Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 418
Alerts This Week
Warning Icon 1 418

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Chromium Important Buffer Overflow Input Issues 2026-acf674bc6a

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-django5 Low Risk Data Exposure Bugs 2026-fbb9501b22

Calendar White Jul 24, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 43 dotnet10.0 Critical CVE Fixes Update 2026-d9817786d6

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 mupdf Critical Out-of-Bounds Read Fix Advisory 2026-8870088088

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 wget1 Critical Memory Corruption DoS Fix 2026-7bbb52b49d

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mbedtls 3.6.7 Important Fixes for Multiple CVEs

Calendar White Jul 24, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 sssd Critical Use-After-Free and GPO Cache Issues 2026-9ab663dcd4

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 Chromium Significant Buffer Overflow and Input Validation Issues

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Skopeo Critical DoS Fix CVE-2026-27145 Advisory 2026-9b2e56edf5

Calendar White Jul 24, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorymoderatedebian

Debian 10 Buster DLA-3533-1 Moderate: LXC User-NIC Access Issue

LXC is a Linux Containers userspace tool set. Maher Azzouzi reported that the lxc-user-nic command, included in LXC, allowed unprivileged users to infer whether any file exists, even in protected directory trees. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3533-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Santiago Ruano Rincón August 17, 2023 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : lxc Version : 1:3.1.0+really3.0.3-8+deb10u1 CVE ID : CVE-2022-47952 LXC is a Linux Containers userspace tool set. Maher Azzouzi reported that the lxc-user-nic command, included in LXC, allowed unprivileged users to infer whether any file exists, even in protected directory trees. For Debian 10 buster, this problem has been fixed in version 1:3.1.0+really3.0.3-8+deb10u1. We recommend that you upgrade your lxc packages. For the detailed security status of lxc please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lxc Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance your lxc software in Debian LTS as per Advisory DLA-3533-1 to resolve file permission problems identified by Maher Azzouzi.. Debian Lts Advisory, Lxc User-Nic Exploit, File Access Command. . LinuxSecurity.com Team

Calendar%202 Aug 21, 2023 Debian LTS
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed Hatcritical

Red Hat RHSA-2003:095-02 Critical: Samba Access Exploit

Updated samba packages are now available to fix security vulnerabilities found during a code audit.. ` --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: New samba packages fix security vulnerabilities Advisory ID: RHSA-2003:095-02 Issue date: 2003-03-17 Updated on: 2003-03-25 Product: Red Hat Linux Keywords: smb Cross references: Obsoletes: RHSA-2002:266 CVE Names: CAN-2003-0085 CAN-2003-0086 --------------------------------------------------------------------- 1. Topic: Updated samba packages are now available to fix security vulnerabilities found during a code audit. [Updated 24 March 2003] Updated samba packages for Red Hat Linux 6.2, 7, and 7.1 are now included. These packages contain Samba version 2.0.10 with a backported security fix. 2. Relevant releases/architectures: Red Hat Linux 6.2 - i386 Red Hat Linux 7.0 - i386 Red Hat Linux 7.1 - i386 Red Hat Linux 7.2 - i386, ia64 Red Hat Linux 7.3 - i386 Red Hat Linux 8.0 - i386 3. Problem description: Samba is a suite of utilities which provides file and printer sharing services to SMB/CIFS clients. Sebastian Krahmer discovered a security vulnerability present in unpatched versions of Samba prior to 2.2.8. An anonymous user could exploit the vulnerability to gain root access on the target machine. Additionally, a race condition was discovered which could allow an attacker to overwrite critical system files. All users of Samba are advised to update to the erratum packages which contain patches to correct these vulnerabilities. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included inthe list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. RPMs required: Red Hat Linux 6.2: SRPMS: i386: Red Hat Linux 7.0: SRPMS: i386: Red Hat Linux 7.1: SRPMS: i386: Red Hat Linux 7.2: SRPMS: i386: ia64: Red Hat Linux 7.3: SRPMS: i386: Red Hat Linux 8.0: SRPMS: i386: 6. Verification: MD5 sum Package Name -------------------------------------------------------------------------- 4ab086c2b7b1b36842a3fe679da8a62c 6.2/en/os/SRPMS/samba-2.0.10-1.62.src.rpm e2f1c0eb7756eaaabb061456a3b9976b 6.2/en/os/i386/samba-2.0.10-1.62.i386.rpm 286d2586c20036c4c8c68448543c02c6 6.2/en/os/i386/samba-client-2.0.10-1.62.i386.rpm 0c59d519c586504f07de0a3084a90a3b 6.2/en/os/i386/samba-common-2.0.10-1.62.i386.rpm 901979ccb2ab895f2e04f01032f87a1c 7.0/en/os/SRPMS/samba-2.0.10-1.7.0.src.rpm 0e3c942b9babe1628f894e5d7d3b6f31 7.0/en/os/i386/samba-2.0.10-1.7.0.i386.rpm 8c14ad19b31ef0f40b076c440a5295ce 7.0/en/os/i386/samba-client-2.0.10-1.7.0.i386.rpm d0a56d30c125bbc253fd0cb368176f93 7.0/en/os/i386/samba-common-2.0.10-1.7.0.i386.rpm aaff2aa1209064157ee75e6cfb62345c 7.1/en/os/SRPMS/samba-2.0.10-4.7.1.src.rpm ef31ad88c20642ebefa53772a4597ce6 7.1/en/os/i386/samba-2.0.10-4.7.1.i386.rpm ecad16dd1971f948ff719a25bdc13c87 7.1/en/os/i386/samba-client-2.0.10-4.7.1.i386.rpm b966c85535f4d4d7b8c1154f6bf71812 7.1/en/os/i386/samba-common-2.0.10-4.7.1.i386.rpm 7d89a94cb3dd473b7c83ea4cd8c20ced 7.1/en/os/i386/samba-swat-2.0.10-4.7.1.i386.rpm d69bb56093e7331df997d659ca2ea9e87.2/en/os/SRPMS/samba-2.2.7-2.7.2.src.rpm 260f20116ee659b3ae90f0ddddd62cf9 7.2/en/os/i386/samba-2.2.7-2.7.2.i386.rpm 73d30c36d6bd66e46bd6748c75b66d95 7.2/en/os/i386/samba-client-2.2.7-2.7.2.i386.rpm f0b0c21452d61a3a6b2c9678c2ff21e5 7.2/en/os/i386/samba-common-2.2.7-2.7.2.i386.rpm 5bc9e1065133519be8f8ad1217a91c28 7.2/en/os/i386/samba-swat-2.2.7-2.7.2.i386.rpm 5baa777197d842e5b3c9d6aa8aed42c3 7.2/en/os/ia64/samba-2.2.7-2.7.2.ia64.rpm 60815d802212e7c1d81578202483da1b 7.2/en/os/ia64/samba-client-2.2.7-2.7.2.ia64.rpm 42dc373237a120ebff3d3e2f0a75ccfc 7.2/en/os/ia64/samba-common-2.2.7-2.7.2.ia64.rpm 4869acd937643d1ebd47c08a124d4a6d 7.2/en/os/ia64/samba-swat-2.2.7-2.7.2.ia64.rpm 1a8b4d5ecf465a7b77002b9491a7e634 7.3/en/os/SRPMS/samba-2.2.7-2.7.3.src.rpm e28cae0c58825bb3361cd91062e3b4f4 7.3/en/os/i386/samba-2.2.7-2.7.3.i386.rpm da6798c92ea24bf85a676adf17e9084a 7.3/en/os/i386/samba-client-2.2.7-2.7.3.i386.rpm 34d8b1a219edd1891d0ea371c06a02d7 7.3/en/os/i386/samba-common-2.2.7-2.7.3.i386.rpm 852d956fc9ae7c16553d3803617888d4 7.3/en/os/i386/samba-swat-2.2.7-2.7.3.i386.rpm 69efd966ca49b534e213d10467adb3f8 8.0/en/os/SRPMS/samba-2.2.7-4.8.0.src.rpm 28fbffa7571d2e77ed6e6eb11a2f553a 8.0/en/os/i386/samba-2.2.7-4.8.0.i386.rpm db4faec9250a12ab30edcc62cddaeb43 8.0/en/os/i386/samba-client-2.2.7-4.8.0.i386.rpm 63072e475355d39479b6d755123523bc 8.0/en/os/i386/samba-common-2.2.7-4.8.0.i386.rpm d5fe4f9b3c1fa92a6b0d17b7e4042f2d 8.0/en/os/i386/samba-swat-2.2.7-4.8.0.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at About You can verify each package with the following command: rpm --checksig -v If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: md5sum 7. References: CVE -CVE-2003-0085 CVE -CVE-2003-0086 8. Contact: The Red Hat security contact is . More contact details at All Red Hat products Copyright 2003 Red Hat,Inc. _______________________________________________ Red Hat-watch-list mailing list To unsubscribe, visit: `. Recent updates to the samba software deal with significant security flaws uncovered during a recent audit. Users are urged to upgrade promptly to maintain their security.. Red Hat Samba Update,Samba Access Fix,Security Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 25, 2003 •Critical Red Hat
Banner 2 1028x280 1708121730 1 1771599631
99
Ls Advisories Slackware Esm H240
Price Tag%201security advisorysecurity updatecritical

Slackware: CVE-2003-0015 Severe: Cvs Double Free Vulnerability Attack

On servers which are configured to allow anonymous read-only access, this bug could be used by anonymous users to gain write privileges.. New cvs packages are available to fix a security vulnerability. Here are the details from the Slackware 8.1 ChangeLog: ---------------------------- Tue Jan 21 13:12:20 PST 2003 patches/packages/cvs-1.11.5-i386-1.tgz: Upgraded to cvs-1.11.5. This release fixes a major security vulnerability in the CVS server by which users with read only access could gain write access. Details should be available at this URL (but don't seem to be yet): CVE -CVE-2003-0015 (* Security fix *) ---------------------------- WHERE TO FIND THE NEW PACKAGE: ------------------------------ Updated cvs package for Slackware 8.1: Updated cvs package for Slackware -current: MD5 SIGNATURE: -------------- Here is the md5sum for the package: Slackware 8.1: 37d76c774c9474bf0117d429d6c3740e cvs-1.11.5-i386-1.tgz Slackware -current: c43d82187dfa695aa53aaf5b4d3050a1 cvs-1.11.5-i386-1.tgz INSTALLATION INSTRUCTIONS: -------------------------- As root, upgrade to the new cvs.tgz package: # upgradepkg cvs.tgz Remember, it's also a good idea to backup configuration files before upgrading packages. - Slackware Linux Security Team The Slackware Linux Project . Recent updates to the GIT packages fix a critical memory handling flaw that inadvertently permitted unauthorized access to sensitive data on Ubuntu systems. Cvs Double Free,Slackware Update,Access Exploit. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 23, 2003 •Critical Slackware
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorylocal root exploitcritical

Debian Advisory for OpenSSH: Critical Access Exploit Severity High

Joost Pol reports that OpenSSH versions 2.0 through 3.0.2have an off-by-one bug in the channel allocation code. This vulnerabilitycan be exploited by authenticated users to gain root privilege or by amalicious server exploiting a client with this bug.. ---------------------------------------------------------------------------- Debian Security Advisory This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Michael Stone March 7, 2002 ---------------------------------------------------------------------------- Package: openssh Vulnerability: local root exploit, remote client exploit Debian-specific: no Joost Pol reports that OpenSSH versions 2.0 through 3.0.2 have an off-by-one bug in the channel allocation code. This vulnerability can be exploited by authenticated users to gain root privilege or by a malicious server exploiting a client with this bug. Since Debian 2.2 (potato) shipped with OpenSSH (the "ssh" package) version 1.2.3, it is not vulnerable to this exploit. No fix is required for Debian 2.2 (potato). The Debian unstable and testing archives do include a more recent OpenSSH (ssh) package. If you are running these pre-release distributions you should ensure that you are running version 3.0.2p1-8, a patched version which was added to the unstable archive today, or a later version. ---------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Update highlighting OpenSSH flaws related to potential exploitation vulnerabilities that could lead to unauthorized access concerns.. Debian Security, OpenSSH Access, Local Exploit. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 08, 2002 •Critical Debian
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics