Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 CUPS Critical Control Character Injection CVE-2026-34980

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579-1

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderateOpenSUSE

openSUSE Python ECDSA Moderate API Issue Fix Vulnerability 2026-21078-1

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for python-ecdsa ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21078-1 Rating: moderate References: * bsc#1261009 Cross-References: * CVE-2026-33936 CVSS scores: * CVE-2026-33936 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-33936 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions (bsc#1261009). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-874=1 Package List: - openSUSE Leap 16.0: python313-ecdsa-0.19.1-160000.4.1 References: * https://www.suse.com/security/cve/CVE-2026-33936.html . openSUSE security update addresses a moderate issue in python-ecdsa affecting API functions. Update recommended.. python ecdsa security, openSUSE updates, moderate security patches. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 30, 2026 •moderate OpenSUSE
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebianbug fix

Debian Stretch: DLA-2648-2 Critical Fix for MediaWiki API Issues

The patch from latest upstream release to address CVE-2021-30152 was not portable to stretch-security version causing MediaWiki APIs to fail. This update includes a patch from upstream REL_31 release which fix the issue. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2648-2 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Abhijith PA May 07, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : mediawiki Version : 1:1.27.7-1~deb9u9 CVE ID : CVE-2021-20270 CVE-2021-27291 CVE-2021-30152 CVE-2021-30155 CVE-2021-30158 CVE-2021-30159 Debian Bug : 985574 984664 The patch from latest upstream release to address CVE-2021-30152 was not portable to stretch-security version causing MediaWiki APIs to fail. This update includes a patch from upstream REL_31 release which fix the issue. For Debian 9 stretch, this problem has been fixed in version 1:1.27.7-1~deb9u9. We recommend that you upgrade your mediawiki packages. For the detailed security status of mediawiki please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/mediawiki Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . This notice outlines the mediawiki patch implemented in Debian LTS DLA-2648-2 to resolve significant operational concerns.. MediaWiki Fixes, Debian Security Updates, API Resolutions. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 06, 2021 •Critical Debian LTS
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora: 2020-050aaa14f7 Critical: Nextcloud 19.0.3 DoS Fix

Update to Nextcloud 19.0.3, fixes CVE-2020-8236, CVE-2020-8223, CVE-2020-8183, CVE-2020-8173. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-050aaa14f7 2020-10-23 22:01:02.260427 --------------------------------------------------------------------------------Name : nextcloud Product : Fedora 33 Version : 19.0.3 Release : 1.fc33 URL : http://nextcloud.com Summary : Private file sync and share server Description : NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing right on the web. NextCloud is extendable via a simple but powerful API for applications and plugins. --------------------------------------------------------------------------------Update Information: Update to Nextcloud 19.0.3, fixes CVE-2020-8236, CVE-2020-8223, CVE-2020-8183, CVE-2020-8173 --------------------------------------------------------------------------------ChangeLog: * Sun Oct 11 2020 Christopher Engelhard - 19.0.3-1 - Update to Nextcloud 19.0.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #1873705 - Please update to 19.0.1 on Fedora 33 https://bugzilla.redhat.com/show_bug.cgi?id=1873705 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-050aaa14f7' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Nextcloud 19.0.3 release ready for Fedora 33, tackling urgent bugs and boosting efficiency standards.. nextcloud update, Fedora security, critical updates, DoS threats. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 23, 2020 •Critical Fedora
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicecritical

Debian 2.12.4-1 DSA-3431-2 Critical: ganeti API Denial Of Service

The update for ganeti issued as DSA-3431-1 causes the gnt-instance info command to fail for all instances of type DRBD. Updated packages are now available to address this regression. For reference the original advisory text follows. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3431-2 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso January 14, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : ganeti Debian Bug : 810850 The update for ganeti issued as DSA-3431-1 causes the gnt-instance info command to fail for all instances of type DRBD. Updated packages are now available to address this regression. For reference the original advisory text follows. Pierre Kim discovered two vulnerabilities in the restful API of Ganeti, a virtual server cluster management tool. SSL parameter negotiation could result in denial of service and the DRBD secret could leak. For the oldstable distribution (wheezy), this problem has been fixed in version 2.5.2-1+deb7u2. For the stable distribution (jessie), this problem has been fixed in version 2.12.4-1+deb8u3. We recommend that you upgrade your ganeti packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance ganeti installations to address concerns highlighted in Debian DSA-3431-2 regarding API weaknesses impacting functionality.. ganeti update,debian security,api vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 14, 2016 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian: DSA-1718-1 Critical: Fix for BOINC Remote Exploit

It was discovered that the core client for the BOINC distributed computing infrastructure performs incorrect validation of the return values of OpenSSL's RSA functions. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1718-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff February 08, 2009 http://www.debian.org/security/faq - ------------------------------------------------------------------------ Package : boinc Vulnerability : incorrect API usage Problem type : remote Debian-specific: no CVE Id(s) : CVE-2009-0126 Debian Bug : 511521 It was discovered that the core client for the BOINC distributed computing infrastructure performs incorrect validation of the return values of OpenSSL's RSA functions. For the stable distribution (etch), this problem has been fixed in version 5.4.11-4+etch1. For the upcoming stable distribution (lenny), this problem has been fixed in version 6.2.14-3. For the unstable distribution (sid), this problem has been fixed in version 6.2.14-3. We recommend that you upgrade your boinc packages. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 4.0 alias etch - ------------------------------- Stable updates are available for amd64, arm, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 5561690 268c8f6f19d5def378e7d2fbacc2d4eb Size/MD5 checksum: 1174 2d007ac10e6c4033363f8b0978ecfdfa Size/MD5 checksum: 42159 8bf8d8b4fd9a7bb3963f1af4b3a6f6e0 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 742302 510dc201af61610b050bc3380c9d100a Size/MD5 checksum: 331738 3c03b02467d1295a41e228e887e35c8a Size/MD5 checksum: 420030 693edd73e7f6565fcecdd4d4734c9331 arm architecture (ARM) Size/MD5 checksum: 405796 8eac0ee7ccb30f4cd5db1d98b6d6bad5 Size/MD5 checksum: 355172 5624689252e7f4a17ab7ddd7b32c323e Size/MD5 checksum: 776070 0a548d55f73c61821276aa015f4e69bb i386 architecture (Intel ia32) Size/MD5 checksum: 402674 be5f9b3f94890248963a8fdbc9471251 Size/MD5 checksum: 340560 935dd3f2c5c51d66dd77c698253458af Size/MD5 checksum: 747016 7bc3304531f57ac1e667fba68fe16cd0 ia64 architecture (Intel ia64) Size/MD5 checksum: 552872 9c0053cf650774c12dedb80d6c0918c7 Size/MD5 checksum: 445946 46d0dae4d46304332138ea7ecdcc773e Size/MD5 checksum: 827448 adb080334dd148ca08d831a1656d8e52 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 760244 640cd45d564c8428a9e301723e11bb6d Size/MD5 checksum: 364418 84aa41b3259eebd66f21811ffd693856 Size/MD5 checksum: 453980 3200f312a78a7fb1b179e88b3da12095 mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 362924 a0b49bd7aa24c8b2c8ea8412413b7f8a Size/MD5 checksum: 752698 cff499021e2c48bbca805f4e5ff74e07 Size/MD5 checksum: 452180 88876196db57020ad9cfd8fa0d9fa781 powerpc architecture (PowerPC) Size/MD5 checksum: 746960 53a8fdb3b93f7a01951f646781939499 Size/MD5 checksum: 357802 88bb6361dc2a34729ef49b1bcfc6f86f Size/MD5 checksum: 436526 ebde4d9b7fa9357250eac6edd058fbf2 s390 architecture (IBM S/390) Size/MD5 checksum: 405746 f428c0a13fae9d569e8bb4a27d8d2d30 Size/MD5 checksum: 733522 fc578aa93e65eae44b48457411f6eda3 Size/MD5 checksum: 340934 f23cc5421e73e3d548b936ac3f20b40f sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 424774 773aa13cb3453920cfed95d93d8d7070 Size/MD5 checksum: 339330 082502b633ae3d84aa3b87fdb0dbee40 Size/MD5 checksum: 775476 5fa72e818fad34c6dda5a6fa6df99f0a These files will probably be moved into the stable distribution on its next update. - --------------------------------------------------------------------------------- For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Uncover the solution to BOINC's faulty validation in Debian DSA-1718-1. Update to enhance both safety and efficiency.. Boinc, Debian Security, Remote Exploit, Software Update, Security Management. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 08, 2009 •Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics