Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 0 articles for you...
172
security advisoryUbuntuglanceUbuntu 20.04 18.04 OpenStack Glance Security Flaws USN-8199-1
Several security issues were fixed in OpenStack Glance.. ========================================================================== Ubuntu Security Notice USN-8199-1 April 22, 2026 glance vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in OpenStack Glance. Software Description: - glance: OpenStack Image Registry and Delivery Service Details: Martin Kaesberger discovered that OpenStack Glance's image processing could return the contents of arbitrary files. An attacker could possibly use this issue to exfiltrate sensitive data. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-32498) Hyeongeun Ji and Abhishek Kekane discovered several server-side request forgery vulnerabilities in OpenStack Glance's image import. An attacker could possibly use this issue to bypass URL validation checks and redirect to internal services. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-34881) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS glance 2:20.2.0-0ubuntu1.2+esm2 Available with Ubuntu Pro glance-api 2:20.2.0-0ubuntu1.2+esm2 Available with Ubuntu Pro glance-common 2:20.2.0-0ubuntu1.2+esm2 Available with Ubuntu Pro python3-glance 2:20.2.0-0ubuntu1.2+esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS glance 2:16.0.1-0ubuntu1.1+esm2 Available with Ubuntu Pro glance-api 2:16.0.1-0ubuntu1.1+esm2 Available with Ubuntu Pro glance-common 2:16.0.1-0ubuntu1.1+esm2 Available with Ubuntu Pro glance-registry 2:16.0.1-0ubuntu1.1+esm2 Available with Ubuntu Pro python-glance 2:16.0.1-0ubuntu1.1+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS glance 2:12.0.0-0ubuntu2+esm1 Available with Ubuntu Pro glance-api 2:12.0.0-0ubuntu2+esm1 Available with Ubuntu Pro glance-common 2:12.0.0-0ubuntu2+esm1 Available with Ubuntu Pro glance-glare 2:12.0.0-0ubuntu2+esm1 Available with Ubuntu Pro glance-registry 2:12.0.0-0ubuntu2+esm1 Available with Ubuntu Pro python-glance 2:12.0.0-0ubuntu2+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8199-1 CVE-2024-32498, CVE-2026-34881 . Review of Ubuntu's USN-8199-1 highlighting fixed security issues in OpenStack Glance affecting multiple LTS versions.. OpenStack Glance security, Ubuntu vulnerabilities, image processing issues. . Severity: Important. LinuxSecurity.com Team
Apr 27, 2026
•Important
Ubuntu
87
security advisorycriticaldebianDebian: webkit2gtk Critical Info Exfiltration DSA-6074-1 CVE-2025-13947
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-13947 Janet Black discovered that a website may be able to exfiltrate sensitive system information.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6074-1
Dec 09, 2025
•Critical
Debian
197
security advisoryDebianmalicious inputDebian 11: DLA-4185-1 Critical: yelp-xsl Script Execution Threat
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4185-1
May 28, 2025
•Critical
Debian LTS
197
security advisorydebianGnomeDebian 11 bullseye: DLA-4184-1 moderate: Yelp script execution risk
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4184-1
May 28, 2025
Debian LTS
172
security advisorysoftware updateUbuntuUbuntu 22.04 LTS USN-7161-2: critical Docker authorization issue
Several security issues were fixed in Docker.. ========================================================================== Ubuntu Security Notice USN-7161-2 February 18, 2025 Docker vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Docker. Software Description: - docker.io-app: Linux container runtime - docker.io: Linux container runtime Details: USN-7161-1 fixed CVE-2024-29018 in Ubuntu 24.04 LTS. This update fixes it in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. USN-7161-1 fixed CVE-2024-41110 in Ubuntu 24.10, Ubuntu 24.04 LTS, and Ubuntu 18.04 LTS. This updates fixes it in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Original advisory details: Yair Zak discovered that Docker could unexpectedly forward DNS requests from