Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 431
Alerts This Week
Warning Icon 1 431

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian LTS linux-6.1 DLA-4700-1 CVE-2025-23131 to CVE-2026-64529

Calendar White Jul 26, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux 8 java-17-openjdk Important TLS Enhancement RLSA-2026-42887

Calendar White Jul 26, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS hplip Significant Privilege Escalation Code Execution DLA-4699-1

Calendar White Jul 26, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 Firefox Important Update to Version 153.0 - Performance Boost

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 2026-4a2d23b470 google-osconfig-agent Important DoS Issues

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 moby-engine Update v29.6.2 Denial of Service Vulnerability

Calendar White Jul 25, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 xrdp Important Denial Of Service Risks Advisory 2026-952a486b39

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Libreswan Important IKE Tunnel Security Update CVE-2026-14957

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 p11-kit Critical Stack Exhaustion Fix CVE-2026-13757

Calendar White Jul 25, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -2 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorybuffer overflowimportant

openSUSE 15.6 OpenSSL-3 Major Buffer Overflow Fix for SUSE-SU-2026-2393-1

An update that solves nine vulnerabilities can now be installed.. # Security update for openssl-3 Announcement ID: SUSE-SU-2026:2393-1 Release Date: 2026-06-15T08:06:07Z Rating: important References: * bsc#1266340 * bsc#1266341 * bsc#1266342 * bsc#1266344 * bsc#1266349 * bsc#1266353 * bsc#1266355 * bsc#1266356 * bsc#1266357 Cross-References: * CVE-2026-34180 * CVE-2026-34182 * CVE-2026-42766 * CVE-2026-42770 * CVE-2026-45445 * CVE-2026-45446 * CVE-2026-45447 * CVE-2026-7383 * CVE-2026-9076 CVSS scores: * CVE-2026-34180 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-34180 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-34180 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34182 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-34182 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-34182 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42766 ( SUSE ): 6.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-42766 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-42766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42770 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-42770 ( SUSE ): 5.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N * CVE-2026-42770 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45445 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45445 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45446 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-45446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N *CVE-2026-45446 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45447 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-45447 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45447 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-7383 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7383 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7383 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-9076 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-9076 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-9076 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves nine vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues * CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). * CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342). * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344). * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353). * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355). * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356). * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). ## Patch Instructions: Toinstall this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2393=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2393=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2393=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libopenssl-3-devel-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-3.1.4-150600.5.53.1 * openssl-3-debugsource-3.1.4-150600.5.53.1 * libopenssl3-debuginfo-3.1.4-150600.5.53.1 * openssl-3-3.1.4-150600.5.53.1 * openssl-3-debuginfo-3.1.4-150600.5.53.1 * libopenssl3-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.53.1 * openSUSE Leap 15.6 (x86_64) * libopenssl3-32bit-debuginfo-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.53.1 * libopenssl-3-devel-32bit-3.1.4-150600.5.53.1 * libopenssl3-32bit-3.1.4-150600.5.53.1 * openSUSE Leap 15.6 (noarch) * openssl-3-doc-3.1.4-150600.5.53.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libopenssl-3-fips-provider-64bit-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-64bit-debuginfo-3.1.4-150600.5.53.1 * libopenssl3-64bit-3.1.4-150600.5.53.1 * libopenssl3-64bit-debuginfo-3.1.4-150600.5.53.1 * libopenssl-3-devel-64bit-3.1.4-150600.5.53.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libopenssl-3-devel-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-3.1.4-150600.5.53.1 * openssl-3-debugsource-3.1.4-150600.5.53.1 * libopenssl3-debuginfo-3.1.4-150600.5.53.1 * openssl-3-3.1.4-150600.5.53.1 * openssl-3-debuginfo-3.1.4-150600.5.53.1 * libopenssl3-3.1.4-150600.5.53.1 *libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.53.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.53.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.53.1 * libopenssl3-32bit-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.53.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libopenssl-3-devel-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-3.1.4-150600.5.53.1 * openssl-3-debugsource-3.1.4-150600.5.53.1 * libopenssl3-debuginfo-3.1.4-150600.5.53.1 * openssl-3-3.1.4-150600.5.53.1 * openssl-3-debuginfo-3.1.4-150600.5.53.1 * libopenssl3-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.53.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.53.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.53.1 * libopenssl3-32bit-3.1.4-150600.5.53.1 * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.53.1 ## References: * https://www.suse.com/security/cve/CVE-2026-34180.html * https://www.suse.com/security/cve/CVE-2026-34182.html * https://www.suse.com/security/cve/CVE-2026-42766.html * https://www.suse.com/security/cve/CVE-2026-42770.html * https://www.suse.com/security/cve/CVE-2026-45445.html * https://www.suse.com/security/cve/CVE-2026-45446.html * https://www.suse.com/security/cve/CVE-2026-45447.html * https://www.suse.com/security/cve/CVE-2026-7383.html * https://www.suse.com/security/cve/CVE-2026-9076.html * https://bugzilla.suse.com/show_bug.cgi?id=1266340 * https://bugzilla.suse.com/show_bug.cgi?id=1266341 * https://bugzilla.suse.com/show_bug.cgi?id=1266342 * https://bugzilla.suse.com/show_bug.cgi?id=1266344 * https://bugzilla.suse.com/show_bug.cgi?id=1266349 * https://bugzilla.suse.com/show_bug.cgi?id=1266353 * https://bugzilla.suse.com/show_bug.cgi?id=1266355 *https://bugzilla.suse.com/show_bug.cgi?id=1266356 * https://bugzilla.suse.com/show_bug.cgi?id=1266357 . # Security update for openssl-3 Announcement ID: SUSE-SU-2026:2393-1 Release Date: 2026-06-15T08:06:. update, solves, vulnerabilities, installed, security, openssl-3. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 15, 2026 •Important OpenSUSE
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorybuffer overflowimportant

