Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 421
Alerts This Week
Warning Icon 1 421

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Trivy Important Security Fix Advisory 2026-0263-1

Calendar White Jul 27, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux 8 RLSA-2026-45116 kernel-rt Important DoS Flaws

Calendar White Jul 27, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux 8 Kernel Important Security Fix RLSA-2026-45115

Calendar White Jul 27, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 systemd 258.10 Important Bugfix Advisory 2026-289c38d6f2

Calendar White Jul 26, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Skopeo Significant Denial of Service Resolution CVE-2026-27145

Calendar White Jul 26, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 Trafficserver Critical DoS Issue Fix 2026-ddaabe38ab

Calendar White Jul 26, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 libwebsockets Important Denial of Service Update 2026-59fdef3e5

Calendar White Jul 26, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 systemd Critical Bugfix Advisory 2026-230ba36543

Calendar White Jul 26, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 libgit2 Update 1.9.6 Security Fixes CVE-2026-53583 CVE-2026-53584

Calendar White Jul 26, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":14.29,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":4,"type":"x","order":2,"pct":57.14,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":28.57,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Apache PDFBox Moderate Path Traversal Threat Vuln 2026-22088-1

An update that solves two vulnerabilities can now be installed.. # Security update for apache-pdfbox Announcement ID: SUSE-SU-2026:22088-1 Release Date: 2026-06-08T14:37:00Z Rating: moderate References: * bsc#1262046 Cross-References: * CVE-2026-3392 * CVE-2026-33929 CVSS scores: * CVE-2026-3392 ( NVD ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3392 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-3392 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33929 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33929 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for apache-pdfbox fixes the following issues: Update to version 2.0.36. Security issues fixed: * CVE-2026-33929: path traversal in the `ExtractEmbeddedFiles` example code can lead to arbitrary file writes (bsc#1262046). Other updates and bugfixes: * Version 2.0.36: * XMPBox removes namespaces on serialization * False negative on PDFA-1b validation : missing field type * PlainText.Paragraph.getLines extremely slow on long lines * Valid PDF/A 1B is rejected * Potential StackOverflows in BaseParser * Unknown code in Huffman RLE stream * IllegalArgumentException: Can't add attribute to 0-length text * TTFSubsetter.buildGlyfTable() modifies glyphIds while iterating over its entries possibly causing ConcurrentModificationException to be thrown * IndexOutOfBoundsException in Type1CharStringParser.processCallSubr() * Exception "No type defined for {http://www.aiim.org/pdfa/ns/id/}rev" when trying to determine version of PDF/A-4 document * allownew PDF/A-4 conformance levels * pdfbox-app-X.X.X-sources.jar on maven central are empty (and javadoc jar is missing) * Cmd line docs * IllegalArgumentException: Multiplying two matrices produces illegal values in PDFStreamEngine.processAnnotation() * XmpParsingException: Schema is not set in this document: http://ns.adobe.com/xap/1.0/sType/ResourceEvent# * NullPointerException in FontMapperImpl.getFontMatches() * border style in FDFAnnotation is not initialized if width is 0 * German umlauts are not rendered * Invalid type in Schema not detected when in XML attributes * Serializing produces date "1-01-01T00:00:00+01:00" * Seconds of date "D:2015-02-03T10:11:12" returned as 0 * Confusing naming of "DerivedFrom" property getter in XMPMediaManagementSchema * ClassCastException in XMPMediaManagementSchema.getHistory() * IllegalArgumentException: Input buffer too short in StandardSecurityHandler.computeRC4key() * IllegalArgumentException: Width (0) and height (0) cannot be

Calendar%202 Jun 15, 2026 •moderate SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

SUSE: python3 Important Extraction Issues Fix 2025:02427-1

* bsc#1244032 * bsc#1244056 * bsc#1244059 * bsc#1244060 * bsc#1244061 . # Security update for python3 Announcement ID: SUSE-SU-2025:02427-1 Release Date: 2025-07-21T08:54:03Z Rating: important References: * bsc#1244032 * bsc#1244056 * bsc#1244059 * bsc#1244060 * bsc#1244061 * bsc#1244705 Cross-References: * CVE-2024-12718 * CVE-2025-4138 * CVE-2025-4330 * CVE-2025-4435 * CVE-2025-4517 * CVE-2025-6069 CVSS scores: * CVE-2024-12718 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-12718 ( NVD ): 10.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-12718 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-4138 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2025-4138 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-4330 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2025-4330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2025-4435 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2025-4435 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2025-4517 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-4517 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-4517 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2025-6069 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H * CVE-2025-6069 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2025-6069 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Micro 5.1 An update that solves six vulnerabilities can now be installed. ## Description: This update for python3 fixes the following issues: * CVE-2024-12718: Fixedextraction filter bypass that allowed file metadata modification outside extraction directory (bsc#1244056) * CVE-2025-4138: Fixed issue that might allow symlink targets to point outside the destination directory, and the modification of some file metadata (bsc#1244059) * CVE-2025-4330: Fixed extraction filter bypass that allowed linking outside extraction directory (bsc#1244060) * CVE-2025-4435: Fixed Tarfile extracts filtered members when errorlevel=0 (bsc#1244061) * CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter="data" (bsc#1244032) * CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-2427=1 ## Package List: * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150000.3.182.1 * python3-debuginfo-3.6.15-150000.3.182.1 * libpython3_6m1_0-3.6.15-150000.3.182.1 * python3-core-debugsource-3.6.15-150000.3.182.1 * libpython3_6m1_0-debuginfo-3.6.15-150000.3.182.1 * python3-3.6.15-150000.3.182.1 * python3-base-debuginfo-3.6.15-150000.3.182.1 * python3-base-3.6.15-150000.3.182.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12718.html * https://www.suse.com/security/cve/CVE-2025-4138.html * https://www.suse.com/security/cve/CVE-2025-4330.html * https://www.suse.com/security/cve/CVE-2025-4435.html * https://www.suse.com/security/cve/CVE-2025-4517.html * https://www.suse.com/security/cve/CVE-2025-6069.html * https://bugzilla.suse.com/show_bug.cgi?id=1244032 * https://bugzilla.suse.com/show_bug.cgi?id=1244056 *https://bugzilla.suse.com/show_bug.cgi?id=1244059 * https://bugzilla.suse.com/show_bug.cgi?id=1244060 * https://bugzilla.suse.com/show_bug.cgi?id=1244061 * https://bugzilla.suse.com/show_bug.cgi?id=1244705 . SUSE unveiled a critical patch for python3 that resolves multiple security vulnerabilities. Ensure your system is secured by implementing these updates.. python3 security, SUSE important update, software vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 21, 2025 •Important SuSE
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":14.29,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":4,"type":"x","order":2,"pct":57.14,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":28.57,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics