Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 3 articles for you...
89
security advisoryfedoracriticalFedora 43 expat Update Critical XML Parser Rebase CVE 2026-89f45c355d
Rebase to version 2.8.1. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-89f45c355d 2026-05-21 01:26:51.960413+00:00 -------------------------------------------------------------------------------- Name : expat Product : Fedora 43 Version : 2.8.1 Release : 1.fc43 URL : https://libexpat.github.io/ Summary : An XML parser library Description : This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parsed. A start tag is an example of the kind of structures for which you may register handlers. -------------------------------------------------------------------------------- Update Information: Rebase to version 2.8.1 -------------------------------------------------------------------------------- ChangeLog: * Tue May 12 2026 Tomas Korbar - 2.8.1-1 - Rebase to version 2.8.1 * Mon Mar 23 2026 Tomas Korbar - 2.7.5-1 - Rebase to 2.7.5 * Mon Feb 9 2026 Miro Hron\u010dok - 2.7.4-1 - Update to 2.7.4 - Enable versioned symbols - Fixes: rhbz#2435633 * Fri Jan 16 2026 Fedora Release Engineering - 2.7.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2448482 - expat-2.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2448482 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-89f45c355d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPGkey. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 43 expat library update addresses critical improvements and fixes for XML parsing. Detailed info inside.. Fedora expat update XML parser security advisory. . Severity: Critical. LinuxSecurity.com Team
May 21, 2026
•Critical
Fedora
89
security advisoryfedoraupdateFedora 44 expat Update 2.8.1 Rebase Notification 2026-4ef690dc30
Rebase to version 2.8.1. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-4ef690dc30 2026-05-15 02:33:10.357482+00:00 -------------------------------------------------------------------------------- Name : expat Product : Fedora 44 Version : 2.8.1 Release : 1.fc44 URL : https://libexpat.github.io/ Summary : An XML parser library Description : This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parsed. A start tag is an example of the kind of structures for which you may register handlers. -------------------------------------------------------------------------------- Update Information: Rebase to version 2.8.1 -------------------------------------------------------------------------------- ChangeLog: * Tue May 12 2026 Tomas Korbar - 2.8.1-1 - Rebase to version 2.8.1 * Mon Mar 23 2026 Tomas Korbar - 2.7.5-1 - Rebase to 2.7.5 * Mon Feb 9 2026 Miro Hron\u010dok - 2.7.4-1 - Update to 2.7.4 - Enable versioned symbols - Fixes: rhbz#2435633 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2448482 - expat-2.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2448482 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4ef690dc30' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 44 updates expat to version 2.8.1, improving XML parsing functionality and performance. Learn more now!. Fedora expat update XML parser. . Severity: Informational. LinuxSecurity.com Team
May 15, 2026
•Informational
Fedora
89
security advisoryupdateFedoraFedora 41: expat 2024-ccc5045ab9 moderate: XML parser update
Rebase to version 2.6.4. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-ccc5045ab9 2024-11-11 02:18:50.551758 -------------------------------------------------------------------------------- Name : expat Product : Fedora 41 Version : 2.6.4 Release : 1.fc41 URL : https://libexpat.github.io/ Summary : An XML parser library Description : This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parsed. A start tag is an example of the kind of structures for which you may register handlers. -------------------------------------------------------------------------------- Update Information: Rebase to version 2.6.4 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 7 2024 Tomas Korbar - 2.6.4-1 - Rebase to version 2.6.4 - Resolves: CVE-2024-50602 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ccc5045ab9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 11, 2024
Fedora
89
security advisorymoderateFedoraUbuntu 22.04: 2023-fad76bcd12 High: gnome-terminal Buffer Overflow
Rebase to version 375. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-8cf76a9ceb 2022-11-23 01:19:40.756740 --------------------------------------------------------------------------------Name : xterm Product : Fedora 35 Version : 375 Release : 1.fc35 URL : https://invisible-island.net/xterm/ Summary : Terminal emulator for the X Window System Description : The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. --------------------------------------------------------------------------------Update Information: Rebase to version 375 --------------------------------------------------------------------------------ChangeLog: * Mon Oct 31 2022 Tomas Korbar - 375-1 - Rebase to version 375 - Resolves: rhbz#2137784 * Tue Oct 11 2022 Tomas Korbar - 374-1 - Rebase to version 374 - Resolves: rhbz#2133585 * Wed Oct 5 2022 Tomas Korbar - 373-1 - Rebase to version 373 - Resolves: rhbz#2129661 * Sat Jul 23 2022 Fedora Release Engineering - 372-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Apr 25 2022 Tomas Korbar - 372-1 - Rebase to version 372 - Resolves: rhbz#2062511 --------------------------------------------------------------------------------References: [ 1 ] Bug #2137784 - xterm-375 is available https://bugzilla.redhat.com/show_bug.cgi?id=2137784 [ 2 ] Bug #2142481 - CVE-2022-45063 xterm: code execution via OSC 50 input sequences [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2142481 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-8cf76a9ceb' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Nov 22, 2022
Fedora
89
security advisorysecurity issuecriticalFedora 35: 2022-1151f65e9a Critical: Postgresql JDBC Security Update
Rebase on upstream version 42.2.25. This rebase fixes CVE-2022-21724.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-1151f65e9a 2022-04-14 16:06:11.136474 --------------------------------------------------------------------------------Name : postgresql-jdbc Product : Fedora 35 Version : 42.2.25 Release : 1.fc35 URL : https://jdbc.postgresql.org/ Summary : JDBC driver for PostgreSQL Description : PostgreSQL is an advanced Object-Relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. --------------------------------------------------------------------------------Update Information: Rebase on upstream version 42.2.25. This rebase fixes CVE-2022-21724. --------------------------------------------------------------------------------ChangeLog: * Wed Apr 6 2022 Zuzana Miklankova - 42.2.25-1 - rebase to version 42.2.25 --------------------------------------------------------------------------------References: [ 1 ] Bug #2050863 - CVE-2022-21724 jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes https://bugzilla.redhat.com/show_bug.cgi?id=2050863 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-1151f65e9a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 14, 2022
•Critical
Fedora
89
security advisorymoderateupdateFedora 35: 2022-9bb794c5f5 Moderate: Libarchive Rebase to Version 3.5.3
Rebase to version 3.5.3. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-9bb794c5f5 2022-02-24 23:06:26.903943 --------------------------------------------------------------------------------Name : libarchive Product : Fedora 35 Version : 3.5.3 Release : 1.fc35 URL : https://www.libarchive.org/ Summary : A library for handling streaming archive formats Description : Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives. --------------------------------------------------------------------------------Update Information: Rebase to version 3.5.3 --------------------------------------------------------------------------------ChangeLog: * Mon Feb 14 2022 Lukas Javorsky - 3.5.3-1 - Rebase to version 3.5.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #1984647 - CVE-2021-36976 libarchive: use-after-free in copy_string() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1984647 [ 2 ] Bug #2024238 - CVE-2021-31566 libarchive: symbolic links incorrectly followed when changing modes, times, ACL and flags of a file while extracting an archive [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2024238 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-9bb794c5f5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 24, 2022
Fedora
89
security advisoryupdateFedoraFedora 35: FEDORA-2022-c4786825dd Critical: Expat 2.4.4 Update
Rebase to version 2.4.4. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-c4786825dd 2022-02-16 01:25:55.828007 --------------------------------------------------------------------------------Name : expat Product : Fedora 35 Version : 2.4.4 Release : 1.fc35 URL : https://libexpat.github.io/ Summary : An XML parser library Description : This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parsed. A start tag is an example of the kind of structures for which you may register handlers. --------------------------------------------------------------------------------Update Information: Rebase to version 2.4.4 --------------------------------------------------------------------------------ChangeLog: * Mon Jan 31 2022 Tomas Korbar - 2.4.4-1 - Rebase to version 2.4.4 - Resolves: rhbz#2048187 * Thu Jan 20 2022 Fedora Release Engineering - 2.4.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Jan 18 2022 Tomas Korbar - 2.4.3-2 - Change specfile according to Sebastian Pippings suggestions --------------------------------------------------------------------------------References: [ 1 ] Bug #2048187 - expat-2.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2048187 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-c4786825dd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used bythe Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 15, 2022
•Critical
Fedora
89
security advisoryupdateFedoraFedora 35: FEDORA-2022-57fd391bf8 moderate: kernel-tools rebase
The 5.16.5 stable kernel rebase contains new features, additional hardware support, and a number of important fixes across the tree.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-57fd391bf8 2022-02-05 01:21:20.736042 --------------------------------------------------------------------------------Name : kernel-tools Product : Fedora 35 Version : 5.16.5 Release : 200.fc35 URL : https://www.kernel.org/ Summary : Assortment of tools for the Linux kernel Description : This package contains the tools/ directory from the kernel source and the supporting documentation. --------------------------------------------------------------------------------Update Information: The 5.16.5 stable kernel rebase contains new features, additional hardware support, and a number of important fixes across the tree. --------------------------------------------------------------------------------ChangeLog: * Tue Feb 1 2022 Justin M. Forbes - 5.16.5-200 - Linux v5.16.5 rebase --------------------------------------------------------------------------------References: [ 1 ] Bug #2048492 - CVE-2022-24122 kernel: use-after-free and privilege escalation in kernel/ucount.c when unprivileged user namespaces are enabled https://bugzilla.redhat.com/show_bug.cgi?id=2048492 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-57fd391bf8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 04, 2022
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!