Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
89

Fedora 43 polkit CVE-2026-4897 Update on Unsanitized Input Risk

CVE-2026-4897 aisle.com fix of unsanitized getline. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-387a47c82b 2026-04-02 01:05:52.796913+00:00 -------------------------------------------------------------------------------- Name : polkit Product : Fedora 43 Version : 126 Release : 6.fc43.2 URL : https://github.com/polkit-org/polkit Summary : An authorization framework Description : polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. -------------------------------------------------------------------------------- Update Information: CVE-2026-4897 aisle.com fix of unsanitized getline -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 27 2026 Jan Rybar - 126-6.2 - CVE-2026-4897 aisle.com fix of unsanitized getline -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-387a47c82b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Discover the Fedora 43 polkit update regarding unsanitized input, including important risk details and mitigation steps.. Fedora Update, polkit, unsanitized input, security advisory, CVE-2026-4897. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Apr 02, 2026 Important Fedora
89

Fedora 44 Polkit Important Unsanitized Input Fix FEDORA-2026-054c0e22d1

CVE-2026-4897 aisle.com fix of unsanitized getline. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-054c0e22d1 2026-03-31 00:16:35.926178+00:00 -------------------------------------------------------------------------------- Name : polkit Product : Fedora 44 Version : 127 Release : 2.fc44.2 URL : https://github.com/polkit-org/polkit Summary : An authorization framework Description : polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. -------------------------------------------------------------------------------- Update Information: CVE-2026-4897 aisle.com fix of unsanitized getline -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 27 2026 Jan Rybar - 127-2.2 - CVE-2026-4897 aisle.com fix of unsanitized getline -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-054c0e22d1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Polkit update for Fedora 44 addresses CVE-2026-4897 fixing unsanitized getline issues. Ensure your system is secure.. Polkit Fedora Security Fix CVE-2026-4897. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 31, 2026 Important Fedora
89

Fedora 41: FEDORA-2024-c05ef21f1f critical: perl-Module-ScanDeps LPE

1.37 - fix parsing of "use if ..." Fixes errors in PAR::Packer test t/90-rt59710.t - add test for _parse_libs() 1.36. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-c05ef21f1f 2024-11-28 03:19:40.039883+00:00 -------------------------------------------------------------------------------- Name : perl-Module-ScanDeps Product : Fedora 41 Version : 1.37 Release : 1.fc41 URL : https://metacpan.org/dist/Module-ScanDeps Summary : Recursively scan Perl code for dependencies Description : This module scans potential modules used by perl programs and returns a hash reference. Its keys are the module names as they appear in %INC (e.g. Test/More.pm). The values are hash references. -------------------------------------------------------------------------------- Update Information: 1.37 - fix parsing of "use if ..." Fixes errors in PAR::Packer test t/90-rt59710.t - add test for _parse_libs() 1.36 - Fix CVE-2024-10224: Unsanitized input leads to LPE - use three-argument open() - replace 'eval "..."' constructs Note: this version was not released on CPAN because of Coordinated Release Date for CVE - README: add "Source Repository" and "Contact" info switch "Please submit bug reports to ..." to GitHub issues - add preload rule for MooX::HandlesVia cf. https://github.com/rschupp/PAR-Packer/issues/88 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 20 2024 Jitka Plesnikova - 1.37-1 - 1.37 bump (rhbz#2327393); Fix CVE-2024-10224 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2327530 - CVE-2024-10224 perl-Module-ScanDeps: local privilege escalation via unsanitized input [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2327530 -------------------------------------------------------------------------------- This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c05ef21f1f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora has issued a patch for perl-Module-ScanDeps addressing a local privilege escalation vulnerability found in version 1.37.. perl Module ScanDeps, Fedora updates, local privilege escalation, software security, Fedora 41. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 28, 2024 Critical Fedora
87

