Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H900
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H800
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 7 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 43 librabbitmq Critical Out-of-Bounds Read Fix for 2026-454722e3d8

Version 0.16.0 - 2026-06-08 Security Fix out-of-bounds read via undersized frames in amqp_handle_input (GHSA-9mmv-r8g3-qp46, #878) Fix client crash when server negotiates frame_max below the AMQP protocol. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-454722e3d8 2026-06-26 01:14:26.672373+00:00 -------------------------------------------------------------------------------- Name : librabbitmq Product : Fedora 43 Version : 0.16.0 Release : 1.fc43 URL : https://github.com/alanxz/rabbitmq-c Summary : Client library for AMQP Description : This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1. -------------------------------------------------------------------------------- Update Information: Version 0.16.0 - 2026-06-08 Security Fix out-of-bounds read via undersized frames in amqp_handle_input (GHSA-9mmv-r8g3-qp46, #878) Fix client crash when server negotiates frame_max below the AMQP protocol minimum (GHSA-jh48-qjf5-fx5v) Added Add amqp_bytes_from_buffer macro to create amqp_bytes_t from an arbitrary byte buffer with explicit length (#856, #866) Fixed Fix NULL pointer dereferences on allocation failure in tools/publish.c (#860, #861) Fix NULL pointer dereference in tools/consume.c stringify_bytes() on allocation failure (#858) Fix file stream leak in tools/common.c read_authfile() (#859) Fix handling of absolute CMAKE_INSTALL_INCLUDEDIR in exported CMake targets (#849) Changed amqp_literal_bytes macro now uses an explicit (void *) cast (#853) -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 10 2026 Remi Collet - 0.16.0-1 - update to 0.16.0 - re-license spec file to CECILL-2.1 - spec file cleanup -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2026-454722e3d8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . A critical update for Fedora 43 fixes significant security issues in librabbitmq including out-of-bounds read vulnerabilities and client crashes.. librabbitmq security update, Fedora security advisory, AMQP client crash fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 25, 2026 •Critical Fedora
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatememory safety

openSUSE Backports SLE-15-SP7 Tor Moderate Security Issues Fix 2026-0188-1

An update that contains security fixes can now be installed.. openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0188-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP7 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues: - Update to 0.4.9.9 * Major bugfixes (compression, security): - Fix a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. TROVE-2026-022. Fixes bug 41275; bugfix on 0.3.1.1-alpha. - Fix an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reaches Z_STREAM_END, causing zlib to return Z_BUF_ERROR with no input remaining, which buf_add_compress() mistook for a full output buffer and retried forever. Fixed by returning TOR_COMPRESS_ERROR in that case so the caller can abort cleanly. TROVE-2026-021. Fixes bug 41274; bugfix on 0.2.6.1-alpha. * Major bugfixes (conflux, security): - Fix a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was ignored, so a send failure (which calls circuit_mark_for_close() and removes the leg via cfx_del_leg()) would go undetected, causing the caller to write to the now-freed current leg and resulting in a crash. TROVE-2026-017. Fixes bug 41263; bugfix on 0.4.8.1-alpha. * Major bugfixes (security, TROVE-2026-019): - Avoid out-of-bounds read/write when parsing a consensus or detached signaturewith unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. Fixes bug 41267; bugfix on 0.2.8.2-alpha. * Major bugfixes (client stability, TROVE-2026-013, TROVE-2026-015): - Protect against a client-side assert that can happen if a malicious onion service gets the client to load its carefully crafted onion descriptor. Fixes bugs 41259 and 41261; bugfix on 0.3.1.1-alpha. * Major bugfixes (code safety): - Avoid a dangerous situation in router_find_exact_exit_enclave() where we could have reached an assert if bridges or relays claim an IP address of 0.0.0.0. Fixes bug 41276; bugfix on 0.4.5.1-alpha. * Major bugfixes (conflux, shutdown): - Fix a use-after-free in the shutdown path when freeing conflux circuits. cfx_add_leg() shares stream list pointers across legs without NULLing the old leg, so circuit_free_all() would free the lists via one leg and then access freed memory via another. TROVE- 2026-016. Fixes bug 41262; bugfix on 0.4.8.1-alpha. * Major bugfixes (DNSPort, TROVE-2026-018): - Fix a client-side crash that would happen if we decide to stop reading on a RESOLVE request that came from the DNSPort or controller. This crash could happen naturally under heavy load and with poor luck, but since 0.4.7.2-alpha it could be induced by the exit relay via a flow control request. Fixes bug 41265; bugfix on 0.2.0.1-alpha. * Major bugfixes (memory safety, TROVE-2026-014): - Avoid a heap-use-after-free mistake that can happen in the conflux subsystem, and which can be induced at either the client or the exit relay. Fixes bug 41260; bugfix on 0.4.8.1-alpha. * Major bugfixes (onion services, TROVE-2026-020): - Avoid a possible divide by zero crash on onion services that have the proof-of-work (PoW) defense enabled. Thisbug could be hit by extreme bad luck or maybe by the help of an attacker crafting just the right circumstances. Fixes bug 41270; bugfix on 0.4.8.1-alpha. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2026-188=1 Package List: - openSUSE Backports SLE-15-SP7 (aarch64 ppc64le s390x x86_64): tor-0.4.9.9-bp157.2.12.1 References: . Security update for openSUSE addresses multiple issues in Tor software ensuring stability and safety with version 0.4.9.9.. openSUSE Security Update, Tor application update, Memory safety fixes, Client crash issues. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •moderate OpenSUSE
Banner 3 1028x280 1708121785 1771599793
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorylowOpenSUSE

openSUSE Leap 17.0 Security Update openSUSE-SU-2026-20487-3 CVE-2026-71235

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for mumble ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20394-1 Rating: low References: * bsc#1259721 Cross-References: * CVE-2025-71264 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for mumble fixes the following issues: Changes in mumble: - CVE-2025-71264: (opus) incorrect size calculations allow for an out-of-bounds array access and can lead to a client crash (boo#1259721) - Update to version 1.5.857: * fixes for undesired ACL behavior * Client bug fixes: UI, memory leaks, audio mute/volume behavior Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-173=1 Package List: - openSUSE Leap 16.0: mumble-1.5.857-bp160.1.1 mumble-server-1.5.857-bp160.1.1 References: * https://www.suse.com/security/cve/CVE-2025-71264.html . An openSUSE update for mumble addresses a low-level issue with a client crash due to incorrect size calculations.. openSUSE mumble security client crash low severity. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Mar 25, 2026 •Low OpenSUSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorypatchimportant

SUSE: 2024:0784-1 Alert: freerdp Vulnerability Notice Enhancements

* bsc#1223346 * bsc#1223347 * bsc#1223348 * bsc#1223353 . # Security update for freerdp Announcement ID: SUSE-SU-2024:1856-1 Rating: important References: * bsc#1223346 * bsc#1223347 * bsc#1223348 * bsc#1223353 Cross-References: * CVE-2024-32658 * CVE-2024-32659 * CVE-2024-32660 * CVE-2024-32661 CVSS scores: * CVE-2024-32658 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-32659 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2024-32660 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-32661 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for freerdp fixes the following issues: * CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec (bsc#1223353). * CVE-2024-32659: Fixed out-of-bounds read if `((nWidth == 0) and (nHeight == 0))` (bsc#1223346) * CVE-2024-32660: Fixed client crash via invalid huge allocation size (bsc#1223347) * CVE-2024-32661: Fixed client NULL pointer dereference (bsc#1223348) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run thecommand listed for your product: * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1856=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1856=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1856=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1856=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1856=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1856=1 ## Package List: * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x) * libwinpr2-debuginfo-2.4.0-150400.3.32.1 * freerdp-debugsource-2.4.0-150400.3.32.1 * libwinpr2-2.4.0-150400.3.32.1 * libfreerdp2-debuginfo-2.4.0-150400.3.32.1 * freerdp-debuginfo-2.4.0-150400.3.32.1 * libfreerdp2-2.4.0-150400.3.32.1 * winpr2-devel-2.4.0-150400.3.32.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * freerdp-proxy-debuginfo-2.4.0-150400.3.32.1 * freerdp-2.4.0-150400.3.32.1 * libwinpr2-debuginfo-2.4.0-150400.3.32.1 * freerdp-debugsource-2.4.0-150400.3.32.1 * libwinpr2-2.4.0-150400.3.32.1 * freerdp-devel-2.4.0-150400.3.32.1 * freerdp-proxy-2.4.0-150400.3.32.1 * libfreerdp2-debuginfo-2.4.0-150400.3.32.1 * freerdp-debuginfo-2.4.0-150400.3.32.1 * libfreerdp2-2.4.0-150400.3.32.1 * winpr2-devel-2.4.0-150400.3.32.