Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
172
security advisoryprivilege escalationUbuntuUbuntu 22.04 LTS 8091-1 util-linux Important Privilege Escalation Risk
util-linux could be made to run programs as an administrator.. ========================================================================== Ubuntu Security Notice USN-8091-1 March 12, 2026 util-linux vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: util-linux could be made to run programs as an administrator. Software Description: - util-linux: miscellaneous system utilities Details: It was discovered that the util-linux su utility did not drop capabilities when being used with the --pty option. While not a security issue by itself, a local attacker could possibly use the su tool to exploit vulnerabilities in other applications. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 util-linux 2.41-4ubuntu4.2 Ubuntu 24.04 LTS util-linux 2.39.3-9ubuntu6.5 Ubuntu 22.04 LTS util-linux 2.37.2-4ubuntu3.5 Ubuntu 20.04 LTS util-linux 2.34-0.1ubuntu9.6+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8091-1 https://launchpad.net/bugs/2143850 Package Information: https://launchpad.net/ubuntu/+source/util-linux/2.41-4ubuntu4.2 https://launchpad.net/ubuntu/+source/util-linux/2.39.3-9ubuntu6.5 https://launchpad.net/ubuntu/+source/util-linux/2.37.2-4ubuntu3.5 . Update your Ubuntu systems for util-linux security issue allowing privilege escalation. Details and instructions inside.. Ubuntu Security, util-linux exploits, administrator rights, system utilities. . Severity: Important. LinuxSecurity.com Team
Mar 12, 2026
•Important
Ubuntu
172
security advisorymoderateupdateUbuntu 16.04 LTS USN-3081-1 Moderate: Tomcat Remote Access Risk
The system could be made to run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-3081-1 September 19, 2016 tomcat6, tomcat7, tomcat8 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: The system could be made to run programs as an administrator. Software Description: - tomcat8: Servlet and JSP engine - tomcat7: Servlet and JSP engine - tomcat6: Servlet and JSP engine Details: Dawid Golunski discovered that the Tomcat init script incorrectly handled creating log files. A remote attacker could possibly use this issue to obtain root privileges. (CVE-2016-1240) This update also reverts a change in behaviour introduced in USN-3024-1 by setting mapperContextRootRedirectEnabled to True by default. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: libtomcat8-java 8.0.32-1ubuntu1.2 tomcat8 8.0.32-1ubuntu1.2 Ubuntu 14.04 LTS: libtomcat7-java 7.0.52-1ubuntu0.7 tomcat7 7.0.52-1ubuntu0.7 Ubuntu 12.04 LTS: libtomcat6-java 6.0.35-1ubuntu3.8 tomcat6 6.0.35-1ubuntu3.8 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3081-1 CVE-2016-1240, https://bugs.launchpad.net/ubuntu/+source/tomcat7/+bug/1609819 Package Information: https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.2 https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.7 https://launchpad.net/ubuntu/+source/tomcat6/6.0.35-1ubuntu3.8 . A critical Tomcat security vulnerability in Ubuntu versions has prompted an urgent update to preventunauthorized remote access by administrators, enhancing system safety. Tomcat Security, Ubuntu Updates, System Administration. . Severity: Important. LinuxSecurity.com Team
Sep 19, 2016
•Important
Ubuntu
172
security advisorycriticalMySQLUbuntu 16.04 LTS USN-3078-1 Critical: MySQL Execution Escalation
MySQL could be made to run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-3078-1 September 13, 2016 mysql-5.5, mysql-5.7 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: MySQL could be made to run programs as an administrator. Software Description: - mysql-5.7: MySQL database - mysql-5.5: MySQL database Details: Dawid Golunski discovered that MySQL incorrectly handled configuration files. A remote attacker could possibly use this issue to execute arbitrary code with root privileges. MySQL has been updated to 5.5.52 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 16.04 LTS has been updated to MySQL 5.7.15. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-14.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: mysql-server-5.7 5.7.15-0ubuntu0.16.04.1 Ubuntu 14.04 LTS: mysql-server-5.5 5.5.52-0ubuntu0.14.04.1 Ubuntu 12.04 LTS: mysql-server-5.5 5.5.52-0ubuntu0.12.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3078-1 CVE-2016-6662 Package Information: https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.15-0ubuntu0.16.04.1 https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.52-0ubuntu0.14.04.1 https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.52-0ubuntu0.12.04.1 . An exploit in MySQL enables distant threat agents to execute commands with administrative privileges on Ubuntu platforms. Suggested to apply patches.. MySQL Vulnerability, Ubuntu Security Update, Admin Exploit. . Severity: Critical. LinuxSecurity.com Team
Sep 13, 2016
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!