Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
87
security advisorydenial of servicedebianDebian DSA-6198-1 Valkey Critical Denial of Service Risk Advisory
Two security vulnerabilities were discovered in Valkey, a persistent key-value database with network interface, which could result in denial of service or data manipulation. For the stable distribution (trixie), these problems have been fixed in version 8.1.1+dfsg1-3+deb13u2.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6198-1
Apr 05, 2026
•Critical
Debian
100
security advisorymoderateOpenSUSEopenSUSE Leap 15.4 Redis Moderate Data Manipulation Fix SUSE-2026-1122-1
# Security update for redis Announcement ID: SUSE-SU-2026:1122-1 Release Date: 2026-03-27T14:21:13Z Rating: moderate References:. # Security update for redis Announcement ID: SUSE-SU-2026:1122-1 Release Date: 2026-03-27T14:21:13Z Rating: moderate References: * bsc#1258706 Affected Products: * openSUSE Leap 15.4 An update that has one security fix can now be installed. ## Description: This update for redis fixes the following issue: * a user can manipulate data read by a connection by injecting sequences into a Redis error reply (bsc#1258706). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1122=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * redis-debuginfo-6.2.6-150400.3.43.1 * redis-debugsource-6.2.6-150400.3.43.1 * redis-6.2.6-150400.3.43.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1258706 . Addressing a moderate threat in Redis, this advisory outlines the fix for data manipulation risk due to injection.. Redis Security Update, openSUSE Redis Fix, Redis Threat Injection. . LinuxSecurity.com Team
Mar 27, 2026
SuSE
100
security advisorymoderateOpenSUSEopenSUSE Leap 15.6 redis7 Moderate Data Injection Issue SUSE-2026-0667-1
# Security update for redis7 Announcement ID: SUSE-SU-2026:0667-1 Release Date: 2026-02-26T15:19:59Z Rating: moderate References:. # Security update for redis7 Announcement ID: SUSE-SU-2026:0667-1 Release Date: 2026-02-26T15:19:59Z Rating: moderate References: * bsc#1258706 Affected Products: * openSUSE Leap 15.6 An update that has one security fix can now be installed. ## Description: This update for redis7 fixes the following issue: * a user can manipulate data read by a connection by injecting sequences into a Redis error reply (bsc#1258706). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-667=1 openSUSE-SLE-15.6-2026-667=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * redis7-7.0.8-150600.8.22.1 * redis7-debugsource-7.0.8-150600.8.22.1 * redis7-debuginfo-7.0.8-150600.8.22.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1258706 . A moderate security update for redis7 on openSUSE Leap 15.6 addresses data manipulation issues via error injection.. redis7 security update, openSUSE Leap 15.6, moderate advisory. . LinuxSecurity.com Team
Feb 26, 2026
SuSE
202
security advisorymoderateSuSEubuntu LTS 22.04 redis6 Minor Data Handling Flaw 2022-0445-3
An update that has one security fix can now be installed.. # Security update for redis7 Announcement ID: SUSE-SU-2026:0667-1 Release Date: 2026-02-26T15:19:59Z Rating: moderate References: * bsc#1258706 Affected Products: * openSUSE Leap 15.6 An update that has one security fix can now be installed. ## Description: This update for redis7 fixes the following issue: * a user can manipulate data read by a connection by injecting sequences into a Redis error reply (bsc#1258706). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-667=1 openSUSE-SLE-15.6-2026-667=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * redis7-7.0.8-150600.8.22.1 * redis7-debugsource-7.0.8-150600.8.22.1 * redis7-debuginfo-7.0.8-150600.8.22.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1258706 . This update resolves a moderate security issue in redis7 for openSUSE Leap 15.6. Install the fix today.. openSUSE, redis, security update, software patch, data integrity. . LinuxSecurity.com Team
Feb 26, 2026
OpenSUSE
202
security advisorymoderatesecurity fixopenSUSE 15.7 MariaDB Enhanced Data Handling Update SUSE-SEC-2026-0722-3
An update that has one security fix can now be installed.. # Security update for redis Announcement ID: SUSE-SU-2026:0650-1 Release Date: 2026-02-25T16:33:35Z Rating: moderate References: * bsc#1258706 Affected Products: * openSUSE Leap 15.6 An update that has one security fix can now be installed. ## Description: This update for redis fixes the following issue: * a user can manipulate data read by a connection by injecting sequences into a Redis error reply (bsc#1258706). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-650=1 openSUSE-SLE-15.6-2026-650=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * redis-debugsource-7.2.4-150600.3.21.1 * redis-debuginfo-7.2.4-150600.3.21.1 * redis-7.2.4-150600.3.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1258706 . Update for openSUSE Leap with a moderate security fix for Redis addressing data manipulation risks. Important patch available.. openSUSE security patch, Redis data security, moderate security update, openSUSE Leap Redis. . LinuxSecurity.com Team
Feb 26, 2026
OpenSUSE
100
security advisorymoderateOpenSUSEopenSUSE 15.7 Redis Information Management Issue SUSE-SU-2026-0720-1
# Security update for redis Announcement ID: SUSE-SU-2026:0650-1 Release Date: 2026-02-25T16:33:35Z Rating: moderate References:. # Security update for redis Announcement ID: SUSE-SU-2026:0650-1 Release Date: 2026-02-25T16:33:35Z Rating: moderate References: * bsc#1258706 Affected Products: * openSUSE Leap 15.6 An update that has one security fix can now be installed. ## Description: This update for redis fixes the following issue: * a user can manipulate data read by a connection by injecting sequences into a Redis error reply (bsc#1258706). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-650=1 openSUSE-SLE-15.6-2026-650=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * redis-debugsource-7.2.4-150600.3.21.1 * redis-debuginfo-7.2.4-150600.3.21.1 * redis-7.2.4-150600.3.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1258706 . SUSE has released a moderate security update for redis to address data manipulation issues in openSUSE Leap 15.6.. openSUSE update, redis patch, data integrity issue, security fix, redis security advisory. . LinuxSecurity.com Team
Feb 26, 2026
SuSE
172
security advisorycriticalUbuntuUbuntu 25.10 Critical .NET Bypass Security Flaw USN-8025-1 CVE-2026-21218
.NET could be made to bypass security features.. ========================================================================== Ubuntu Security Notice USN-8025-1 February 11, 2026 dotnet8, dotnet9, dotnet10 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 22.04 LTS Summary: .NET could be made to bypass security features. Software Description: - dotnet10: .NET CLI tools and runtime - dotnet8: .NET CLI tools and runtime - dotnet9: .NET CLI tools and runtime Details: Kevin Jones discovered that the System.Security.Cryptography.Cose component in .NET did not properly handle certain missing special elements in input data. An attacker could possibly use this issue to bypass security checks and gain unauthorized access or perform data manipulation. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 aspnetcore-runtime-10.0 10.0.3-0ubuntu1~25.10.1 aspnetcore-runtime-8.0 8.0.24-0ubuntu1~25.10.1 aspnetcore-runtime-9.0 9.0.13-0ubuntu1~25.10.1 dotnet-host-10.0 10.0.3-0ubuntu1~25.10.1 dotnet-host-8.0 8.0.24-0ubuntu1~25.10.1 dotnet-host-9.0 9.0.13-0ubuntu1~25.10.1 dotnet-hostfxr-10.0 10.0.3-0ubuntu1~25.10.1 dotnet-hostfxr-8.0 8.0.24-0ubuntu1~25.10.1 dotnet-hostfxr-9.0 9.0.13-0ubuntu1~25.10.1 dotnet-runtime-10.0 10.0.3-0ubuntu1~25.10.1 dotnet-runtime-8.0 8.0.24-0ubuntu1~25.10.1 dotnet-runtime-9.0 9.0.13-0ubuntu1~25.10.1 dotnet-sdk-10.0 10.0.103-0ubuntu1~25.10.1 dotnet-sdk-8.0 8.0.124-0ubuntu1~25.10.1 dotnet-sdk-9.0 9.0.114-0ubuntu1~25.10.1 dotnet-sdk-aot-10.0 10.0.103-0ubuntu1~25.10.1 dotnet-sdk-aot-9.0 9.0.114-0ubuntu1~25.10.1 dotnet10 10.0.103-10.0.3-0ubuntu1~25.10.1 dotnet8 8.0.124-8.0.24-0ubuntu1~25.10.1 dotnet9 9.0.114-9.0.13-0ubuntu1~25.10.1 Ubuntu 22.04 LTS aspnetcore-runtime-8.0 8.0.24-0ubuntu1~22.04.1 dotnet-host-8.0 8.0.24-0ubuntu1~22.04.1 dotnet-hostfxr-8.0 8.0.24-0ubuntu1~22.04.1 dotnet-runtime-8.0 8.0.24-0ubuntu1~22.04.1 dotnet-sdk-8.0 8.0.124-0ubuntu1~22.04.1 dotnet8 8.0.124-8.0.24-0ubuntu1~22.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8025-1 CVE-2026-21218 Package Information: https://launchpad.net/ubuntu/+source/dotnet8/8.0.124-8.0.24-0ubuntu1~25.10.1 https://launchpad.net/ubuntu/+source/dotnet8/8.0.124-8.0.24-0ubuntu1~22.04.1 . Update your Ubuntu system with critical .NET patches to prevent security bypass and data manipulation issues for dotnet components.. dotnet security patch, Ubuntu .NET vulnerability, bypass security feature. . Severity: Critical. LinuxSecurity.com Team
Feb 12, 2026
•Critical
Ubuntu
203
security advisorysecurity issuecommand injectionMageia: 2020-0328 Moderate: Firejail Command Injection Threat
It was reported that firejail does not respect the end-of-options separator ("--"), allowing an attacker with control over the command line options of the sandboxed application, to write data to a specified file (CVE-2020-17367). It was reported that firejail when redirecting output via --output or . MGASA-2020-0328 - Updated firejail packages fix security vulnerability Publication date: 18 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0328.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-17367, CVE-2020-17368 It was reported that firejail does not respect the end-of-options separator ("--"), allowing an attacker with control over the command line options of the sandboxed application, to write data to a specified file (CVE-2020-17367). It was reported that firejail when redirecting output via --output or --output-stderr, concatenates all command line arguments into a single string that is passed to a shell. An attacker who has control over the command line arguments of the sandboxed application could take advantage of this flaw to run arbitrary commands (CVE-2020-17368). References: - https://bugs.mageia.org/show_bug.cgi?id=27059 - https://lists.debian.org/debian-security-announce/2020/msg00149.html - https://www.cve.org/CVERecord?id=CVE-2020-17367 - https://www.cve.org/CVERecord?id=CVE-2020-17368 SRPMS: - 7/core/firejail-0.9.56-2.2.mga7 . The recent Firejail patch MGASA-2020-0328 tackles a significant flaw. The update outlines the security risks and the steps taken to mitigate them.. Firejail Update, Mageia Security, Command Line Issues, Security Patch. . LinuxSecurity.com Team
Aug 18, 2020
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!