Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 41 articles for you...
202
security advisorymoderateinformation leakUbuntu 22 python-cryptography High Security Patch for CVE-2025-67890
An update that solves one vulnerability and has 3 bug fixes can now be installed.. openSUSE security update: security update for python-pynacl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20650-1 Rating: moderate References: * bsc#1161557 * bsc#1199282 * bsc#1255764 Cross-References: * CVE-2025-69277 CVSS scores: * CVE-2025-69277 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2025-69277 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has 3 bug fixes can now be installed. Description: This update for python-PyNaCl fixes the following issues: Security fixes: - CVE-2025-69277: incorrect validation of elliptic curve points certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point function (bsc#1255764). Other fixes: - update to 1.6.2 (bsc#1255764, CVE-2025-69277): * Updated libsodium to 1.0.20-stable (2025-12-31 build) - Update to 1.6.1 * The ``MAKE`` environment variable can now be used to specify the ``make`` binary that should be used in the build process. - update to 1.6.0: * BACKWARDS INCOMPATIBLE: Removed support for Python 3.6 and 3.7. * Added support for the low level AEAD AES bindings. * Added support for crypto_core_ed25519_from_uniform. * Update libsodium to 1.0.20-stable (2025-08-27 build). * Added support for free-threaded Python 3.14. * Added support for Windows on ARM wheels. - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - python-PyNaCl requires python-cffi [bsc#1161557] Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-658=1 PackageList: - openSUSE Leap 16.0: python313-PyNaCl-1.6.2-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2025-69277.html . An openSUSE security update for python-PyNaCl fixes a critical data validation flaw affecting cryptographic functions.. openSUSE security, python-PyNaCl update, data validation flaw, openSUSE Leap 16.0, CVE-2025-69277. . LinuxSecurity.com Team
Apr 30, 2026
OpenSUSE
202
security advisorybuffer overrunimportantopenSUSE Leap 16.0 PostgreSQL17 Important Security Update 2026-20388-1
An update that solves 4 vulnerabilities and has 5 bug fixes can now be installed.. openSUSE security update: security update for postgresql17 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20388-1 Rating: important References: * bsc#1258008 * bsc#1258009 * bsc#1258010 * bsc#1258011 * bsc#1258754 Cross-References: * CVE-2026-2003 * CVE-2026-2004 * CVE-2026-2005 * CVE-2026-2006 CVSS scores: * CVE-2026-2003 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-2004 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2005 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2006 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 4 vulnerabilities and has 5 bug fixes can now be installed. Description: This update for postgresql17 fixes the following issues: - Update to version 17.9. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached to operators that accept unexpected data types. (bsc#1258009) - CVE-2026-2005: Fix buffer overrun in contrib/pgcrypto's PGP decryption functions. (bsc#1258010) - CVE-2026-2006: Fix inadequate validation of multibyte character lengths. (bsc#1258011) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-406=1 Package List: - openSUSE Leap 16.0: postgresql17-17.9-160000.1.1 postgresql17-contrib-17.9-160000.1.1 postgresql17-devel-17.9-160000.1.1 postgresql17-docs-17.9-160000.1.1 postgresql17-llvmjit-17.9-160000.1.1 postgresql17-llvmjit-devel-17.9-160000.1.1 postgresql17-plperl-17.9-160000.1.1 postgresql17-plpython-17.9-160000.1.1 postgresql17-pltcl-17.9-160000.1.1 postgresql17-server-17.9-160000.1.1 postgresql17-server-devel-17.9-160000.1.1 postgresql17-test-17.9-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-2003.html * https://www.suse.com/security/cve/CVE-2026-2004.html * https://www.suse.com/security/cve/CVE-2026-2005.html * https://www.suse.com/security/cve/CVE-2026-2006.html . Available now are important updates for openSUSE Leap 16.0, addressing critical security issues in postgresql17.. opensuse security, postgresql17 update, important patch, database security. . Severity: Important. LinuxSecurity.com Team
Mar 25, 2026
•Important
OpenSUSE
203
security advisorybuffer overflowOpenSSLMageia 9 OpenSSL Critical Memory Leak Patch MGASA-2026-0030
MGASA-2026-0029 - Updated openssl packages fix security vulnerabilities. MGASA-2026-0029 - Updated openssl packages fix security vulnerabilities Publication date: 30 Jan 2026 URL: https://advisories.mageia.org/MGASA-2026-0029.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-15467, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796 Description: Stack buffer overflow in CMS AuthEnvelopedData parsing. (CVE-2025-15467) Heap out-of-bounds write in BIO_f_linebuffer on short writes. (CVE-2025-68160) Unauthenticated/unencrypted trailing bytes with low-level OCB function calls. (CVE-2025-69418) Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion. (CVE-2025-69419) Missing ASN1_TYPE validation in TS_RESP_verify_response() function. (CVE-2025-69420) NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function. (CVE-2025-69421) Missing ASN1_TYPE validation in PKCS#12 parsing. (CVE-2026-22795) ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function. (CVE-2026-22796) References: - https://bugs.mageia.org/show_bug.cgi?id=35077 - https://www.openwall.com/lists/oss-security/2026/01/27/5 - https://www.openwall.com/lists/oss-security/2026/01/27/7 - https://openssl-library.org/news/secadv/20260127.txt - https://www.cve.org/CVERecord?id=CVE-2025-15467 - https://www.cve.org/CVERecord?id=CVE-2025-68160 - https://www.cve.org/CVERecord?id=CVE-2025-69418 - https://www.cve.org/CVERecord?id=CVE-2025-69419 - https://www.cve.org/CVERecord?id=CVE-2025-69420 - https://www.cve.org/CVERecord?id=CVE-2025-69421 - https://www.cve.org/CVERecord?id=CVE-2026-22795 - https://www.cve.org/CVERecord?id=CVE-2026-22796 SRPMS: - 9/core/openssl-3.0.19-1.mga9 . Updated OpenSSL packages for Mageia address important security issues, necessitating prompt action for system integrity.. OpenSSL Mageia security important flaws updates. . Severity: Important. LinuxSecurity.com Team
Jan 30, 2026
•Important
Mageia
89
security advisoryfedorapatch releaseFedora 43: python-pydantic 2.12.4 Update Fixes Data Validation Issues
Pydantic 2.12.4 This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-312ac3e645 2025-11-10 00:46:08.034331+00:00 -------------------------------------------------------------------------------- Name : python-pydantic Product : Fedora 43 Version : 2.12.4 Release : 1.fc43 URL : https://github.com/pydantic/pydantic Summary : Data validation using Python type hinting Description : Data validation and settings management using python type hinting. -------------------------------------------------------------------------------- Update Information: Pydantic 2.12.4 This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types. This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any. https://github.com/pydantic/pydantic/releases/tag/v2.12.4 uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addresses potential sources of ZIP parsing differentials between uv and other Python packaging tooling. See GHSA-pqhf-p39g-3x64 for additional details. https://github.com/astral-sh/uv/releases/tag/0.9.6 ruff 0.14.3 https://github.com/astral-sh/ruff/releases/tag/0.14.3 Update rust-get-size2/rust-get-size-derive2 to 0.7.1 (implement GetSize for RefCell). Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1. Update rust-regex to 1.12.2 and rust-regex-automata to0.4.13. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 6 2025 Benjamin A. Beasley - 2.12.4-1 - Update to 2.12.4 (close RHBZ#2412643) * Wed Nov 5 2025 Lumir Balhar - 2.12.3-2 - Fix compatibility with cloudpickle 3.1.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2403244 - rust-regex-1.12.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2403244 [ 2 ] Bug #2403245 - rust-regex-automata-0.4.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=2403245 [ 3 ] Bug #2406419 - rust-get-size2-0.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2406419 [ 4 ] Bug #2406420 - rust-get-size-derive2-0.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2406420 [ 5 ] Bug #2411957 - python-cloudpickle-3.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411957 [ 6 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411978 [ 7 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411979 [ 8 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411980 [ 9 ] Bug #2411981 - rust-reqsign-0.18.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411981 [ 10 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411982 [ 11 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411983 [ 12 ] Bug #2412643 - python-pydantic-2.12.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2412643 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnfupgrade --advisory FEDORA-2025-312ac3e645' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 10, 2025
•Informational
Fedora
89
security advisorysecurity issuefedoraFedora 43: python-pydantic Security Advisory 2025-4154ea83d0
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydantic 2.12.3. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-4154ea83d0 2025-11-05 02:09:57.817569+00:00 -------------------------------------------------------------------------------- Name : python-pydantic Product : Fedora 43 Version : 2.12.3 Release : 1.fc43 URL : https://github.com/pydantic/pydantic Summary : Data validation using Python type hinting Description : Data validation and settings management using python type hinting. -------------------------------------------------------------------------------- Update Information: uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydantic 2.12.3 Blog post maturin 1.9.6 https://github.com/PyO3/maturin/blob/v1.9.6/Changelog.md python-typing-inspection 0.4.2 (2025-10-01) Add typing_objects.is_noextraitems() python-jiter 0.11.0 https://github.com/pydantic/jiter/releases/tag/v0.11.0 python-pydantic-extra-types 2.10.6 https://github.com/pydantic/pydantic-extra-types/releases/tag/v2.10.6 Typer 0.20.0 Features \u2728 Enable command suggestions on typo by default. Upgrades \u2b06\ufe0f Add (official) support for Python 3.14. Internal Assorted small enhancements. FastAPI 0.120.1 Upgrades \u2b06\ufe0f Bump Starlette to
Nov 05, 2025
•Critical
Fedora
89
security advisoryfedoraimportantFedora 42 chromium critical: CVE-2025-6555, 6556, 6557 issues