Mageia 9 iperf Important Buffer Overflow Auth Failure Vuln 2026-0021

MGASA-2026-0021 - Updated iperf packages fix security vulnerabilities. MGASA-2026-0021 - Updated iperf packages fix security vulnerabilities Publication date: 27 Jan 2026 URL: https://advisories.mageia.org/MGASA-2026-0021.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-54349, CVE-2025-54350 Description: In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. (CVE-2025-54349) In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. (CVE-2025-54350) References: - https://bugs.mageia.org/show_bug.cgi?id=35047 - https://ubuntu.com/security/notices/USN-7970-1 - https://www.cve.org/CVERecord?id=CVE-2025-54349 - https://www.cve.org/CVERecord?id=CVE-2025-54350 SRPMS: - 9/core/iperf-3.18-1.1.mga9 . Updated iperf packages in Mageia fix critical security issues including buffer overflows and authentication errors.. iperf security update,mageia vulnerability patch,buffer overflow fix,authentication error patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 27, 2026 •Important Mageia
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

DEBIAN: security-fix-KERNEL-v2.0 Urgent Access Violation Fix 2025:30540-2

* bsc#1245509 * bsc#1247315 Cross-References: * CVE-2025-38089 . # Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 Announcement ID: SUSE-SU-2025:20830-1 Release Date: 2025-10-07T15:38:32Z Rating: important References: * bsc#1245509 * bsc#1247315 Cross-References: * CVE-2025-38089 * CVE-2025-38477 CVSS scores: * CVE-2025-38089 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-38089 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38477 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38477 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: * CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) * CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-147=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_8-debugsource-6-1.2 * kernel-livepatch-6_4_0-31-rt-6-1.2 * kernel-livepatch-6_4_0-31-rt-debuginfo-6-1.2 ## References: * https://www.suse.com/security/cve/CVE-2025-38089.html * https://www.suse.com/security/cve/CVE-2025-38477.html * https://bugzilla.suse.com/show_bug.cgi?id=1245509 * https://bugzilla.suse.com/show_bug.cgi?id=1247315 . Two important vulnerabilities fixed in SUSE Linux Micro 6.0 kernel-livepatch update. Ensure your systems are secure and protected.. kernel livepatch, SUSE Linuxupdates, Linux security issues. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 14, 2025 •Important SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

