Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
219
security advisorymoderateMySQLRocky Linux 8 MySQL Security Bulletin RLSA-2026-5581 CVE-2026-21937 Update
Moderate: mysql:8.0 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:5580", "synopsis": "Moderate: mysql:8.0 security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for mecab-ipadic, module.mecab, mecab, module.mecab-ipadic.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.\n\nSecurity Fix(es):\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)\n\n* mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)\n\n* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2431384", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2431384", "description": ""}, {"ticket": "2431385", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2431385", "description": ""}, {"ticket": "2431402", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2431402", "description": ""}, {"ticket": "2431409", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2431409", "description": ""}, {"ticket": "2431413", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2431413","description": ""}, {"ticket": "2431431", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2431431", "description": ""}], "cves": [{"name": "CVE-2026-21936", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21936", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "4.9", "cwe": null}, {"name": "CVE-2026-21937", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21937", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "4.9", "cwe": null}, {"name": "CVE-2026-21941", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21941", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "4.9", "cwe": null}, {"name": "CVE-2026-21948", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21948", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "4.9", "cwe": null}, {"name": "CVE-2026-21964", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21964", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "4.9", "cwe": null}, {"name": "CVE-2026-21968", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21968", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "6.5", "cwe": null}], "references": [], "publishedAt": "2026-03-24T12:01:12.163837Z", "rpms": {"Rocky Linux 8": {"nvras": ["mecab-0:0.996-2.module+el8.10.0+1937+28fbbc83.aarch64.rpm", "mecab-0:0.996-2.module+el8.10.0+2091+db4d14f6.aarch64.rpm", "mecab-0:0.996-2.module+el8.10.0+1937+28fbbc83.src.rpm", "mecab-0:0.996-2.module+el8.10.0+2091+db4d14f6.src.rpm", "mecab-0:0.996-2.module+el8.10.0+1676+9b4b6e24.src.rpm", "mecab-0:0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm","mecab-0:0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm", "mecab-debuginfo-0:0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm", "mecab-debuginfo-0:0.996-2.module+el8.10.0+2091+db4d14f6.aarch64.rpm", "mecab-debuginfo-0:0.996-2.module+el8.10.0+1937+28fbbc83.aarch64.rpm", "mecab-debuginfo-0:0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm", "mecab-debuginfo-0:0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm", "mecab-debugsource-0:0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm", "mecab-debugsource-0:0.996-2.module+el8.10.0+1937+28fbbc83.aarch64.rpm", "mecab-debugsource-0:0.996-2.module+el8.10.0+2091+db4d14f6.aarch64.rpm", "mecab-debugsource-0:0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm", "mecab-debugsource-0:0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm", "mecab-devel-0:0.996-2.module+el8.10.0+2091+db4d14f6.aarch64.rpm", "mecab-devel-0:0.996-2.module+el8.10.0+1937+28fbbc83.aarch64.rpm", "mecab-devel-0:0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm", "mecab-devel-0:0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm", "mecab-ipadic-0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83.aarch64.rpm", "mecab-ipadic-0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6.aarch64.rpm", "mecab-ipadic-0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83.src.rpm", "mecab-ipadic-0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6.src.rpm", "mecab-ipadic-0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6.x86_64.rpm", "mecab-ipadic-0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83.x86_64.rpm", "mecab-ipadic-EUCJP-0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6.aarch64.rpm", "mecab-ipadic-EUCJP-0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83.aarch64.rpm", "mecab-ipadic-EUCJP-0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83.x86_64.rpm", "mecab-ipadic-EUCJP-0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6.x86_64.rpm", "mecab-0:0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm", "mecab-0:0.996-2.module+el8.10.0+1676+9b4b6e24.x86_64.rpm", "mecab-debuginfo-0:0.996-2.module+el8.10.0+1676+9b4b6e24.x86_64.rpm","mecab-debugsource-0:0.996-2.module+el8.10.0+1676+9b4b6e24.x86_64.rpm", "mecab-devel-0:0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm", "mecab-devel-0:0.996-2.module+el8.10.0+1676+9b4b6e24.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Find the latest security advisory updates for MySQL on Rocky Linux, addressing moderate threats from unspecified issues. Stay secure!. MySQL Update, Rocky Linux, Security Advisory, Database Server, Update Notification. . LinuxSecurity.com Team
Mar 24, 2026
Rocky Linux
100
security advisorymoderateupdateSUSE: 2024:2032-1 Moderate: Unspecified Issue in MariaDB Threats
* bsc#1225983 Cross-References: * CVE-2024-21096 . # Security update for mariadb Announcement ID: SUSE-SU-2024:2032-1 Rating: moderate References: * bsc#1225983 Cross-References: * CVE-2024-21096 CVSS scores: * CVE-2024-21096 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * Galera for Ericsson 15 SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for mariadb fixes the following issues: * CVE-2024-21096: Fixed mysqldump unspecified vulnerability (bsc#1225983). * Update to 10.11.8. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2032=1 openSUSE-SLE-15.6-2024-2032=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2032=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2032=1 * Galera for Ericsson 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-ERICSSON-2024-2032=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * mariadb-rpm-macros-10.11.8-150600.4.3.1 * mariadb-tools-10.11.8-150600.4.3.1 * mariadb-tools-debuginfo-10.11.8-150600.4.3.1 * mariadb-bench-debuginfo-10.11.8-150600.4.3.1 * mariadb-test-10.11.8-150600.4.3.1 * mariadb-10.11.8-150600.4.3.1 * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-test-debuginfo-10.11.8-150600.4.3.1 * libmariadbd-devel-10.11.8-150600.4.3.1 *mariadb-client-debuginfo-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 * mariadb-client-10.11.8-150600.4.3.1 * mariadb-bench-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * libmariadbd19-10.11.8-150600.4.3.1 * libmariadbd19-debuginfo-10.11.8-150600.4.3.1 * openSUSE Leap 15.6 (noarch) * mariadb-errormessages-10.11.8-150600.4.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * mariadb-tools-10.11.8-150600.4.3.1 * mariadb-tools-debuginfo-10.11.8-150600.4.3.1 * mariadb-10.11.8-150600.4.3.1 * mariadb-debuginfo-10.11.8-150600.4.3.1 * libmariadbd-devel-10.11.8-150600.4.3.1 * mariadb-client-debuginfo-10.11.8-150600.4.3.1 * mariadb-client-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * libmariadbd19-10.11.8-150600.4.3.1 * libmariadbd19-debuginfo-10.11.8-150600.4.3.1 * Server Applications Module 15-SP6 (noarch) * mariadb-errormessages-10.11.8-150600.4.3.1 * Galera for Ericsson 15 SP6 (x86_64) * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21096.html * https://bugzilla.suse.com/show_bug.cgi?id=1225983 . SUSE-SU-2024:2033-1 moderate update for postgresql tackling an unknown concern. Ensure your environments are updated without delay.. SUSE Security, MariaDB Update, Linux Patch, Security Update, System Security. . LinuxSecurity.com Team
Jun 14, 2024
SuSE
203
security advisorypackage updateunspecified issueMageia: 2023-0143 Critical: Django-Rest-Framework Vulnerability Discovered
Fixes unspecified security issues. References: - https://bugs.mageia.org/show_bug.cgi?id=31763 - https://lists.fedoraproject.org/archives/list/
Apr 15, 2023
•Critical
Mageia
89
security advisoryFedorasecurity fixFedora 29 Update: 2018-6b350bb946 Moderate: MySQL Connector/J Issue
Fixes CVE-2018-3258 Connector/J unspecified vulnerability (CPU October 2018). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-6b350bb946 2018-11-10 03:16:10.682210 --------------------------------------------------------------------------------Name : mysql-connector-java Product : Fedora 29 Version : 8.0.13 Release : 1.fc29 URL : http://dev.mysql.com/downloads/connector/j/ Summary : Official JDBC driver for MySQL Description : MySQL Connector/J is a native Java driver that converts JDBC (Java Database Connectivity) calls into the network protocol used by the MySQL database. It lets developers working with the Java programming language easily build programs and applets that interact with MySQL and connect all corporate data, even in a heterogeneous environment. MySQL Connector/J is a Type IV JDBC driver and has a complete JDBC feature set that supports the capabilities of MySQL. --------------------------------------------------------------------------------Update Information: Fixes CVE-2018-3258 Connector/J unspecified vulnerability (CPU October 2018) --------------------------------------------------------------------------------ChangeLog: * Mon Oct 22 2018 Jakub Janco - 1:8.0.13-1 - Update to 8.0.13 * Tue Aug 7 2018 Jakub Janco - 1:8.0.12-1 - new version --------------------------------------------------------------------------------References: [ 1 ] Bug #1640615 - CVE-2018-3258 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) https://bugzilla.redhat.com/show_bug.cgi?id=1640615 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-6b350bb946' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packagesare signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Nov 10, 2018
Fedora
100
security advisorymoderatecross-site scriptingSUSE: 2008:016 Moderate: Memory Issues And Cross-Site Scripting Fixes
To avoid flooding mailing lists with SUSE Security Announcements for minor To avoid flooding mailing lists with SUSE Security Announcements for minor issues, SUSE Security releases weekly summary reports for the low profile issues, SUSE Security releases weekly summary reports for the low profile vulnerability fixes. The SUSE Security Summary Reports do not list or download URLs like the SUSE Secu [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Summary Report Announcement ID: SUSE-SR:2008:016 Date: Fri, 08 Aug 2008 12:13:00 +0000 Cross-References: CVE-2008-3325, CVE-2008-3326, CVE-2008-3078, CVE-2008-3188, CVE-2008-2641, CVE-2008-0668 Content of this advisory: 1) Solved Security Vulnerabilities: - moodle cross-site scripting and cross-site request forgery - Opera 9.51 fixes memory issues - libxcrypt wrong password encryption - acroread unspecified vulnerability - gnumeric integer overflows 2) Pending Vulnerabilities, Solutions, and Work-Arounds: none 3) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Solved Security Vulnerabilities To avoid flooding mailing lists with SUSE Security Announcements for minor issues, SUSE Security releases weekly summary reports for the low profile vulnerability fixes. The SUSE Security Summary Reports do not list or download URLs like the SUSE Security Announcements that are released for more severe vulnerabilities. Fixed packages for the following incidents are already available on our FTP server and via the YaST Online Update. - moodle cross-site scripting and cross-site request forgery problems An incorrect input validation in moodle could beexploited by remote attackers to inject arbitrary script code or to forge HTTP requests (CVE-2008-3325, CVE-2008-3326). moodle is contained in and was fixed for openSUSE 10.2, 10.3 and 11.0. - Opera 9.51 fixes memory issues Opera did not properly manage memory within functions supporting the CANVAS element. This allowed attackers to read unintitialized memory contents using malicious JavaScript code (CVE-2008-3078). Opera is contained in and was fixed for openSUSE 10.2, 10.3 and 11.0 - libxcrypt wrong password encryption libxcrypt did not encrypt passwords with MD5 when it was selected in its configuration file, instead it always used DES as password encryption algorithm (CVE-2008-3188). Only libxcrypt in openSUSE 11 was affected by the issue and fixed. - acroread unspecified vulnerability An unspecified vulnerability in acroread allowed remote attackers to cause a denial-of-service or possibly execute arbitrary code via unknown vectors. (CVE-2008-2641). acroread was fixed for openSUSE 10.2 and 10.3 - gnumeric integer overflows Due to integer signedness errors it was possible for attackers to execute arbitrary code by the use of specially crafted XLS files (CVE-2008-0668). gnumeric was fixed for openSUSE 10.2 and 10.3 ______________________________________________________________________________ 2) Pending Vulnerabilities, Solutions, and Work-Arounds none listed here ______________________________________________________________________________ 3) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, saveit as text into a file and run the command gpg --verify replacing with the name of the file containing the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and integrity of a package needs to be verified to ensure that it has not been tampered with. The internal RPM package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from
Aug 08, 2008
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!