internal networks in an unexpected manner. An attacker could possibly use this issue to exfiltrate data by encoding information in DNS queries to controlled nameservers. This issue was only addressed in Ubuntu 24.04 LTS. (CVE-2024-29018) Cory Snider discovered that Docker did not properly handle authorization plugin request processing. An attacker could possibly use this issue to bypass authorization controls by forwarding API requests without their full body, leading to unauthorized actions. (CVE-2024-41110) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS docker.io 26.1.3-0ubuntu1~22.04.1+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS docker.io 26.1.3-0ubuntu1~20.04.1+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS docker.io 20.10.21-0ubuntu1~18.04.3+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS docker.io 18.09.7-0ubuntu1~16.04.9+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7161-2 https://ubuntu.com/security/notices/USN-7161-1 CVE-2024-29018, CVE-2024-41110 . Recent Docker vulnerabilities in Ubuntu have impacted several versions. To address these security concerns, apply the necessary updates promptly.. Docker Security, Ubuntu Updates, Software Fix, Data Exfiltration, Authorization Issues. . Severity: Critical. LinuxSecurity.com Team
Feb 18, 2025
•Critical
Ubuntu
203
security advisorysecurity updatepath traversalMageia 9: MGASA-2025-0035 critical: LibreOffice security threats
Path traversal leading to arbitrary .ttf file write. (CVE-2024-12425) URL fetching can be used to exfiltrate arbitrary INI file values and environment variables. (CVE-2024-12426) References: . MGASA-2025-0035 - Updated libreoffice packages fix security vulnerabilities Publication date: 04 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0035.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-12425, CVE-2024-12426 Path traversal leading to arbitrary .ttf file write. (CVE-2024-12425) URL fetching can be used to exfiltrate arbitrary INI file values and environment variables. (CVE-2024-12426) References: - https://bugs.mageia.org/show_bug.cgi?id=33941 - https://lists.debian.org/debian-security-announce/2025/msg00008.html - https://www.libreoffice.org/about-us/security/advisories/cve-2024-12425/ - https://www.libreoffice.org/about-us/security/advisories/cve-2024-12426/ - https://ubuntu.com/security/notices/USN-7228-1 - https://www.cve.org/CVERecord?id=CVE-2024-12425 - https://www.cve.org/CVERecord?id=CVE-2024-12426 SRPMS: - 9/core/libreoffice-24.2.7.2-1.mga9 . Recent LibreOffice updates for Mageia address security vulnerabilities concerning document manipulation and data leakage.. Mageia Security Update, LibreOffice Security Advisory, Path Traversal Fix, Arbitrary File Write. . Severity: Critical. LinuxSecurity.com Team
Feb 04, 2025
•Critical
Mageia
100
security advisorydenial of servicecriticalSUSE: 2024:1944-1 Important: Webkit2gtk3 Denial of Service Risk
* bsc#1222010 * bsc#1225071 Cross-References: * CVE-2023-42843 . # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2024:1944-1 Rating: important References: * bsc#1222010 * bsc#1225071 Cross-References: * CVE-2023-42843 * CVE-2023-42950 * CVE-2023-42956 * CVE-2024-23252 * CVE-2024-23254 * CVE-2024-23263 * CVE-2024-23280 * CVE-2024-23284 * CVE-2024-27834 CVSS scores: * CVE-2023-42843 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2023-42950 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-42950 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-42956 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-42956 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-23252 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-23254 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-23263 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2024-23280 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2024-23284 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2024-27834 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves nine vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: * Update to version 2.44.2 (bsc#1225071): * CVE-2024-23252: Fixed a vulnerability where processed web content may lead to a denial-of-service. (bsc#1222010) * CVE-2024-23254: Fixed a vulnerability where a malicious website may exfiltrate audio data cross-origin.(bsc#1222010) * CVE-2024-23263: Fixed a vulnerability where processed maliciously crafted web content may prevent Content Security Policy from being enforced. (bsc#1222010) * CVE-2024-23280: Fixed a vulnerability where a maliciously crafted webpage may be able to fingerprint the user. (bsc#1222010) * CVE-2024-23284: Fixed a vulnerability where processed maliciously crafted web content may prevent Content Security Policy from being enforced. (bsc#1222010) * CVE-2023-42950: Fixed a vulnerability where processed maliciously crafted web content may lead to arbitrary code execution. (bsc#1222010) * CVE-2023-42956: Fixed a vulnerability where processed web content may lead to a denial-of-service. (bsc#1222010) * CVE-2023-42843: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1222010) * CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1944=1 openSUSE-SLE-15.6-2024-1944=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1944=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-1944=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1944=1 ## Package List: * openSUSE Leap 15.6 (noarch) * WebKitGTK-4.1-lang-2.44.2-150600.12.3.1 * WebKitGTK-6.0-lang-2.44.2-150600.12.3.1 * WebKitGTK-4.0-lang-2.44.2-150600.12.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-JavaScriptCore-4_1-2.44.2-150600.12.3.1 * webkit2gtk3-soup2-devel-2.44.2-150600.12.3.1 * webkit-jsc-6.0-debuginfo-2.44.2-150600.12.3.1 * webkit2gtk-4_0-injected-bundles-2.44.2-150600.12.3.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150600.12.3.1 * libjavascriptcoregtk-6_0-1-2.44.2-150600.12.3.1 * webkit2gtk4-debugsource-2.44.2-150600.12.3.1 * webkit-jsc-4-debuginfo-2.44.2-150600.12.3.1 * webkit2gtk4-devel-2.44.2-150600.12.3.1 * webkit2gtk3-minibrowser-debuginfo-2.44.2-150600.12.3.1 * webkitgtk-6_0-injected-bundles-2.44.2-150600.12.3.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_0-18-2.44.2-150600.12.3.1 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150600.12.3.1 * webkit-jsc-4.1-debuginfo-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150600.12.3.1 * typelib-1_0-WebKit2-4_1-2.44.2-150600.12.3.1 * webkit2gtk3-soup2-debugsource-2.44.2-150600.12.3.1 * typelib-1_0-WebKit-6_0-2.44.2-150600.12.3.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.44.2-150600.12.3.1 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150600.12.3.1 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150600.12.3.1 * webkit2gtk4-minibrowser-debuginfo-2.44.2-150600.12.3.1 * typelib-1_0-WebKit2-4_0-2.44.2-150600.12.3.1 * webkit2gtk-4_1-injected-bundles-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_1-0-2.44.2-150600.12.3.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150600.12.3.1 * webkit2gtk3-debugsource-2.44.2-150600.12.3.1 * webkit2gtk4-minibrowser-2.44.2-150600.12.3.1 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150600.12.3.1 * webkit-jsc-4-2.44.2-150600.12.3.1 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150600.12.3.1 * webkit-jsc-4.1-2.44.2-150600.12.3.1 * webkit2gtk3-devel-2.44.2-150600.12.3.1 * webkit2gtk3-minibrowser-2.44.2-150600.12.3.1 * typelib-1_0-JavaScriptCore-6_0-2.44.2-150600.12.3.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.44.2-150600.12.3.1 * libwebkitgtk-6_0-4-2.44.2-150600.12.3.1 * webkit-jsc-6.0-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150600.12.3.1 * libwebkit2gtk-4_1-0-2.44.2-150600.12.3.1 * libwebkit2gtk-4_0-37-2.44.2-150600.12.3.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150600.12.3.1 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150600.12.3.1 * webkit2gtk3-soup2-minibrowser-2.44.2-150600.12.3.1 * openSUSE Leap 15.6 (x86_64) * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_0-18-32bit-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_1-0-32bit-2.44.2-150600.12.3.1 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.44.2-150600.12.3.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.44.2-150600.12.3.1 * libwebkit2gtk-4_0-37-32bit-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.44.2-150600.12.3.1 * libwebkit2gtk-4_1-0-32bit-2.44.2-150600.12.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.44.2-150600.12.3.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_0-18-64bit-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_1-0-64bit-2.44.2-150600.12.3.1 * libwebkit2gtk-4_0-37-64bit-2.44.2-150600.12.3.1 * libwebkit2gtk-4_1-0-64bit-2.44.2-150600.12.3.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.44.2-150600.12.3.1 * Basesystem Module 15-SP6 (noarch) * WebKitGTK-6.0-lang-2.44.2-150600.12.3.1 * WebKitGTK-4.0-lang-2.44.2-150600.12.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-soup2-devel-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_0-18-2.44.2-150600.12.3.1 * webkit2gtk-4_0-injected-bundles-2.44.2-150600.12.3.1 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150600.12.3.1 * typelib-1_0-WebKit2-4_0-2.44.2-150600.12.3.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150600.12.3.1 *webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150600.12.3.1 * webkit2gtk3-soup2-debugsource-2.44.2-150600.12.3.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.44.2-150600.12.3.1 * libwebkitgtk-6_0-4-2.44.2-150600.12.3.1 * libjavascriptcoregtk-6_0-1-2.44.2-150600.12.3.1 * libwebkit2gtk-4_0-37-2.44.2-150600.12.3.1 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150600.12.3.1 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150600.12.3.1 * webkit2gtk4-debugsource-2.44.2-150600.12.3.1 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150600.12.3.1 * webkitgtk-6_0-injected-bundles-2.44.2-150600.12.3.1 * Desktop Applications Module 15-SP6 (noarch) * WebKitGTK-4.1-lang-2.44.2-150600.12.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-devel-2.44.2-150600.12.3.1 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150600.12.3.1 * webkit2gtk-4_1-injected-bundles-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_1-0-2.44.2-150600.12.3.1 * typelib-1_0-WebKit2-4_1-2.44.2-150600.12.3.1 * webkit2gtk3-debugsource-2.44.2-150600.12.3.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150600.12.3.1 * libwebkit2gtk-4_1-0-2.44.2-150600.12.3.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150600.12.3.1 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150600.12.3.1 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150600.12.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * typelib-1_0-JavaScriptCore-6_0-2.44.2-150600.12.3.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.44.2-150600.12.3.1 * webkit2gtk4-debugsource-2.44.2-150600.12.3.1 * typelib-1_0-WebKit-6_0-2.44.2-150600.12.3.1 * webkit2gtk4-devel-2.44.2-150600.12.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42843.html * https://www.suse.com/security/cve/CVE-2023-42950.html * https://www.suse.com/security/cve/CVE-2023-42956.html * https://www.suse.com/security/cve/CVE-2024-23252.html * https://www.suse.com/security/cve/CVE-2024-23254.html * https://www.suse.com/security/cve/CVE-2024-23263.html * https://www.suse.com/security/cve/CVE-2024-23280.html * https://www.suse.com/security/cve/CVE-2024-23284.html * https://www.suse.com/security/cve/CVE-2024-27834.html * https://bugzilla.suse.com/show_bug.cgi?id=1222010 * https://bugzilla.suse.com/show_bug.cgi?id=1225071 . Address a series of critical concerns in webkit2gtk3 as per SUSE's newest security patch. Strengthen your system's safety immediately!. SUSE Linux, webkit2gtk3, security update, critical patch, software fix. . Severity: Important. LinuxSecurity.com Team
Jun 10, 2024
•Important
SuSE
87
security advisoryupdatecriticalDebian: DSA-5357-1 Critical Update for Git Exfiltration Risk
Brief introduction CVE-2023-22490 . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5357-1
Feb 23, 2023
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!