Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
New upstream release (152.0.6). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-51c2920764 2026-07-16 01:19:18.912230+00:00 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 44 Version : 152.0.6 Release : 1.fc44 URL : https://www.mozilla.org/firefox/ Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: New upstream release (152.0.6) -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 14 2026 Martin Stransky - 152.0.6-1 - Updated to latest upstream (152.0.6) * Fri Jul 10 2026 Martin Stransky - 152.0.4-3 - Added rhbz#2458184 - Drop -fcf-protection flag * Tue Jul 7 2026 Martin Stransky - 152.0.4-2 - Remove Fedora 40/41 tweaks. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-51c2920764' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Upstream bugfix/security release. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-4ec2ec78d6 2026-06-01 01:00:49.844247+00:00 -------------------------------------------------------------------------------- Name : suricata Product : Fedora 43 Version : 7.0.16 Release : 1.fc43 URL : https://suricata.io/ Summary : Intrusion Detection System Description : The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic Protocol Detection (IP, TCP, UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP Matching, and GeoIP identification. -------------------------------------------------------------------------------- Update Information: Upstream bugfix/security release -------------------------------------------------------------------------------- ChangeLog: * Sat May 23 2026 Jason Taylor 7.0.16-1 - Upstream bugfix/security release -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4ec2ec78d6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
This is the March 2026 release of .NET 9. Release Notes: SDK: notes/9.0/9.0.14/9.0.115.md Runtime: . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-624e30e8a7 2026-03-26 02:29:19.225629+00:00 -------------------------------------------------------------------------------- Name : dotnet9.0 Product : Fedora 44 Version : 9.0.115 Release : 1.fc44 URL : https://github.com/dotnet/ Summary : .NET Runtime and SDK Description : .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. -------------------------------------------------------------------------------- Update Information: This is the March 2026 release of .NET 9. Release Notes: SDK: notes/9.0/9.0.14/9.0.115.md Runtime: notes/9.0/9.0.14/9.0.14.md -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 11 2026 Omair Majid - 9.0.115-1 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-624e30e8a7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Added fix for mzbz#1990430 (crashes) Updated to latest upstream (144.0). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-64d57de006 2025-10-18 01:16:41.291847+00:00 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 42 Version : 144.0 Release : 3.fc42 URL : https://www.firefox.com/ Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: Added fix for mzbz#1990430 (crashes) Updated to latest upstream (144.0) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 15 2025 Martin Stransky - 144.0-3 - Add fix for mzbz#1990430 * Mon Oct 13 2025 Martin Stransky - 144.0-2 - Updated to 144.0 (b2) * Thu Oct 9 2025 Martin Stransky - 144.0-1 - Updated to 144.0 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-64d57de006' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
New upstream release (143.0) . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-100ae879e3 2025-09-18 01:30:53.316440+00:00 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 41 Version : 143.0 Release : 1.fc41 URL : https://www.firefox.com/ Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: New upstream release (143.0) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 10 2025 Martin Stransky - 143.0-1 - Updated to 143.0 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-100ae879e3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-23fe8c5b7e 2025-05-02 02:02:18.055399+00:00 -------------------------------------------------------------------------------- Name : thunderbird Product : Fedora 41 Version : 128.10.0 Release : 1.fc41 URL : https://wiki.mozilla.org/Thunderbird:Home Summary : Mozilla Thunderbird mail/newsgroup client Description : Mozilla Thunderbird is a standalone mail and newsgroup client. -------------------------------------------------------------------------------- Update Information: Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/ -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 29 2025 Eike Rathke - 128.10.0-1 - Update to 128.10.0 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-23fe8c5b7e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
5.0.0. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-3f77ed652b 2025-04-06 01:15:25.866233+00:00 -------------------------------------------------------------------------------- Name : upx Product : Fedora 40 Version : 5.0.0 Release : 1.fc40 URL : https://github.com/upx/upx Summary : Ultimate Packer for eXecutables Description : UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks. -------------------------------------------------------------------------------- Update Information: 5.0.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 20 2025 Gwyn Ciesla - 5.0.0-1 - 5.0.0 * Sun Jan 19 2025 Fedora Release Engineering - 4.2.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Dec 18 2024 Gwyn Ciesla - 4.2.4-3 - Provide bundled lzma-sdk * Sat Jul 20 2024 Fedora Release Engineering - 4.2.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2355649 - CVE-2025-2849 upx: UPX p_lx_elf.cpp un_DT_INIT heap-based overflow [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2355649 [ 2 ] Bug #2355650 - CVE-2025-2849 upx: UPX p_lx_elf.cpp un_DT_INIT heap-based overflow [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2355650 [ 3 ] Bug #2355651 - CVE-2025-2849 upx: UPX p_lx_elf.cpp un_DT_INIT heap-based overflow [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2355651 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnfupgrade --advisory FEDORA-2025-3f77ed652b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
31.0.2 release RHBZ#2345769 RHBZ#2345775 RHBZ#2350414. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-dbeb2c60c3 2025-04-03 01:51:21.151647+00:00 -------------------------------------------------------------------------------- Name : nextcloud Product : Fedora 40 Version : 31.0.2 Release : 2.fc40 URL : http://nextcloud.com Summary : Private file sync and share server Description : NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing right on the web. NextCloud is extendable via a simple but powerful API for applications and plugins. -------------------------------------------------------------------------------- Update Information: 31.0.2 release RHBZ#2345769 RHBZ#2345775 RHBZ#2350414 -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 25 2025 Andrew Bauer - 31.0.2-1 - 31.0.2 release RHBZ#2345769 RHBZ#2345775 RHBZ#2350414 * Sun Mar 2 2025 Andrew Bauer - 31.0.0-1 - 31.0.0 release RHBZ#2324262 RHBZ#2336564 * Fri Feb 7 2025 Andrew Bauer - 30.0.5-4 - escape period * Mon Feb 3 2025 Andrew Bauer - 30.0.5-3 - use composer-generators to autogenerate php-composer provides -------------------------------------------------------------------------------- References: [ 1 ] Bug #2345769 - CVE-2025-26791 nextcloud: Mutation XSS in DOMPurify Due to Improper Template Literal Handling [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2345769 [ 2 ] Bug #2345775 - CVE-2025-26791 nextcloud: Mutation XSS in DOMPurify Due to Improper Template Literal Handling [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2345775 [ 3 ] Bug #2350414 - nextcloud-31.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2350414 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-dbeb2c60c3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.