Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
202

openSUSE Tree-sitter Important Denial of Service Issues 20749-1

An update that solves 10 vulnerabilities and has 12 bug fixes can now be installed.. openSUSE security update: security update for tree-sitter ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20749-1 Rating: important References: * bsc#1259205 * bsc#1261839 * bsc#1261871 * bsc#1261894 * bsc#1261954 * bsc#1261963 * bsc#1261968 * bsc#1261974 * bsc#1262007 * bsc#1262032 * bsc#1262036 * bsc#1262040 Cross-References: * CVE-2026-34941 * CVE-2026-34942 * CVE-2026-34943 * CVE-2026-34944 * CVE-2026-34945 * CVE-2026-34946 * CVE-2026-34987 * CVE-2026-34988 * CVE-2026-35186 * CVE-2026-35195 CVSS scores: * CVE-2026-34941 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-34941 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-34942 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34942 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34943 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34943 ( SUSE ): 6 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34944 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-34944 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34945 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-34945 ( SUSE ): 7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-34946 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-34987 ( SUSE ): 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-34987 ( SUSE ): 9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-34988 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-34988 ( SUSE ): 7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-35186 ( SUSE ): 6.4CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-35186 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-35195 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-35195 ( SUSE ): 6 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 10 vulnerabilities and has 12 bug fixes can now be installed. Description: This update for tree-sitter fixes the following issues Security issues: - CVE-2026-34941: wasmtime: crafted input string can lead to an out-of-bound read (bsc#1261871). - CVE-2026-34942: wasmtime: unaligned pointers can lead to a denial of service (bsc#1261894). - CVE-2026-34943: wasmtime: lifting `flags` component value can lead to a denial of service (bsc#1261954). - CVE-2026-34944: wasmtime: out-of-bounds read during WebAssembly compilation can lead to a denial of service (bsc#1261963). - CVE-2026-34945: wasmtime: incorrectly translated table.size could lead to disclosing data (bsc#1262007). - CVE-2026-34946: wasmtime: denial of service due to WebAssembly compilation error (bsc#1261974). - CVE-2026-34987: wasmtime: winch compiler backend may allow a sandbox-escaping memory access (bsc#1262032). - CVE-2026-34988: wasmtime: pooling allocator instances can cause data leakage (bsc#1261968). - CVE-2026-35186: wasmtime: translating the table.grow operator can cause a masked return value (bsc#1262036). - CVE-2026-35195: wasmtime: transcoding strings can lead to an out of bound write or a crash (bsc#1262040). Changes for tree-sitter: - update to 0.26.8: * fix(generate): allow disabling qjs-rt feature from CLI by @WillLillis in #5448 * fix(lib): document invariants that must be upheld for TSInputEdit by @WillLillis in #5452 * fix(cli): correct typo in parse command's help text by @WillLillis in #5465 * perf(cli): misc. improvements by @tree-sitter-ci-bot[bot] in #5476 * Fix wasm loadingof languages w/ multiple reserved word sets by @tree-sitter-ci-bot[bot] in #5477 * generate: avoid panicking when a supertype only has hidden external token children by @tree-sitter-ci-bot[bot] in #5478 Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-743=1 Package List: - openSUSE Leap 16.0: libtree-sitter0_26-0.26.8-160000.1.1 libtree-sitter0_26-x86-64-v3-0.26.8-160000.1.1 tree-sitter-0.26.8-160000.1.1 tree-sitter-devel-0.26.8-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-34941.html * https://www.suse.com/security/cve/CVE-2026-34942.html * https://www.suse.com/security/cve/CVE-2026-34943.html * https://www.suse.com/security/cve/CVE-2026-34944.html * https://www.suse.com/security/cve/CVE-2026-34945.html * https://www.suse.com/security/cve/CVE-2026-34946.html * https://www.suse.com/security/cve/CVE-2026-34987.html * https://www.suse.com/security/cve/CVE-2026-34988.html * https://www.suse.com/security/cve/CVE-2026-35186.html * https://www.suse.com/security/cve/CVE-2026-35195.html . This update resolves 10 vulnerabilities in openSUSE's tree-sitter software, ensuring enhanced security and stability.. openSUSE update tree-sitter vulnerabilities important. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 19, 2026 Important OpenSUSE
89

Fedora 34: FEDORA-2021-1805eacb48 Critical: Wasmtime Security Fixes

- Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-1805eacb48 2021-10-04 01:03:57.321113 --------------------------------------------------------------------------------Name : rust-wasmtime-environ Product : Fedora 34 Version : 0.30.0 Release : 1.fc34 URL : Summary : Standalone environment support for WebAsssembly code in Cranelift Description : Standalone environment support for WebAsssembly code in Cranelift. --------------------------------------------------------------------------------Update Information: - Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to version 0.25.0. The cranelift and wasmtime package updates also include security fixes for CVE-2021-39216, CVE-2021-39218, and CVE-2021-39219. --------------------------------------------------------------------------------ChangeLog: * Thu Sep 23 2021 Olivier Lemasle - 0.30.0-1 - Fixes CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 (rhbz#2006114, rhbz#2006116, rhbz#2006110, rhbz#2006113, rhbz#2006105, rhbz#2006108) - Update to upstream 0.30.0 * Fri Jul 23 2021 Fedora Release Engineering - 0.28.0-2 - Rebuilt forhttps://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-1805eacb48' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The revision to rust-wasmtime-environ introduces critical security enhancements alongside improved support for WebAssembly via new crate versions.. WebAssembly Support,Rust Crates,Fedora Updates,Cranelift Security,Standalone Environment. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 03, 2021 Critical Fedora
89

Fedora 34: FEDORA-2021-1805eacb48 Moderate: Cranelift Security Issues

- Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-1805eacb48 2021-10-04 01:03:57.321113 --------------------------------------------------------------------------------Name : rust-wasmtime-types Product : Fedora 34 Version : 0.30.0 Release : 2.fc34 URL : Summary : WebAssembly type definitions for Cranelift Description : WebAssembly type definitions for Cranelift. --------------------------------------------------------------------------------Update Information: - Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to version 0.25.0. The cranelift and wasmtime package updates also include security fixes for CVE-2021-39216, CVE-2021-39218, and CVE-2021-39219. --------------------------------------------------------------------------------ChangeLog: --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-1805eacb48' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keysused by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Fedora 34's latest update brings crucial enhancements to various crates alongside vital security patches addressing recent WebAssembly developments.. Fedora 34 Update, Cranelift Fixes, Wasmtime Types, Rust Crates Update. . LinuxSecurity.com Team

Calendar%202 Oct 03, 2021 Fedora
89

Fedora 35 Update: Security Advisory for Rust-Wasmtime-Types

- Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-68713440cb 2021-09-30 00:51:55.645575 --------------------------------------------------------------------------------Name : rust-wasmtime-types Product : Fedora 35 Version : 0.30.0 Release : 2.fc35 URL : Summary : WebAssembly type definitions for Cranelift Description : WebAssembly type definitions for Cranelift. --------------------------------------------------------------------------------Update Information: - Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to version 0.25.0. The cranelift and wasmtime package updates also include security fixes for CVE-2021-39216, CVE-2021-39218, and CVE-2021-39219. --------------------------------------------------------------------------------ChangeLog: --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-68713440cb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keysused by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The Ubuntu Package Announcement concerns rust-syn and cargo features for enhanced stability and efficiency upgrades.. Rust Wasmtime Types,Fedora 35 Update,Cranelift Crates. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 29, 2021 Important Fedora
89

Fedora 35: 2021-68713440cb Critical: Wasmtime Environment Fixes

- Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-68713440cb 2021-09-30 00:51:55.645575 --------------------------------------------------------------------------------Name : rust-wasmtime-environ Product : Fedora 35 Version : 0.30.0 Release : 1.fc35 URL : Summary : Standalone environment support for WebAsssembly code in Cranelift Description : Standalone environment support for WebAsssembly code in Cranelift. --------------------------------------------------------------------------------Update Information: - Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to version 0.25.0. The cranelift and wasmtime package updates also include security fixes for CVE-2021-39216, CVE-2021-39218, and CVE-2021-39219. --------------------------------------------------------------------------------ChangeLog: * Thu Sep 23 2021 Olivier Lemasle - 0.30.0-1 - Fixes CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 (rhbz#2006114, rhbz#2006116, rhbz#2006110, rhbz#2006113, rhbz#2006105, rhbz#2006108) - Update to upstream 0.30.0 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnfupgrade --advisory FEDORA-2021-68713440cb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . This rust-wasmtime-environ update features various crate upgrades and vital security fixes for critical issues.. rust-wasmtime, crate updates, Fedora security fixes. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 29, 2021 Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200