Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Stay Secure with the Latest Linux Advisories

Ubuntu Large Esm H800
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 CUPS Critical Control Character Injection CVE-2026-34980

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579-1

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H800
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Chromium Important Use After Free Issues Fix 2026-21382-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Linux Micro 6.2 Helm Notable RAM Exhaustion Issue SUSE-SU-2026-31512-3

An update that solves two vulnerabilities can now be installed.. # Security update for helm Announcement ID: SUSE-SU-2026:21461-1 Release Date: 2026-04-30T13:26:15Z Rating: moderate References: * bsc#1248093 * bsc#1261938 Cross-References: * CVE-2025-55199 * CVE-2026-35206 CVSS scores: * CVE-2025-55199 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-55199 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-55199 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-35206 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-35206 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: * CVE-2025-55199: specially crafted JSON Schema can lead to out of memory (OOM) termination (bsc#1248093). * CVE-2026-35206: specially crafted Chart will have contents extracted to immediate output directory rather than to expected output directory suffixed by the Chart's name (bsc#1261938). Other updates and bugfixes: * Version 3.20.1: * chore(deps): bump the k8s-io group with 7 updates a2369ca (dependabot[bot]) * add image index test 90e1056 (Pedro Trres) * fix pulling charts from OCI indices 911f2e9 (Pedro Trres) * Remove refactorring changes from coalesce_test.go 76dad33 (Evans Mungai) * Fix import 45c12f7(Evans Mungai) * Update pkg/chart/common/util/coalesce_test.go 26c6f19 (Evans Mungai) * Fix lint warning 09f5129 (Evans Mungai) * Preserve nil values in chart already 417deb2 (Evans Mungai) * fix(values): preserve nil values when chart default is empty map 5417bfa (Evans Mungai) * Version 3.20.0: * SDK: bump k8s API versions to v0.35.0 * v3 backport: Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #12564 * v3 backport: Bump Go version to v1.25 * bump version to v3.20 * chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 * chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 * chore(deps): bump github.com/foxcpp/go-mockdns from 1.1.0 to 1.2.0 * chore(deps): bump the k8s-io group with 7 updates * [dev-v3] Replace deprecated `NewSimpleClientset` * [dev-v3] Bump Go v1.25, `golangci-lint` v2 * chore(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 * chore(deps): bump github.com/containerd/containerd from 1.7.29 to 1.7.30 * fix(rollback): `errors.Is` instead of string comp * fix(uninstall): supersede deployed releases * Use latest patch release of Go in releases * chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 * chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 * chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 * chore(deps): bump github.com/rubenv/sql-migrate from 1.8.0 to 1.8.1 * chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 * chore(deps): bump github.com/cyphar/filepath-securejoin * chore(deps): bump golang.org/x/text from 0.30.0 to 0.31.0 * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 * Remove dev-v3 `helm-latest-version` publish * chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 1.7.28 to 1.7.29 * Revert "pkg/registry: Login option for passing TLS config in memory" * jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 * Fix`helm pull` untar dir check with repo urls * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 * chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 * chore(deps): bump golang.org/x/text from 0.29.0 to 0.30.0 * [backport] fix: get-helm-3 script use helm3-latest-version * pkg/registry: Login option for passing TLS config in memory * Fix deprecation warning * chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 * chore(deps): bump golang.org/x/term from 0.34.0 to 0.35.0 * Avoid "panic: interface conversion: interface {} is nil" * bump version to v3.19.0 * chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 * fix: set repo authorizer in registry.Client.Resolve() * fix null merge * Add timeout flag to repo add and update flags * Version 3.19.5: * Fixed bug where removing subchart value via override resulted in warning #31118 * Fixed bug where helm uninstall with --keep-history did not suspend previous deployed releases #12556 * fix(rollback): errors.Is instead of string comp 4a19a5b (Hidde Beydals) * fix(uninstall): supersede deployed releases 7a00235 (Hidde Beydals) * fix null merge 578564e (Ben Foster) * Version 3.19.4: * Use latest patch release of Go in releases 7cfb6e4 (Matt Farina) * chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 59c951f (dependabot[bot]) * chore(deps): bump github.com/cyphar/filepath-securejoin d45f3f1 * chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 d459544 (dependabot[bot]) * chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 becd387 (dependabot[bot]) * chore(deps): bump the k8s-io group with 7 updates edb1579 * Version 3.19.3: * Bump golang.org/x/crypto to v0.45.0 * Version 3.19.2: * [backport] fix: get-helm-3 script use helm3-latest-version 8766e71 (George Jenkins) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can runthe command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-661=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * helm-3.20.2-160000.1.1 * helm-debuginfo-3.20.2-160000.1.1 * SUSE Linux Micro 6.2 (noarch) * helm-bash-completion-3.20.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-55199.html * https://www.suse.com/security/cve/CVE-2026-35206.html * https://bugzilla.suse.com/show_bug.cgi?id=1248093 * https://bugzilla.suse.com/show_bug.cgi?id=1261938 . Two vulnerabilities in helm for SUSE Linux Micro necessitate an update. Fix security issues to prevent data extraction failures.. SUSE Update Helm Security Moderate OutOfMemory Extractions. . LinuxSecurity.com Team