Debian 3.0 DSA 563-2 Moderate: cyrus-sasl Code Execution Risk

This advisory corrects DSA 563-1 which contained a library that caused other programs to fail unindented.. -------------------------------------------------------------------------- Debian Security Advisory DSA 563-2 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze October 12th, 2004 Debian -- Debian security FAQ -------------------------------------------------------------------------- Package : cyrus-sasl Vulnerability : unsanitised input Problem-Type : local Debian-specific: no CVE ID : CAN-2004-0884 Debian Bug : 275498 This advisory corrects DSA 563-1 which contained a library that caused other programs to fail unindented. For the stable distribution (woody) this problem has been fixed in version 1.5.27-3woody3. For reference the advisory text follows: A vulnerability has been discovered in the Cyrus implementation of the SASL library, the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. The library honors the environment variable SASL_PATH blindly, which allows a local user to link against a malicious library to run arbitrary code with the privileges of a setuid or setgid application. For the unstable distribution (sid) this problem has been fixed in version 1.5.28-6.2 of cyrus-sasl and in version 2.1.19-1.3 of cyrus-sasl2. We recommend that you upgrade your libsasl packages. Upgrade Instructions -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 711 91b4d0c36b104620ec5d67a95908da5a Size/MD5 checksum: 40428 56130ac3dde75943d2f5d594881d4f31 Size/MD5 checksum: 528252 76ea426e2e2da3b8d2e3a43af5488f3b Alpha architecture: Size/MD5 checksum: 76226 7450c31b1634f789234dcd045c72ba1c Size/MD5 checksum: 19100 80dff5ceced2b6902557e2f2753b2c10 Size/MD5 checksum: 14944 1ebe9da02e5fa969591472fc1d7d86a2 Size/MD5 checksum: 172332 d4c236501921a441e5bdbe97f18e3818 Size/MD5 checksum: 13422 43012f7ffc98161bf238d1eccd124c1b ARM architecture: Size/MD5 checksum: 70170 d4cdf775981a8f4bb41f4aec28562862 Size/MD5 checksum: 15038 c34c52e62a3ecd1099daca1146a2c325 Size/MD5 checksum: 12450 8cc784fd0e7a9f6c3fc8c85440f5d0da Size/MD5 checksum: 165914 32d2be1e5f58283b36d65904857c38d7 Size/MD5 checksum: 10850 bba9b1694a4ea2bbbc533a029b589b26 Intel IA-32 architecture: Size/MD5 checksum: 65292 91c7e706fbc6d6bf211960d8e4811eb2 Size/MD5 checksum: 13298 433d2d981444495e6ca5e216543c8943 Size/MD5 checksum: 11754 c97a58448542f29a1067291b52b94780 Size/MD5 checksum: 162896 3b0e73e6f1425d9c5fad18377961d84b Size/MD5 checksum: 11078 ab906f86340a0b5c5f0bb3df8cdd5c9b Intel IA-64 architecture: Size/MD5 checksum: 83792 05302af9b91315c201c9c92cd5fe61ff Size/MD5 checksum: 23252 c86b8f1bc3b75a25e05c5c63738c3e4e Size/MD5 checksum: 19964 75a969bda18dbd3b6d9b8a5a257ed71e Size/MD5 checksum: 180990 d03f4ab68d2e9934561ed1852671df3d Size/MD5 checksum: 14238 133ec7ac7d983036bd0b098856239272 HP Precision architecture: Size/MD5 checksum: 75324 0b802ea7f227d06d0de2b1d6c255d3ba Size/MD5 checksum: 18286 2ee50c0ea3d8d2904d737edbf6f51736 Size/MD5 checksum: 15470ab652ce834c1a1946009402886a940bb Size/MD5 checksum: 171242 d83593d56f74ee92998a804dbb2cf67c Size/MD5 checksum: 11904 9484fe5429cda40dc6083537dd17426b Motorola 680x0 architecture: Size/MD5 checksum: 64738 a4b399d98655e6ee77241227ee86c2e2 Size/MD5 checksum: 13102 1c3e8fa88d42d621420fb9d8e1607573 Size/MD5 checksum: 11804 0608eb94698ee5fc87159f686f34d039 Size/MD5 checksum: 162838 ba3d43e64daec7da2a2eeb47c394db8a Size/MD5 checksum: 10908 8f70e837ed7167d96b5ca9e4fd55c9e9 Big endian MIPS architecture: Size/MD5 checksum: 72916 8c174e6a6e519114662ee701f4200936 Size/MD5 checksum: 15946 b18ecabdb2e35db13beffca809e23487 Size/MD5 checksum: 13346 d1764e156b4ed3c1e5f7eaf2a559bcf0 Size/MD5 checksum: 165812 960d06d45f9740419f9c0b73b593c3bd Size/MD5 checksum: 11318 11682f55a6c99e156d6314f92dd4aa0b Little endian MIPS architecture: Size/MD5 checksum: 72966 c9b7a298d89d3c7d9c7e36ee7f463ad9 Size/MD5 checksum: 16262 fd4ca17e75656bfe0e49686fc746ca54 Size/MD5 checksum: 13292 3bf13fa11ea13520fda7491ec27948df Size/MD5 checksum: 165918 76d312c85fb2393fe6c2d0ffbf6689e3 Size/MD5 checksum: 11280 3e3bda9496b303fc6e1e053b9fb723de PowerPC architecture: Size/MD5 checksum: 70918 6eee1277a09b70eb561aec3eff80111a Size/MD5 checksum: 16076 592393749a7d6475d8cb5cf5d5d901cf Size/MD5 checksum: 13468 83bc3efbfd45d77fdd7a6d93c9417a90 Size/MD5 checksum: 166594 ecb898c16ad7b6350ac0aadb369320d6 Size/MD5 checksum: 11002 402a89f71a142ba2ccb5189211d8a12e IBM S/390 architecture: Size/MD5 checksum: 67026 9b21bb28b3a4c8cee9de0b35da4f7cf0 Size/MD5 checksum: 14410 72ab4e29865eb17710ec25189c5f535d Size/MD5 checksum: 12392 a5a3dc484a9733e0b3e404d2589f8915 Size/MD5 checksum: 165406 3f8dec1387c80bfeaf8d2878f3f8acbc Size/MD5 checksum: 11626 d08b68882e58c36950a998a081a3b5d5 Sun Sparc architecture: Size/MD5 checksum: 68252 52186d78b3ad3fb76c5fe707d77d9b75 Size/MD5 checksum: 14802 d2b0a39fa2e4dac6836ff1cc4b179838 Size/MD5 checksum: 11908 3e58d976ae3867e9e8829b5956f2271a Size/MD5 checksum: 164874 9632f56622cd4cb1f0489b8188da45dd Size/MD5 checksum: 13556 fb4002c8597e495fef0c3ff410442534 These files will probably be moved into the stable distribution on its next update. --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Postfix mail server enhancement addresses vulnerability in input processing for Debian systems. Update to secure against potential threats.. Cyrus-SASL Update, Debian Security Fix, Arbitrary Code Execution, Input Handling, Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 12, 2004 Important Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here