Update to 138.0.7204.49 CVE-2025-6555: Use after free in Animation CVE-2025-6556: Insufficient policy enforcement in Loader CVE-2025-6557: Insufficient data validation in DevTools. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-1a665fa5c8 2025-06-30 02:21:06.058664+00:00 -------------------------------------------------------------------------------- Name : chromium Product : Fedora 42 Version : 138.0.7204.49 Release : 1.fc42 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Update to 138.0.7204.49 CVE-2025-6555: Use after free in Animation CVE-2025-6556: Insufficient policy enforcement in Loader CVE-2025-6557: Insufficient data validation in DevTools -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 24 2025 Than Ngo - 138.0.7204.49-1 - Update to 138.0.7204.49 * CVE-2025-6555: Use after free in Animation * CVE-2025-6556: Insufficient policy enforcement in Loader * CVE-2025-6557: Insufficient data validation in DevTools -------------------------------------------------------------------------------- References: [ 1 ] Bug #2374686 - CVE-2025-6555 chromium: Chromium use after free vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374686 [ 2 ] Bug #2374687 - CVE-2025-6557 chromium: Chromium data validation vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374687 [ 3 ] Bug #2374688 - CVE-2025-6556 chromium: Chromium policy enforcement vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374688 [ 4 ] Bug #2374689 - CVE-2025-6555 chromium: Chromium use after freevulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374689 [ 5 ] Bug #2374690 - CVE-2025-6556 chromium: Chromium policy enforcement vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374690 [ 6 ] Bug #2374691 - CVE-2025-6557 chromium: Chromium data validation vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374691 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-1a665fa5c8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 30, 2025
•Critical
Fedora
89
security advisoryfedoracriticalFedora 41 FEDORA-2025-e4b1668bdd critical: chromium use after free
Update to 138.0.7204.49 CVE-2025-6555: Use after free in Animation CVE-2025-6556: Insufficient policy enforcement in Loader CVE-2025-6557: Insufficient data validation in DevTools. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-e4b1668bdd 2025-06-28 01:45:12.871378+00:00 -------------------------------------------------------------------------------- Name : chromium Product : Fedora 41 Version : 138.0.7204.49 Release : 1.fc41 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Update to 138.0.7204.49 CVE-2025-6555: Use after free in Animation CVE-2025-6556: Insufficient policy enforcement in Loader CVE-2025-6557: Insufficient data validation in DevTools -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 24 2025 Than Ngo - 138.0.7204.49-1 - Update to 138.0.7204.49 * CVE-2025-6555: Use after free in Animation * CVE-2025-6556: Insufficient policy enforcement in Loader * CVE-2025-6557: Insufficient data validation in DevTools -------------------------------------------------------------------------------- References: [ 1 ] Bug #2374686 - CVE-2025-6555 chromium: Chromium use after free vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374686 [ 2 ] Bug #2374687 - CVE-2025-6557 chromium: Chromium data validation vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374687 [ 3 ] Bug #2374688 - CVE-2025-6556 chromium: Chromium policy enforcement vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374688 [ 4 ] Bug #2374689 - CVE-2025-6555 chromium: Chromium use after freevulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374689 [ 5 ] Bug #2374690 - CVE-2025-6556 chromium: Chromium policy enforcement vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374690 [ 6 ] Bug #2374691 - CVE-2025-6557 chromium: Chromium data validation vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2374691 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-e4b1668bdd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 28, 2025
•Critical
Fedora
202
security advisoryimportantheap overflowopenSUSE: 2025:0145-1 important: chromium heap overflow fix
An update that fixes four vulnerabilities is now available. . openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0145-1 Rating: important References: #1242153 Cross-References: CVE-2025-4050 CVE-2025-4051 CVE-2025-4052 CVE-2025-4096 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 136.0.7103.48 (stable release 2025-04-29) (boo#1242153) * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11 * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09 * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1 * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10 - bump esbuild from 0.24.0 to 0.25.1 * Fix incorrect paths in inline source maps (#4070, #4075, #4105) * Fix invalid generated source maps (#4080, #4082, #4104, #4107) * Fix a regression with non-file source map paths (#4078) * Update Go from 1.23.5 to 1.23.7 (#4076, #4077) - Chromium 135.0.7049.114 (stable release 2025-04-22) * stability fixes Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2025-145=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): chromedriver-136.0.7103.59-bp156.2.113.2 chromium-136.0.7103.59-bp156.2.113.2 References: https://www.suse.com/security/cve/CVE-2025-4050.html https://www.suse.com/security/cve/CVE-2025-4051.html https://www.suse.com/security/cve/CVE-2025-4052.html https://www.suse.com/security/cve/CVE-2025-4096.html https://bugzilla.suse.com/1242153 . Critical announcement regarding openSUSE's chromium that addresses several vulnerabilities, enhancing overall stability and reducing potential threats.. openSUSE chromium patch, software update, security issues. . Severity: Important. LinuxSecurity.com Team
May 06, 2025
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!