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * freerdp-proxy-debuginfo-2.4.0-150400.3.32.1 * freerdp-2.4.0-150400.3.32.1 * libwinpr2-debuginfo-2.4.0-150400.3.32.1 * freerdp-debugsource-2.4.0-150400.3.32.1 * libwinpr2-2.4.0-150400.3.32.1 * freerdp-devel-2.4.0-150400.3.32.1 * freerdp-proxy-2.4.0-150400.3.32.1 * libfreerdp2-debuginfo-2.4.0-150400.3.32.1 * freerdp-debuginfo-2.4.0-150400.3.32.1 * libfreerdp2-2.4.0-150400.3.32.1 *winpr2-devel-2.4.0-150400.3.32.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * freerdp-wayland-2.4.0-150400.3.32.1 * freerdp-proxy-debuginfo-2.4.0-150400.3.32.1 * freerdp-2.4.0-150400.3.32.1 * freerdp-server-2.4.0-150400.3.32.1 * libwinpr2-debuginfo-2.4.0-150400.3.32.1 * winpr2-devel-2.4.0-150400.3.32.1 * freerdp-debugsource-2.4.0-150400.3.32.1 * libwinpr2-2.4.0-150400.3.32.1 * freerdp-devel-2.4.0-150400.3.32.1 * freerdp-proxy-2.4.0-150400.3.32.1 * libfreerdp2-debuginfo-2.4.0-150400.3.32.1 * uwac0-0-devel-2.4.0-150400.3.32.1 * freerdp-server-debuginfo-2.4.0-150400.3.32.1 * libuwac0-0-debuginfo-2.4.0-150400.3.32.1 * freerdp-debuginfo-2.4.0-150400.3.32.1 * libfreerdp2-2.4.0-150400.3.32.1 * freerdp-wayland-debuginfo-2.4.0-150400.3.32.1 * libuwac0-0-2.4.0-150400.3.32.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * freerdp-wayland-2.4.0-150400.3.32.1 * freerdp-proxy-debuginfo-2.4.0-150400.3.32.1 * freerdp-2.4.0-150400.3.32.1 * freerdp-server-2.4.0-150400.3.32.1 * libwinpr2-debuginfo-2.4.0-150400.3.32.1 * winpr2-devel-2.4.0-150400.3.32.1 * freerdp-debugsource-2.4.0-150400.3.32.1 * libwinpr2-2.4.0-150400.3.32.1 * freerdp-devel-2.4.0-150400.3.32.1 * freerdp-proxy-2.4.0-150400.3.32.1 * libfreerdp2-debuginfo-2.4.0-150400.3.32.1 * uwac0-0-devel-2.4.0-150400.3.32.1 * freerdp-server-debuginfo-2.4.0-150400.3.32.1 * libuwac0-0-debuginfo-2.4.0-150400.3.32.1 * freerdp-debuginfo-2.4.0-150400.3.32.1 * libfreerdp2-2.4.0-150400.3.32.1 * freerdp-wayland-debuginfo-2.4.0-150400.3.32.1 * libuwac0-0-2.4.0-150400.3.32.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * freerdp-wayland-2.4.0-150400.3.32.1 * freerdp-proxy-debuginfo-2.4.0-150400.3.32.1 * freerdp-2.4.0-150400.3.32.1 * freerdp-server-2.4.0-150400.3.32.1 * libwinpr2-debuginfo-2.4.0-150400.3.32.1 * winpr2-devel-2.4.0-150400.3.32.1 * freerdp-debugsource-2.4.0-150400.3.32.1 *libwinpr2-2.4.0-150400.3.32.1 * freerdp-devel-2.4.0-150400.3.32.1 * freerdp-proxy-2.4.0-150400.3.32.1 * libfreerdp2-debuginfo-2.4.0-150400.3.32.1 * uwac0-0-devel-2.4.0-150400.3.32.1 * freerdp-server-debuginfo-2.4.0-150400.3.32.1 * libuwac0-0-debuginfo-2.4.0-150400.3.32.1 * freerdp-debuginfo-2.4.0-150400.3.32.1 * libfreerdp2-2.4.0-150400.3.32.1 * freerdp-wayland-debuginfo-2.4.0-150400.3.32.1 * libuwac0-0-2.4.0-150400.3.32.1 ## References: * https://www.suse.com/security/cve/CVE-2024-32658.html * https://www.suse.com/security/cve/CVE-2024-32659.html * https://www.suse.com/security/cve/CVE-2024-32660.html * https://www.suse.com/security/cve/CVE-2024-32661.html * https://bugzilla.suse.com/show_bug.cgi?id=1223346 * https://bugzilla.suse.com/show_bug.cgi?id=1223347 * https://bugzilla.suse.com/show_bug.cgi?id=1223348 * https://bugzilla.suse.com/show_bug.cgi?id=1223353 . Significant freerdp enhancements tackle severe problems, featuring vulnerabilities linked to memory overflows and application failures. Apply updates promptly.. SUSE Patch, freerdp Security, Important Update, SUSE Security Advisory, Critical Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 19, 2024 •Important SuSE
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorycriticalFedora

Fedora 36: FEDORA-2022-4b739ab17e Important: python Server Fail

Rebuild for CVE-2022-27191. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-3a63897745 2022-04-28 05:50:06.248389 --------------------------------------------------------------------------------Name : golang-github-haproxytech-client-native Product : Fedora 35 Version : 2.5.3 Release : 2.fc35 URL : https://github.com/haproxytech/client-native Summary : Go client for HAProxy configuration and runtime API Description : Go client for HAProxy configuration and runtime API. --------------------------------------------------------------------------------Update Information: Rebuild for CVE-2022-27191 --------------------------------------------------------------------------------ChangeLog: * Sat Apr 16 2022 Fabio Alessandro Locati - 2.5.3-2 - Rebuilt for CVE-2022-27191 --------------------------------------------------------------------------------References: [ 1 ] Bug #2074262 - CVE-2022-27191 golang-x-crypto: golang: crash in a golang.org/x/crypto/ssh server [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2074262 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-3a63897745' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Fedora 35 addresses CVE-2022-27191 in golang-client package, enhancing security and stability.. Fedora Update,golang Client,HAProxy Configuration,security patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 28, 2022 •Important Fedora
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebianDoS

Debian Stretch: DLA-2747-1 Critical Segfault in ircii Client Disconnect

An issue has been found in ircii, an Internet Relay Chat client. A crafted CTCP UTC message could allow an attacker to disconnect the victim from an IRC server due to a segmentation fault and client crash. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2747-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Thorsten Alteholz August 22, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : ircii Version : 20151120-1+deb9u1 CVE ID : CVE-2021-29376 An issue has been found in ircii, an Internet Relay Chat client. A crafted CTCP UTC message could allow an attacker to disconnect the victim from an IRC server due to a segmentation fault and client crash. For Debian 9 stretch, this problem has been fixed in version 20151120-1+deb9u1. We recommend that you upgrade your ircii packages. For the detailed security status of ircii please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/ircii Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Advisory DLA-2750-2 resolves a buffer overflow in mime-construct, bolstering the email client against malformed inputs.. ircii, Debian LTS, security update, DoS attack, segmentation fault. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Aug 22, 2021 •Critical Debian LTS
Banner 3 1028x280 1708121785 1771599793
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebiansegmentation fault

Debian 9 Stretch: DLA-2746-1 Moderate: Scrollz Client Crash Issue

An issue has been found in scrollz, an advanced ircII-based IRC client. A crafted CTCP UTC message could allow an attacker to disconnect the victim from an IRC server due to a segmentation fault and client crash. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2746-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Thorsten Alteholz August 21, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : scrollz Version : 2.2.3-1+deb9u1 CVE ID : CVE-2021-29376 An issue has been found in scrollz, an advanced ircII-based IRC client. A crafted CTCP UTC message could allow an attacker to disconnect the victim from an IRC server due to a segmentation fault and client crash. For Debian 9 stretch, this problem has been fixed in version 2.2.3-1+deb9u1. We recommend that you upgrade your scrollz packages. For the detailed security status of scrollz please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/scrollz Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance the scrollz framework to rectify urgent vulnerabilities impacting IRC link stability and avert system failures.. Debian LTS, Scrollz Client, IRC Security Update. . LinuxSecurity.com Team

Calendar%202 Aug 20, 2021 Debian LTS
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisoryremote accessinteger overflow

Mageia: 2020-0338 Critical: Freerdp Integer Overflow Crash

Integer overflow due to missing input sanitation in rdpegfx channel. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a memcpy) (CVE-2020-15103). . MGASA-2020-0338 - Updated freerdp packages fix security vulnerability Publication date: 18 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0338.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-16135 Integer overflow due to missing input sanitation in rdpegfx channel. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a memcpy) (CVE-2020-15103). The freerdp package has been updated to version 2.2.0, fixing this issue and other bugs. References: - https://bugs.mageia.org/show_bug.cgi?id=27047 - https://github.com/FreeRDP/FreeRDP/releases/tag/2.2.0 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4r38-6hq7-j3j9 - https://www.cve.org/CVERecord?id=CVE-2020-16135 SRPMS: - 7/core/freerdp-2.2.0-1.mga7 . A security patch for freerdp software resolves integer overflow flaws and enhances input validation mechanisms.. Freerdp Security Update, Mageia Security Advisory, Remote Desktop Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Aug 18, 2020 •Critical Mageia
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics