : The Coturn TURN Server is a VoIP media traffic NAT traversal server and gateway. It can be used as a general-purpose network traffic TURN server/gateway, too. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relaying TURN extension - RFC 6156 - IPv6 extension for TURN - Experimental DTLS support as client protocol. STUN specs: - RFC 3489 - "classic" STUN - RFC 5389 - base "new" STUN specs - RFC 5769 - test vectors for STUN protocol testing - RFC 5780 - NAT behavior discovery support The implementation fully supports the following client-to-TURN-server protocols: - UDP (per RFC 5766) - TCP (per RFC 5766 and RFC 6062) - TLS (per RFC 5766 and RFC 6062); TLS1.0/TLS1.1/TLS1.2 - DTLS (experimental non-standard feature) Supported relay protocols: - UDP (per RFC 5766) - TCP (per RFC 6062) Supported user databases (for user repository, with passwords or keys, if authentication is required): - SQLite - MySQL - PostgreSQL - Redis Redis can also be used for status and statistics storage and notification. Supported TURN authentication mechanisms: - long-term - TURN REST API (a modification of the long-term mechanism, for time-limited secret-based authentication, for WebRTC applications) The load balancing can be implemented with the following tools (either one ora combination of them): - network load-balancer server - DNS-based load balancing - built-in ALTERNATE-SERVER mechanism. -------------------------------------------------------------------------------- Update Information: Coturn 4.10.0 Performance Add Linux-only recvmmsg client receive path for DTLS/UDP listener Skip response buffer allocation for STUN indications Remove mutex from per-thread super_memory allocator Eliminate mutex and reduce copies on auth message dispatch Replace mutex_bps with lock-free atomics for bandwidth tracking Remove unused mutex from ur_map structure WebRTC Auth optimization path Improve worst case scenario - avoid memory allocation Memory issues Fix null pointer dereferences in post_parse() Fix stack buffer overflow in OAuth token decoding Fix uint16_t truncation overflow in stun_get_message_len_str() Initialize variables before use Security CVE-2026-40613 Misaligned Memory Access STUN Attribute Parser General Improvements Disable reason string in response messages to reduce amplification factor Keep only NEV_UDP_SOCKET_PER_THREAD network engine Replace perror with logging Extend seed corpus and add more fuzzing scenarios Update config and Readme files about deprecated TLSv1/1.1 Restore RFC 3489 (old STUN) backward compatibility broken since 4.7.0 Change port identifiers to use uint16_t Fixes: run_tests.sh and no db Improve PostgreSQL.md clarity Add session usage reporting callback to TURN database driver CLI interface is disabled by default -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2026 Robert Scheck - 4.10.0-1 - Upgrade to 4.10.0 (#2458094) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2460213 - CVE-2026-40613 coturn: coturn: Denial of Service due to misaligned memory reads from crafted STUN messages https://bugzilla.redhat.com/show_bug.cgi?id=2460213 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1c11dc3e37' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 25, 2026
•Important
Fedora
100
security advisorymoderateSuSESUSE Linux 16.0 Moderate Issues-Glbc-Hwcaps Flaw SUSE-SU-2026-21216-2
# Security update for patterns-glibc-hwcaps Announcement ID: SUSE-SU-2026:21215-1 Release Date: 2026-04-09T08:56:02Z Rating: moderate References:. # Security update for patterns-glibc-hwcaps Announcement ID: SUSE-SU-2026:21215-1 Release Date: 2026-04-09T08:56:02Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for patterns-glibc-hwcaps fixes the following issues: The pattern is moved from PackageHub to regular SLES. It requires packages for the x86_64 v3 architecture and is automatically pulled in when this architecture is present. These packages are optimized for the x86_64 v3 architecture to increase performance. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-494=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-494=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (x86_64) * patterns-glibc-hwcaps-x86_64_v3-20230201-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * patterns-glibc-hwcaps-x86_64_v3-20230201-160000.1.1 . SUSE's security update for patterns-glibc-hwcaps improves performance and stability across specific architectures.. SUSE Linux, patterns glibc, x86_64, performance optimization, system patching. . LinuxSecurity.com Team
Apr 21, 2026
