Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 9,991 articles for you...
89
security advisorydenial of servicefedoraFedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e
Backport fixes for CVE-2026-59197 and CVE-2026-54058. Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-fc2ded926e 2026-07-21 01:13:08.976757+00:00 -------------------------------------------------------------------------------- Name : python-pillow Product : Fedora 43 Version : 11.3.0 Release : 10.fc43 URL : http://python-pillow.github.io/ Summary : Python image processing library Description : Python image processing library, fork of the Python Imaging Library (PIL) This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk (tk interface), qt (PIL image wrapper for Qt), devel (development) and doc (documentation). -------------------------------------------------------------------------------- Update Information: Backport fixes for CVE-2026-59197 and CVE-2026-54058. Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 19 2026 Sandro Mani - 11.3.0-10 - Backport fixes for CVE-2026-59197 and CVE-2026-54058 * Tue Jul 7 2026 Sandro Mani - 11.3.0-9 - Backport fixes for CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2497649 - CVE-2026-55379 python-pillow: Pillow: Denial of Service via crafted BDF font file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2497649 [ 2 ] Bug #2497660 - CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2497660 [ 3 ] Bug #2497665 - CVE-2026-54060 python-pillow:Pillow: Denial of Service via excessive memory allocation when processing font files [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2497665 [ 4 ] Bug #2497682 - CVE-2026-54059 python-pillow: Pillow: Denial of Service via crafted PCF font data [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2497682 [ 5 ] Bug #2497699 - CVE-2026-55798 python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2497699 [ 6 ] Bug #2501494 - CVE-2026-59197 python-pillow: Pillow: Native heap out-of-bounds write [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2501494 [ 7 ] Bug #2501495 - CVE-2026-54058 python-pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2501495 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fc2ded926e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 20, 2026
•Critical
Fedora
89
security advisoryfedoraheap corruptionFedora 43 libseccomp Critical Security Fixes 2026-9afc6b6bb3
libseccomp 2.6.1 packaging changes Enable Python bindings on Fedora 44+ upstream changes - July 1, 2026 Update the syscall table for Linux v7.1.0-rc4. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9afc6b6bb3 2026-07-21 01:13:08.976748+00:00 -------------------------------------------------------------------------------- Name : libseccomp Product : Fedora 43 Version : 2.6.1 Release : 2.fc43 URL : https://github.com/seccomp/libseccomp Summary : Enhanced seccomp library Description : The libseccomp library provides an easy to use interface to the Linux Kernel's syscall filtering mechanism, seccomp. The libseccomp API allows an application to specify which syscalls, and optionally which syscall arguments, the application is allowed to execute, all of which are enforced by the Linux Kernel. -------------------------------------------------------------------------------- Update Information: libseccomp 2.6.1 packaging changes Enable Python bindings on Fedora 44+ upstream changes - July 1, 2026 Update the syscall table for Linux v7.1.0-rc4 Fix incorrect 64-bit comparison merge that can weaken libseccomp filters. See GitHub Advisory GHSA-4q85-33p6-j5g6 Fix issue where oversized libseccomp filters can trigger a double free. See GitHub Advisory GHSA-46fr-jh49-xvhx Fix issue where oversized libseccomp filters can trigger a heap corruption. See GitHub Advisory GHSA-2hqh-5c36-grrm Fix struct aliasing undefined behavior in the internal libseccomp hash algorithm Fix issue where extraneous bytes were being copied to the destination buffer in seccomp_export_bpf_mem() Fix a bug where merged libseccomp filters failed to merge the notify_used flag, leading to no listener file descriptor being generated Update python shebang to point to python3 Add documentation for seccomp_transaction_start() Since support for s390 has been removed from the upstream Linux kernel, freeze libseccomp's s390 syscall table at Linux v6.18 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 18 2026 Michel Lind - 2.6.1-2 - Only enable Python subpackage on Fedora 44 and up * Sat Jul 18 2026 Michel Lind - 2.6.1-1 - Update to version 2.6.1; Resolves: rhbz#2341880 - Build Python bindings; Resolves: rhbz#2437438 - Enable Packit - Support disabling tests for iterating on spec changes * Thu Jul 16 2026 Fedora Release Engineering - 2.6.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 2.6.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2341880 - libseccomp-2.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2341880 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9afc6b6bb3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 20, 2026
•Important
Fedora
89
security advisorydenial of servicefedoraFedora 43 dnsx Update Addresses Critical DoS Cross-Site Scripting Issues
Update to 1.3.0. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-1c78e384e3 2026-07-21 01:13:08.976738+00:00 -------------------------------------------------------------------------------- Name : dnsx Product : Fedora 43 Version : 1.3.0 Release : 1.fc43 URL : https://github.com/projectdiscovery/dnsx Summary : Dnsx is a fast and multi-purpose DNS toolkit Description : Dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers. -------------------------------------------------------------------------------- Update Information: Update to 1.3.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2026 Mikel Olasagasti Uranga - 1.3.0-1 - Update to 1.3.0 - Closes rhbz#2420897 * Wed Jul 15 2026 Fedora Release Engineering - 1.2.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Mon Feb 2 2026 Maxwell G - 1.2.3-4 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Fri Jan 16 2026 Fedora Release Engineering - 1.2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 1.2.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Dec 17 2025 Mikel Olasagasti Uranga - 1.2.3-1 - Update to 1.2.3 - Closes rhbz#2420897 * Fri Oct 10 2025 Alejandro Sáez - 1.2.2-6 - rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2408156 - CVE-2025-58189 dnsx: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2408156 [ 2 ] Bug #2409626 - CVE-2025-61723 dnsx: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2409626 [ 3 ] Bug #2410577 -CVE-2025-58185 dnsx: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2410577 [ 4 ] Bug #2411475 - CVE-2025-58188 dnsx: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2411475 [ 5 ] Bug #2412680 - CVE-2025-58183 dnsx: Unbounded allocation when parsing GNU sparse map [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2412680 [ 6 ] Bug #2442405 - CVE-2026-1229 dnsx: CIRCL ecc/p384: Incorrect cryptographic calculations via specific inputs [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2442405 [ 7 ] Bug #2456017 - CVE-2026-33817 dnsx: go.etcd.io/bbolt: Denial of Service via index out-of-range error [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2456017 [ 8 ] Bug #2458982 - CVE-2026-5160 dnsx: github.com/yuin/goldmark/renderer/html: Cross-site Scripting due to improper URL validation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2458982 [ 9 ] Bug #2494342 - CVE-2026-27145 dnsx: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494342 [ 10 ] Bug #2495280 - CVE-2026-25681 dnsx: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2495280 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1c78e384e3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Installing the dnsx update for Fedora 43 resolves multiple critical issues including Denial of Service vulnerabilities.. Fedora Update,dnsx Security Advisory,Denial of Service,fedora dnsx. . Severity: Important. LinuxSecurity.com Team
Jul 20, 2026
•Important
Fedora
89
security advisoryfedoraimportantFedora 43 OpenSSH Significant Update for Remote File Misplacement Issue
CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-169fd93089 2026-07-21 01:13:08.976736+00:00 -------------------------------------------------------------------------------- Name : openssh Product : Fedora 43 Version : 10.0p1 Release : 11.fc43 URL : http://www.openssh.com/portable.html Summary : An open source implementation of SSH protocol version 2 Description : SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. -------------------------------------------------------------------------------- Update Information: CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2026 Zoltan Fridrich - 10.0p1-11 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: rhbz#2498027 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: rhbz#2497966 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2497966 - CVE-2026-60002 openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2497966 [ 2 ] Bug #2498027 - CVE-2026-59996 openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498027 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-169fd93089' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 20, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 43 freerdp Important Update Notification 2026-fa672d26a8
Update to 3.30.0 Update to 3.29.0. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-fa672d26a8 2026-07-21 01:13:08.976727+00:00 -------------------------------------------------------------------------------- Name : freerdp Product : Fedora 43 Version : 3.30.0 Release : 1.fc43 URL : http://www.freerdp.com/ Summary : Free implementation of the Remote Desktop Protocol (RDP) Description : The xfreerdp & wlfreerdp Remote Desktop Protocol (RDP) clients from the FreeRDP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox. -------------------------------------------------------------------------------- Update Information: Update to 3.30.0 Update to 3.29.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 16 2026 Ondrej Holy - 2:3.30.0-1 - Update to 3.30.0 Resolves: rhbz#2501274 * Wed Jul 15 2026 Fedora Release Engineering - 2:3.29.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jul 15 2026 Ondrej Holy - 2:3.29.0-1 - Update to 3.29.0 Resolves: rhbz#2499994 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2499994 - freerdp-3.29.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2499994 [ 2 ] Bug #2501274 - freerdp-3.30.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2501274 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fa672d26a8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used bythe Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 20, 2026
•Important
Fedora
89
security advisorydenial of servicefedoraFedora 43 LibTIFF Critical Security Update for Arbitrary Code Execution
updated to 4.7.2, fixes security issues. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-feac063d56 2026-07-21 01:13:08.976725+00:00 -------------------------------------------------------------------------------- Name : libtiff Product : Fedora 43 Version : 4.7.2 Release : 1.fc43 URL : http://www.simplesystems.org/libtiff/ Summary : Library of functions for manipulating TIFF format image files Description : The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files. -------------------------------------------------------------------------------- Update Information: updated to 4.7.2, fixes security issues -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 13 2026 Michal Hlavinka - 4.7.2-1 - updated to 4.7.2 (#2496751) * Fri Jan 16 2026 Fedora Release Engineering - 4.7.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2450771 - CVE-2026-4775 libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2450771 [ 2 ] Bug #2494140 - CVE-2026-12912 libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494140 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2026-feac063d56' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 20, 2026
•Critical
Fedora
89
security advisorydenial of servicefedoraFedora 43 mingw-python-idna Critical DoS Risk Update 2026-9dbf4d0ca8
Update to 3.18.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9dbf4d0ca8 2026-07-21 01:13:08.976679+00:00 -------------------------------------------------------------------------------- Name : mingw-python-idna Product : Fedora 43 Version : 3.18 Release : 1.fc43 URL : https://github.com/kjd/idna Summary : MinGW Windows Python idna Description : MinGW Windows Python idna. -------------------------------------------------------------------------------- Update Information: Update to 3.18. -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 15 2026 Sandro Mani - 3.18-1 - Update to 3.18 * Fri May 15 2026 Sandro Mani - 3.15-1 - Update to 3.15 * Sun Apr 26 2026 Sandro Mani - 3.13-1 - Update to 3.13 * Fri Jan 16 2026 Fedora Release Engineering - 3.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Sun Oct 19 2025 Sandro Mani - 3.11-1 - Update to 3.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2498561 - CVE-2026-45409 mingw-python-idna: idna: Denial of Service via specially crafted long inputs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498561 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9dbf4d0ca8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 20, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 43 mingw-python-pip Critical Path Traversal Risk Advisory
Update to pip-26.1.2.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-71562f8836 2026-07-21 01:13:08.976682+00:00 -------------------------------------------------------------------------------- Name : mingw-python-pip Product : Fedora 43 Version : 26.1.2 Release : 1.fc43 URL : https://pypi.python.org/pypi/pip Summary : MinGW Windows Python pip library Description : MinGW Windows Python pip library. -------------------------------------------------------------------------------- Update Information: Update to pip-26.1.2. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 4 2026 Sandro Mani - 26.1.2-1 - Update to 26.1.2 * Fri May 22 2026 Sandro Mani - 26.1.1-1 - Update to 26.1.1 * Sun Mar 1 2026 Sandro Mani - 26.0.1-1 - Update to 26.0.1 * Fri Jan 16 2026 Fedora Release Engineering - 25.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Dec 3 2025 Sandro Mani - 25.3-1 - Update to 25.3 * Sat Aug 30 2025 Sandro Mani - 25.2-1 - Update to 25.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2494474 - CVE-2026-8643 mingw-python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494474 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-71562f8836' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 20, 2026
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!