Calendar%202 May 04, 2026 SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorycriticalinformation disclosure

SUSE: 2024:4098-1 important: postgresql15 critical security issues

* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327 . # Security update for postgresql15 Announcement ID: SUSE-SU-2024:4098-1 Release Date: 2024-11-28T12:24:37Z Rating: important References: * bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327 Cross-References: * CVE-2024-10976 * CVE-2024-10977 * CVE-2024-10978 * CVE-2024-10979 CVSS scores: * CVE-2024-10976 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-10976 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-10977 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-10977 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-10978 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-10978 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-10979 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-10979 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Legacy Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for postgresql15 fixes the following issues: * CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference (bsc#1233323). * CVE-2024-10977: Make libpq discard error messages received during SSL or GSS protocol negotiation (bsc#1233325). * CVE-2024-10978: Fix unintended interactions between SET SESSION AUTHORIZATION and SET ROLE (bsc#1233326). * CVE-2024-10979: Prevent trusted PL/Perl code from changing environment variables (bsc#1233327). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: *openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4098=1 openSUSE-SLE-15.6-2024-4098=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-4098=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postgresql15-debuginfo-15.10-150600.16.9.1 * postgresql15-llvmjit-debuginfo-15.10-150600.16.9.1 * postgresql15-plpython-debuginfo-15.10-150600.16.9.1 * postgresql15-plperl-15.10-150600.16.9.1 * postgresql15-server-devel-15.10-150600.16.9.1 * postgresql15-15.10-150600.16.9.1 * postgresql15-contrib-debuginfo-15.10-150600.16.9.1 * postgresql15-devel-15.10-150600.16.9.1 * postgresql15-llvmjit-15.10-150600.16.9.1 * postgresql15-plperl-debuginfo-15.10-150600.16.9.1 * postgresql15-server-devel-debuginfo-15.10-150600.16.9.1 * postgresql15-contrib-15.10-150600.16.9.1 * postgresql15-pltcl-debuginfo-15.10-150600.16.9.1 * postgresql15-plpython-15.10-150600.16.9.1 * postgresql15-server-15.10-150600.16.9.1 * postgresql15-debugsource-15.10-150600.16.9.1 * postgresql15-pltcl-15.10-150600.16.9.1 * postgresql15-llvmjit-devel-15.10-150600.16.9.1 * postgresql15-test-15.10-150600.16.9.1 * postgresql15-devel-debuginfo-15.10-150600.16.9.1 * postgresql15-server-debuginfo-15.10-150600.16.9.1 * openSUSE Leap 15.6 (noarch) * postgresql15-docs-15.10-150600.16.9.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql15-debuginfo-15.10-150600.16.9.1 * postgresql15-plperl-debuginfo-15.10-150600.16.9.1 * postgresql15-server-devel-15.10-150600.16.9.1 * postgresql15-devel-15.10-150600.16.9.1 * postgresql15-devel-debuginfo-15.10-150600.16.9.1 * postgresql15-server-devel-debuginfo-15.10-150600.16.9.1 * postgresql15-contrib-15.10-150600.16.9.1 * postgresql15-plperl-15.10-150600.16.9.1 * postgresql15-server-debuginfo-15.10-150600.16.9.1 * postgresql15-15.10-150600.16.9.1 * postgresql15-plpython-debuginfo-15.10-150600.16.9.1 *postgresql15-pltcl-debuginfo-15.10-150600.16.9.1 * postgresql15-plpython-15.10-150600.16.9.1 * postgresql15-server-15.10-150600.16.9.1 * postgresql15-contrib-debuginfo-15.10-150600.16.9.1 * postgresql15-debugsource-15.10-150600.16.9.1 * postgresql15-pltcl-15.10-150600.16.9.1 * Legacy Module 15-SP6 (noarch) * postgresql15-docs-15.10-150600.16.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-10976.html * https://www.suse.com/security/cve/CVE-2024-10977.html * https://www.suse.com/security/cve/CVE-2024-10978.html * https://www.suse.com/security/cve/CVE-2024-10979.html * https://bugzilla.suse.com/show_bug.cgi?id=1233323 * https://bugzilla.suse.com/show_bug.cgi?id=1233325 * https://bugzilla.suse.com/show_bug.cgi?id=1233326 * https://bugzilla.suse.com/show_bug.cgi?id=1233327 . Crucial security patch for postgresql15 targeting severe flaws and weaknesses. Discover more information today.. postgresql15 Security Update,SUSE Security Advisory,Data Protection. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 28, 2024 •Important SuSE
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics