Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
172

Ubuntu 20.04 libcap Significant Privilege Escalation Flaw USN-8193-2

libcap could be made to modify capabilities on arbitrary files.. ========================================================================== Ubuntu Security Notice USN-8193-2 June 23, 2026 libcap2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: libcap could be made to modify capabilities on arbitrary files. Software Description: - libcap2: POSIX 1003.1e capabilities library Details: USN-8193-1 fixed a vulnerability in libcap. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Ali Raza discovered that libcap incorrectly handled file capability updates. A local attacker could possibly use this issue to inject or strip capabilities into arbitrary executables and escalate privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS libcap-dev 1:2.32-1ubuntu0.2+esm1 Available with Ubuntu Pro libcap2 1:2.32-1ubuntu0.2+esm1 Available with Ubuntu Pro libcap2-bin 1:2.32-1ubuntu0.2+esm1 Available with Ubuntu Pro libpam-cap 1:2.32-1ubuntu0.2+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS libcap-dev 1:2.25-1.2ubuntu0.1~esm2 Available with Ubuntu Pro libcap2 1:2.25-1.2ubuntu0.1~esm2 Available with Ubuntu Pro libcap2-bin 1:2.25-1.2ubuntu0.1~esm2 Available with Ubuntu Pro libpam-cap 1:2.25-1.2ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS libcap-dev 1:2.24-12ubuntu0.1~esm2 Available with Ubuntu Pro libcap2 1:2.24-12ubuntu0.1~esm2 Available with Ubuntu Pro libcap2-bin 1:2.24-12ubuntu0.1~esm2 Available with Ubuntu Pro libpam-cap 1:2.24-12ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 14.04 LTS libcap-dev 1:2.24-0ubuntu2+esm2 Available with Ubuntu Pro libcap2 1:2.24-0ubuntu2+esm2 Available with Ubuntu Pro libcap2-bin 1:2.24-0ubuntu2+esm2 Available with Ubuntu Pro libpam-cap 1:2.24-0ubuntu2+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8193-2 https://ubuntu.com/security/notices/USN-8193-1 CVE-2026-4878 . modification of file capabilities could allow unprivileged users to escalate privileges on Ubuntu systems. Update recommended!. Ubuntu Security Notice, libcap vulnerability, privilege escalation, capability modification. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 23, 2026 Critical Ubuntu
203

Mageia: 2019-0249 Moderate: Sigil Arbitrary File Write Issue

Updated sigil package fixes security vulnerability: Mike Salvatore discovered that Sigil mishandled certain malformed EPUB files. An attacker could use this vulnerability to write arbitrary files to the filesystem (CVE-2019-14452). . MGASA-2019-0249 - Updated sigil packages fix security vulnerability Publication date: 06 Sep 2019 URL: https://advisories.mageia.org/MGASA-2019-0249.html Type: security Affected Mageia releases: 6, 7 CVE: CVE-2019-14452 Updated sigil package fixes security vulnerability: Mike Salvatore discovered that Sigil mishandled certain malformed EPUB files. An attacker could use this vulnerability to write arbitrary files to the filesystem (CVE-2019-14452). References: - https://bugs.mageia.org/show_bug.cgi?id=25290 - https://ubuntu.com/security/notices/USN-4085-1 - https://www.cve.org/CVERecord?id=CVE-2019-14452 SRPMS: - 6/core/sigil-0.9.16-1.mga6 - 7/core/sigil-0.9.16-1.mga7 . The latest Sigil release addresses a significant security vulnerability linked to improperly formatted EPUB documents that allowed unauthorized writes to the filesystem.. Sigil Security, Mageia Update, File System Threat, EPUB Vulnerability. . LinuxSecurity.com Team

Calendar%202 Sep 06, 2019 Mageia
172

Ubuntu 19.04 LTS Security Advisory 4111-1: Ghostscript File Access Risk

Ghostscript could be made to access arbitrary files if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-4111-1 August 29, 2019 ghostscript vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Ghostscript could be made to access arbitrary files if it opened a specially crafted file. Software Description: - ghostscript: PostScript and PDF interpreter Details: Hiroki Matsukuma discovered that the PDF interpreter in Ghostscript did not properly restrict privileged calls when ‘-dSAFER’ restrictions were in effect. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files. (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: ghostscript 9.26~dfsg+0-0ubuntu7.3 libgs9 9.26~dfsg+0-0ubuntu7.3 Ubuntu 18.04 LTS: ghostscript 9.26~dfsg+0-0ubuntu0.18.04.11 libgs9 9.26~dfsg+0-0ubuntu0.18.04.11 Ubuntu 16.04 LTS: ghostscript 9.26~dfsg+0-0ubuntu0.16.04.11 libgs9 9.26~dfsg+0-0ubuntu0.16.04.11 In general, a standard system update will make all the necessary changes. References: CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817 Package Information: https://launchpad.net/ubuntu/+source/ghostscript/9.26~dfsg+0-0ubuntu7.3 https://launchpad.net/ubuntu/+source/ghostscript/9.26~dfsg+0-0ubuntu0.18.04.11 https://launchpad.net/ubuntu/+source/ghostscript/9.26~dfsg+0-0ubuntu0.16.04.11 . Recent Ghostscript flawsfound in Ubuntu may lead to unauthorized file access. Discover the security patches available and the process to update your systems.. Ghostscript Vulnerabilities, Ubuntu Security Notice, Arbitrary File Access, System Update Instructions, PostScript Interpreter. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 28, 2019 Important Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200