SuSE
202
security advisorylowperformanceopenSUSE exiv2 Low Performance Vulnerability Advisory 2026-0231-1
An update that solves one vulnerability can now be installed.. # Security update for exiv2-0_26 Announcement ID: SUSE-SU-2026:0231-1 Release Date: 2026-01-22T12:23:05Z Rating: low References: * bsc#1248963 Cross-References: * CVE-2025-55304 CVSS scores: * CVE-2025-55304 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-55304 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2025-55304 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for exiv2-0_26 fixes the following issues: Add reference for previously fixed issue: * CVE-2025-55304: Fixed quadratic performance algorithm in the ICC profile parsing code of `JpegBase::readMetadata` (bsc#1248963). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-231=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-231=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-231=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-231=1 * SUSE LinuxEnterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-231=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-231=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * exiv2-0_26-debugsource-0.26-150400.9.27.1 * libexiv2-26-0.26-150400.9.27.1 * libexiv2-26-debuginfo-0.26-150400.9.27.1 * openSUSE Leap 15.4 (x86_64) * libexiv2-26-32bit-0.26-150400.9.27.1 * libexiv2-26-32bit-debuginfo-0.26-150400.9.27.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libexiv2-26-64bit-debuginfo-0.26-150400.9.27.1 * libexiv2-26-64bit-0.26-150400.9.27.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * exiv2-0_26-debugsource-0.26-150400.9.27.1 * libexiv2-26-0.26-150400.9.27.1 * libexiv2-26-debuginfo-0.26-150400.9.27.1 * openSUSE Leap 15.6 (x86_64) * libexiv2-26-32bit-0.26-150400.9.27.1 * libexiv2-26-32bit-debuginfo-0.26-150400.9.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libexiv2-26-0.26-150400.9.27.1 * libexiv2-26-debuginfo-0.26-150400.9.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libexiv2-26-0.26-150400.9.27.1 * libexiv2-26-debuginfo-0.26-150400.9.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libexiv2-26-0.26-150400.9.27.1 * libexiv2-26-debuginfo-0.26-150400.9.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libexiv2-26-0.26-150400.9.27.1 * libexiv2-26-debuginfo-0.26-150400.9.27.1 ## References: * https://www.suse.com/security/cve/CVE-2025-55304.html * https://bugzilla.suse.com/show_bug.cgi?id=1248963 . Update for exiv2 on openSUSE addresses a low severity issue affecting performance. Immediate action is recommended.. SUSE updates, openSUSE security, exiv2 patch, low severity updates. . Severity: Low. LinuxSecurity.com Team
Jan 22, 2026
•Low
OpenSUSE
89
security advisoryfedoraupdateFedora 43: Essential Nebula Update Addresses Performance and Security Flaws
Upstream update. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-bf07d21f3e 2025-12-18 00:56:48.059022+00:00 -------------------------------------------------------------------------------- Name : nebula Product : Fedora 43 Version : 1.10.0 Release : 2.fc43 URL : https://github.com/slackhq/nebula Summary : A scalable overlay networking tool with a focus on performance, simplicity and security Description : A scalable overlay networking tool with a focus on performance, simplicity and security. -------------------------------------------------------------------------------- Update Information: Upstream update -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 9 2025 Fabio Alessandro Locati - 1.10.0-2 - Fix s390x tests * Tue Dec 9 2025 Fabio Alessandro Locati - 1.10.0-1 - Update to 1.10.0 * Sun Oct 12 2025 Maxwell G - 1.9.7-2 - Rebuild for golang 1.25.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2408329 - CVE-2025-58189 nebula: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2408329 [ 2 ] Bug #2409802 - CVE-2025-61723 nebula: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2409802 [ 3 ] Bug #2410752 - CVE-2025-58185 nebula: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2410752 [ 4 ] Bug #2411648 - CVE-2025-58188 nebula: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2411648 -------------------------------------------------------------------------------- This update can be installed with the"dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-bf07d21f3e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 18, 2025
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!