Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 21 articles for you...
89
security advisoryfedoraupdateFedora 42 k9s Update 0.50.18 Advisory FEDORA-2026-a74aa25180
Update to 0.50.18. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-a74aa25180 2026-03-09 01:01:24.903121+00:00 -------------------------------------------------------------------------------- Name : k9s Product : Fedora 42 Version : 0.50.18 Release : 1.fc42 URL : https://github.com/derailed/k9s Summary : Kubernetes CLI To Manage Your Clusters In Style Description : Kubernetes CLI To Manage Your Clusters In Style! -------------------------------------------------------------------------------- Update Information: Update to 0.50.18 -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 28 2026 blinxen - 0.50.18-1 - Update to version 0.50.18 (rhbz#2428576) * Fri Jan 16 2026 Fedora Release Engineering - 0.50.16-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2417127 - CVE-2025-65965 k9s: Grype has a credential disclosure vulnerability in Grype JSON output [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2417127 [ 2 ] Bug #2419013 - CVE-2024-25621 k9s: containerd local privilege escalation [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2419013 [ 3 ] Bug #2420597 - CVE-2025-47913 k9s: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2420597 [ 4 ] Bug #2424014 - [Minor Incident] CVE-2025-52881 k9s: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2424014 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a74aa25180'at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 09, 2026
•Important
Fedora
197
security advisorysecurity updatedebianDebian LTS: DLA-4096-1: librabbitmq Security Advisory Updates
An issue has been found in librabbitmq, a AMQP client library and tools written in C. The issue is related to credential visibility when . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4096-1
Mar 29, 2025
•Important
Debian LTS
219
security advisorysecurity issueimportant updateRocky Linux 9 RLSA-2025:0674 critical: docker daemon security risk
Important: git-lfs security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2025:0673", "synopsis": "Important: git-lfs security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for git-lfs.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.\n\nSecurity Fix(es):\n\n* git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs (CVE-2024-53263)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2338002", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2338002", "description": ""}], "cves": [{"name": "CVE-2024-53263", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-53263", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2025-02-13T20:35:44.459056Z", "rpms": {"Rocky Linux 9": {"nvras": ["git-lfs-0:3.4.1-4.el9_4.aarch64.rpm", "git-lfs-0:3.4.1-4.el9_4.ppc64le.rpm", "git-lfs-0:3.4.1-4.el9_4.s390x.rpm", "git-lfs-0:3.4.1-4.el9_4.src.rpm", "git-lfs-0:3.4.1-4.el9_4.x86_64.rpm", "git-lfs-debuginfo-0:3.4.1-4.el9_4.aarch64.rpm", "git-lfs-debuginfo-0:3.4.1-4.el9_4.ppc64le.rpm", "git-lfs-debuginfo-0:3.4.1-4.el9_4.s390x.rpm", "git-lfs-debuginfo-0:3.4.1-4.el9_4.x86_64.rpm", "git-lfs-debugsource-0:3.4.1-4.el9_4.aarch64.rpm", "git-lfs-debugsource-0:3.4.1-4.el9_4.ppc64le.rpm", "git-lfs-debugsource-0:3.4.1-4.el9_4.s390x.rpm", "git-lfs-debugsource-0:3.4.1-4.el9_4.x86_64.rpm"]}},"rebootSuggested": false, "buildReferences": []}. Critical update issued for git-lfs on Rocky Linux 9 tackles issues related to credential exposures swiftly.. Git LFS security, Rocky Linux security update, credential protection, security patch, software updates. . Severity: Important. LinuxSecurity.com Team
Feb 13, 2025
•Important
Rocky Linux
197
security advisorybuffer overflowDebianDebian 11: DLA-4031-1 moderate: git credential exposure
Multiple vulnerabilities were discovered in git, a fast, scalable and distributed revision control system. CVE-2024-50349 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4031-1
Jan 28, 2025
Debian LTS
197
security advisorymoderateDebianDebian 10 Buster DLA-3695-1 moderate: Ansible credential exposure
Ansible a configuration management, deployment, and task execution system was affected by multiple vulnerabilities. CVE-2019-10206 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3695-1
Dec 28, 2023
Debian LTS
203
security advisorycritical issuesecurity updateMageia 8 MGASA-2023-0210 Critical: Python-Requests Exposes Credentials
Forwarding proxy credentials to the destination server unintentionally (CVE-2023-32681) References: - https://bugs.mageia.org/show_bug.cgi?id=32032 . MGASA-2023-0210 - Updated python-requests packages fix security vulnerability Publication date: 28 Jun 2023 URL: https://advisories.mageia.org/MGASA-2023-0210.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-32681 Forwarding proxy credentials to the destination server unintentionally (CVE-2023-32681) References: - https://bugs.mageia.org/show_bug.cgi?id=32032 - https://lists.debian.org/debian-lts-announce/2023/06/msg00018.html - https://ubuntu.com/security/notices/USN-6155-1 - https://www.cve.org/CVERecord?id=CVE-2023-32681 SRPMS: - 8/core/python-requests-2.25.1-1.2.mga8 . MGASA-2023-0211 addresses a vulnerability in python-urllib3 to remediate severe credential leakage risk on Mageia.. Mageia Security Update, Python Requests Vulnerability, Credential Exposure Fix. . Severity: Critical. LinuxSecurity.com Team
Jun 28, 2023
•Critical
Mageia
172
security advisoryUbuntunetwork threatUbuntu: USN-6189-1 Critical: etcd Credential Exposure Over Network
etcd could be made to expose sensitive information over the network.. =========================================================================Ubuntu Security Notice USN-6189-1 June 28, 2023 etcd vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.10 Summary: etcd could be made to expose sensitive information over the network. Software Description: - etcd: highly-available key value store -- client Details: It was discovered that etcd leaked credentials when debugging was enabled. This allowed remote attackers to discover etcd authentication credentials and possibly escalate privileges on systems using etcd. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: etcd-client 3.4.23-4ubuntu0.1 etcd-server 3.4.23-4ubuntu0.1 Ubuntu 22.10: etcd-client 3.3.25+dfsg-7ubuntu0.22.10.2 etcd-server 3.3.25+dfsg-7ubuntu0.22.10.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6189-1 CVE-2021-28235 Package Information: https://launchpad.net/ubuntu/+source/etcd/3.4.23-4ubuntu0.1 https://launchpad.net/ubuntu/+source/etcd/3.3.25+dfsg-7ubuntu0.22.10.2 . Critical advisory concerning etcd security flaw on Ubuntu 23.04 and 22.10 to avert unauthorized credential sharing across networks.. etcd Vulnerability, Ubuntu Security, Credential Exposure. . Severity: Critical. LinuxSecurity.com Team
Jun 28, 2023
•Critical
Ubuntu
203
security advisorycriticaldata confidentialityMageia: 2021-0420 Critical Security Advisory for Ansible Risks
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. . MGASA-2021-0420 - Updated ansible packages fix security vulnerability Publication date: 23 Sep 2021 URL: https://advisories.mageia.org/MGASA-2021-0420.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-3447, CVE-2021-3583 A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take advantage of this information to steal those credentials, provided when they have access to the log files containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2 (CVE-2021-3447). A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity (CVE-2021-3583). References: - https://bugs.mageia.org/show_bug.cgi?id=28832 - https://access.redhat.com/errata/RHSA-2021:1342 - https://access.redhat.com/errata/RHSA-2021:2664 - https://github.com/ansible/ansible/blob/v2.9.24/changelogs/CHANGELOG-v2.9.rst - https://www.cve.org/CVERecord?id=CVE-2021-3447 - https://www.cve.org/CVERecord?id=CVE-2021-3583 SRPMS: - 8/core/ansible-2.9.24-1.mga8 . MGASA-2021-0421 tackles potential vulnerabilitiesrelated to system integrity and user management, delivering patches for Mageia packages.. Ansible Security Update, Mageia Packages, Data Confidentiality Threats. . Severity: Critical. LinuxSecurity.com Team
Sep 23, 2021
•Critical
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!