SUSE: kernel-livepatch-MICRO Important Auth Error Fix 2025:20831-1

* bsc#1245509 * bsc#1247315 Cross-References: * CVE-2025-38089 . # Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 Announcement ID: SUSE-SU-2025:20831-1 Release Date: 2025-10-07T15:38:32Z Rating: important References: * bsc#1245509 * bsc#1247315 Cross-References: * CVE-2025-38089 * CVE-2025-38477 CVSS scores: * CVE-2025-38089 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-38089 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38477 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38477 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: * CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) * CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-148=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-33-rt-debuginfo-5-1.2 * kernel-livepatch-MICRO-6-0-RT_Update_9-debugsource-5-1.2 * kernel-livepatch-6_4_0-33-rt-5-1.2 ## References: * https://www.suse.com/security/cve/CVE-2025-38089.html * https://www.suse.com/security/cve/CVE-2025-38477.html * https://bugzilla.suse.com/show_bug.cgi?id=1245509 * https://bugzilla.suse.com/show_bug.cgi?id=1247315 . Address critical security updates including authentication errors and race conditions for SUSE Linux Micro 6.0.. SUSE Security Update, Kernel Livepatch Fix,Authentication Issues, Race Condition Resolution, Vulnerability Patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 14, 2025 •Important SuSE
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorydenial of serviceSuSE

SUSE: Kernel Important Security Update for Live Patching 2025:03567-1

* bsc#1245509 * bsc#1247315 Cross-References: * CVE-2025-38089 . # Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP6) Announcement ID: SUSE-SU-2025:03567-1 Release Date: 2025-10-12T08:04:03Z Rating: important References: * bsc#1245509 * bsc#1247315 Cross-References: * CVE-2025-38089 * CVE-2025-38477 CVSS scores: * CVE-2025-38089 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-38089 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38477 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38477 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_53 fixes several issues. The following security issues were fixed: * CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). * CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-3567=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-3567=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_12-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_53-default-debuginfo-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_53-default-6-150600.2.1 * SUSELinux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_12-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_53-default-debuginfo-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_53-default-6-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-38089.html * https://www.suse.com/security/cve/CVE-2025-38477.html * https://bugzilla.suse.com/show_bug.cgi?id=1245509 * https://bugzilla.suse.com/show_bug.cgi?id=1247315 . SUSE’s important kernel update addresses two critical security issues, requiring immediate attention and patching.. Linux Kernel, security update, SUSE patch, CVE-2025-38089, CVE-2025-38477. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 13, 2025 •Important SuSE
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of serviceinstallation issue

Debian: DSA-5056-1 StrongSwan DoS Risk and Authentication Error

Zhuowei Zhang discovered a bug in the EAP authentication client code of strongSwan, an IKE/IPsec suite, that may allow to bypass the client and in some scenarios even the server authentication, or could lead to a denial-of-service attack. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5056-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Yves-Alexis Perez January 24, 2022 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : strongswan CVE ID : CVE-2021-45079 Zhuowei Zhang discovered a bug in the EAP authentication client code of strongSwan, an IKE/IPsec suite, that may allow to bypass the client and in some scenarios even the server authentication, or could lead to a denial-of-service attack. When using EAP authentication (RFC 3748), the successful completion of the authentication is indicated by an EAP-Success message sent by the server to the client. strongSwan's EAP client code handled early EAP-Success messages incorrectly, either crashing the IKE daemon or concluding the EAP method prematurely. End result depend on the used configuration, more details can be found in upstream advisory at https://www.strongswan.org/blog/2022/01/24/strongswan-vulnerability-).html For the oldstable distribution (buster), this problem has been fixed in version 5.7.2-1+deb10u2. For the stable distribution (bullseye), this problem has been fixed in version 5.9.1-1+deb11u2. We recommend that you upgrade your strongswan packages. For the detailed security status of strongswan please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/strongswan Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list:This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Advisory DSA-5056-2 outlines a vulnerability in strongSwan's EAP client, resulting in potential authentication failures and Denial-of-Service threats.. strongSwan Update,EAP Authentication,Debian Security Advisory,DoS Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 24, 2022 •Critical Debian
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisoryimportantpublic key

SUSE: 2019:1060-1 Important: libssh2 Org Authentication Error

An update that solves one vulnerability and has one errata is now available. . Caution: This email originated from outside the organization. Do not click links or open attachments unless you have verified this email is legitimate. SUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:1060-1 Rating: important References: #1130103 #1133528 Cross-References: CVE-2019-3859 Affected Products: SUSE OpenStack Cloud 7 SUSE Linux Enterprise Software Development Kit 12-SP4 SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server for SAP 12-SP2 SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP2-LTSS SUSE Linux Enterprise Server 12-SP2-BCL SUSE Linux Enterprise Server 12-SP1-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Desktop 12-SP4 SUSE Linux Enterprise Desktop 12-SP3 SUSE Enterprise Storage 4 SUSE CaaS Platform ALL SUSE CaaS Platform 3.0 OpenStack Cloud Magnum Orchestration 7 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103] Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or"zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2019-1060=1 - SUSE Linux Enterprise Software Development Kit 12-SP4: zypper in -t patch SUSE-SLE-SDK-12-SP4-2019-1060=1 - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2019-1060=1 - SUSE Linux Enterprise Server for SAP 12-SP2: zypper in -t patch SUSE-SLE-SAP-12-SP2-2019-1060=1 - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2019-1060=1 - SUSE Linux Enterprise Server 12-SP4: zypper in -t patch SUSE-SLE-SERVER-12-SP4-2019-1060=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-1060=1 - SUSE Linux Enterprise Server 12-SP2-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2019-1060=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2019-1060=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2019-1060=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2019-1060=1 - SUSE Linux Enterprise Desktop 12-SP4: zypper in -t patch SUSE-SLE-DESKTOP-12-SP4-2019-1060=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2019-1060=1 - SUSE Enterprise Storage 4: zypper in -t patch SUSE-Storage-4-2019-1060=1 - SUSE CaaS Platform ALL: To install this update, use the SUSE CaaS Platform Velum dashboard. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. - SUSE CaaS Platform 3.0: To install this update, use the SUSE CaaS Platform Velum dashboard. It will inform you if it detects new updates and let youthen trigger updating of the complete cluster in a controlled way. - OpenStack Cloud Magnum Orchestration 7: zypper in -t patch SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-1060=1 Package List: - SUSE OpenStack Cloud 7 (s390x x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Software Development Kit 12-SP4 (aarch64 ppc64le s390x x86_64): libssh2-devel-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): libssh2-devel-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (x86_64): libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP4 (aarch64 ppc64le s390x x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP4 (s390x x86_64): libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP3 (s390x x86_64): libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (s390x x86_64): libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le s390x x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (s390x x86_64): libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Server 12-LTSS (s390x x86_64): libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 - SUSE Linux Enterprise Desktop 12-SP4 (x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE Enterprise Storage 4 (x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-32bit-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2-1-debuginfo-32bit-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE CaaS Platform ALL (x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - SUSE CaaS Platform 3.0 (x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 - OpenStack Cloud Magnum Orchestration 7 (x86_64): libssh2-1-1.4.3-20.6.1 libssh2-1-debuginfo-1.4.3-20.6.1 libssh2_org-debugsource-1.4.3-20.6.1 References: https://www.suse.com/security/cve/CVE-2019-3859.html https://bugzilla.suse.com/1130103 https://bugzilla.suse.com/1133528 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . A critical fix addresses login issues in libssh2 for SUSE platforms. Adhere to patch guidelines for a successful solution.. libssh2, SUSE OpenStack, important security update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 27, 2019 •Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics