Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":556,"type":"x","order":1,"pct":78.75,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.25,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.18,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
87

Debian Mistral Important Information Disclosure Vuln DSA-6333-1

Eduardo Gonzalez Gutierrez and Arnaud Morin discovered that multiple API endpoints of Mistral, the OpenStack Workflow, improperly enforced access policies, which could result in information disclosure. For the oldstable distribution (bookworm), this problem has been fixed in version 15.0.0-1+deb12u1.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6333-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff June 09, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : mistral CVE ID : CVE-2026-41283 Eduardo Gonzalez Gutierrez and Arnaud Morin discovered that multiple API endpoints of Mistral, the OpenStack Workflow, improperly enforced access policies, which could result in information disclosure. For the oldstable distribution (bookworm), this problem has been fixed in version 15.0.0-1+deb12u1. For the stable distribution (trixie), this problem has been fixed in version 20.0.0-2+deb13u1. We recommend that you upgrade your mistral packages. For the detailed security status of mistral please refer to its security tracker page at: https://security-tracker.debian.org/tracker/mistral Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Mistral API access policy flaws revealed in Debian security advisory DSA-6333-1. Upgrade needed for information security.. Debian Security Advisory, Mistral API, Information Disclosure, Access Policy Flaw, Security Update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 09, 2026 Important Debian
87

Debian: DSA-5283-1 Important: KeyManager Access Control Flaw

Douglas Mendizabal discovered that Barbican, the OpenStack Key Management Service, incorrectly parsed requests which could allow an authenticated user to bypass Barbican access policies. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5247-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff October 04, 2022 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : barbican CVE ID : CVE-2022-3100 Debian Bug : 1021139 Douglas Mendizabal discovered that Barbican, the OpenStack Key Management Service, incorrectly parsed requests which could allow an authenticated user to bypass Barbican access policies. For the stable distribution (bullseye), this problem has been fixed in version 1:11.0.0-3+deb11u1. We recommend that you upgrade your barbican packages. For the detailed security status of barbican please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/barbican Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The recent Barbican update for Debian fixes a critical vulnerability in request handling that might allow access control circumvention. Users should upgrade immediately. Barbican Update, Debian Security, Access Control Update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 04, 2022 Important Debian
98

Red Hat OpenStack 16.1 RHSA-2022:6750-01 Important: Bypass Security

An update for openstack-barbican is now available for Red Hat OpenStack Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenStack Platform (openstack-barbican) security update Advisory ID: RHSA-2022:6750-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2022:6750 Issue date: 2022-09-29 CVE Names: CVE-2022-3100 ==================================================================== 1. Summary: An update for openstack-barbican is now available for Red Hat OpenStack Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 13.0 - ELS - noarch Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server - noarch Red Hat OpenStack Platform 16.1 - noarch Red Hat OpenStack Platform 16.2 - noarch Red Hat OpenStack Platform 17.0 - noarch 3. Description: Barbican is a ReST API designed for the secure storage, provisioning and management of secrets, including in OpenStack environments. Security Fix(es): * openstack-barbican: access policy bypass via query string injection (CVE-2022-3100) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, referto: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2125404 - CVE-2022-3100 openstack-barbican: access policy bypass via query string injection 6. Package List: Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server: Source: openstack-barbican-6.0.1-6.el7ost.src.rpm noarch: openstack-barbican-6.0.1-6.el7ost.noarch.rpm openstack-barbican-api-6.0.1-6.el7ost.noarch.rpm openstack-barbican-common-6.0.1-6.el7ost.noarch.rpm openstack-barbican-keystone-listener-6.0.1-6.el7ost.noarch.rpm openstack-barbican-worker-6.0.1-6.el7ost.noarch.rpm python-barbican-6.0.1-6.el7ost.noarch.rpm Red Hat OpenStack Platform 13.0 - ELS: Source: openstack-barbican-6.0.1-6.el7ost.src.rpm noarch: openstack-barbican-6.0.1-6.el7ost.noarch.rpm openstack-barbican-api-6.0.1-6.el7ost.noarch.rpm openstack-barbican-common-6.0.1-6.el7ost.noarch.rpm openstack-barbican-keystone-listener-6.0.1-6.el7ost.noarch.rpm openstack-barbican-worker-6.0.1-6.el7ost.noarch.rpm python-barbican-6.0.1-6.el7ost.noarch.rpm Red Hat OpenStack Platform 16.1: Source: openstack-barbican-9.0.1-1.20220112203416.07be198.el8ost.src.rpm noarch: openstack-barbican-9.0.1-1.20220112203416.07be198.el8ost.noarch.rpm openstack-barbican-api-9.0.1-1.20220112203416.07be198.el8ost.noarch.rpm openstack-barbican-common-9.0.1-1.20220112203416.07be198.el8ost.noarch.rpm openstack-barbican-keystone-listener-9.0.1-1.20220112203416.07be198.el8ost.noarch.rpm openstack-barbican-worker-9.0.1-1.20220112203416.07be198.el8ost.noarch.rpm python3-barbican-9.0.1-1.20220112203416.07be198.el8ost.noarch.rpm Red Hat OpenStack Platform16.2: Source: openstack-barbican-9.0.2-2.20220122185349.c718783.el8ost.src.rpm noarch: openstack-barbican-9.0.2-2.20220122185349.c718783.el8ost.noarch.rpm openstack-barbican-api-9.0.2-2.20220122185349.c718783.el8ost.noarch.rpm openstack-barbican-common-9.0.2-2.20220122185349.c718783.el8ost.noarch.rpm openstack-barbican-keystone-listener-9.0.2-2.20220122185349.c718783.el8ost.noarch.rpm openstack-barbican-worker-9.0.2-2.20220122185349.c718783.el8ost.noarch.rpm python3-barbican-9.0.2-2.20220122185349.c718783.el8ost.noarch.rpm Red Hat OpenStack Platform 17.0: Source: openstack-barbican-12.0.1-0.20220614210405.486e607.el9ost.src.rpm noarch: openstack-barbican-12.0.1-0.20220614210405.486e607.el9ost.noarch.rpm openstack-barbican-api-12.0.1-0.20220614210405.486e607.el9ost.noarch.rpm openstack-barbican-common-12.0.1-0.20220614210405.486e607.el9ost.noarch.rpm openstack-barbican-keystone-listener-12.0.1-0.20220614210405.486e607.el9ost.noarch.rpm openstack-barbican-worker-12.0.1-0.20220614210405.486e607.el9ost.noarch.rpm python3-barbican-12.0.1-0.20220614210405.486e607.el9ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-3100 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYzXonNzjgjWX9erEAQijjg/+OEM/R4tmChTm3BVnzZ/maaDNZTN1TbN7 3Endp4Auwtw4vVGA2lo3NtX3z6vudutV98XY1pSLGvuLKPGJANkGrnUmcSi21uZy WoviSBiX5j75xOrYVL6WDzeJuZj5s1UwsFniwmVvyv/v8xl6/0szU/0h2RgefjNZ b4HJo7Dp1TN8J0rsEbRqylyj6uPCBuBiWSh8vYe7ss91//8FFPxpPJgbJFCCOobP aMVroBEEzt7GKmRRo0/i+lKdRq6fEe9F/dOaAXX6sUeXKIIUQUrGNgu1HnDPzLgr qW3vHShj0i6sfArWSOdMK+iXNiuIJYGaM0ru/IMyHHDoDCZBuEDSXohFiYqW5Aun 77I+bshNxF3q71f+/o84huTlxUgzL+eavbFnMVJaLLPjLm81aHgB91QH9Navgz6t lXgflCk6jZhCsonDiTN2T0f/RbQLganawz8BXGzHyUSaVm+EEhMeU7UreiTl+3Do TBPB0YgZRaWTGcO7RRs5WAd9qn4NgPzTQF9mXNn92adzFZX5+j9eeafVhn/rhawT Tt7oCscqY8XyqhdlnoUaEgEGxTQmvKdUBLDeTwIcnXrfM4WOAist60aloU+J7CNX lCBuQBI2lg0kO4RgCfMgX+UC8xo2jU4Yr2TfnfE51dU+i96il36Nc+QO7AvDYfxJ 3GKpgch0aNs=quq1 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest Red Hat OpenStack Platform release addresses a severe security flaw in openstack-barbican, impacting multiple system architectures.. OpenStack Security, Red Hat Update, Access Control Security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 29, 2022 Important Red Hat
200

Scientific Linux SL4: CVE-2006-7108 Low Severity Access Policy Issue

Low: util-linux security and bug fix update. Date: Mon, 14 May 2007 17:18:53 -0500 Reply-To: Connie Sieh Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: Security ERRATA for util-linux for SL4.x i386/x86_64 Comments: To: scientific Synopsis: Low: util-linux security and bug fix update Issue date: 2007-05-01 CVE Names: CVE-2006-7108 A flaw was found in the way the login process handled logins which did not require authentication. Certain processes which conduct their own authentication could allow a remote user to bypass intended access policies which would normally be enforced by the login process. (CVE-2006-7108) SRPMS: util-linux-2.12a-16.EL4.25.src.rpm i386: util-linux-2.12a-16.EL4.25.i386.rpm x86_64: util-linux-2.12a-16.EL4.25.x86_64.rpm -Connie Sieh -Troy Dawson . A minor bug and security patch release for util-linux in Scientific Linux tackling CVE-2006-7108.. CVE-2006-7108, util-linux update, Scientific Linux fix, security errata. . Severity: Low. LinuxSecurity.com Team

Calendar%202 May 14, 2007 Low Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":556,"type":"x","order":1,"pct":78.75,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.25,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.18,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here