Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian LTS xz-utils Critical Buffer Overflow Vuln DLA-4690-1 CVE-2026-34743

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicecritical

Debian 5.0: DSA-4567-3 Severe: ImageMagick Buffer Overflow Notice

Inadequate EXIF property validation could lead to invalid memory accesses if executed on a maliciously crafted image, potentially including heap corruption and the execution of arbitrary code.. - ------------------------------------------------------------------------Debian Security Advisory DSA-1533-2 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Devin Carraway April 01, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------Package : exiftags Vulnerability : insufficient input sanitizing Problem type : local (remote) Debian-specific: no CVE Id(s) : CVE-2007-6354 CVE-2007-6355 CVE-2007-6356 Debian Bug : 457062 Christian Schmid and Meder Kydyraliev (Google Security) discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. This update merely adds the packages for Debian 3.1 sarge (oldstable) which were missing in the previous DSA. The Common Vulnerabilities and Exposures project identified the following three problems: CVE-2007-6354 Inadequate EXIF property validation could lead to invalid memory accesses if executed on a maliciously crafted image, potentially including heap corruption and the execution of arbitrary code. CVE-2007-6355 Flawed data validation could lead to integer overflows, causing other invalid memory accesses, also with the potential for memory corruption or arbitrary code execution. CVE-2007-6356 Cyclical EXIF image file directory (IFD) references could cause a denial of service (infinite loop). For the stable distribution (etch), these problems have been fixed in version 0.98-1.1+etch1. For the oldstable distribution (sarge), these problems have been fixed in version 0.98-1.1+0sarge1. For the unstable distribution (sid), these problems have been fixed in version 1.01-0.1. Upgradeinstructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge - --------------------------------Source archives: Size/MD5 checksum: 5131 3baa30a42f531580a502a3f3818ead56 Size/MD5 checksum: 50195 5a8a4057c4dac1d765da5f9ef4527bdf Size/MD5 checksum: 873 b85e0a4a382cac6a844af52e42c670bb alpha architecture (DEC Alpha) Size/MD5 checksum: 63406 d4b9ee67dcfb07ef1bc6ab143bd50496 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 56656 83688a1b3ec9c359a734f04bb985350d arm architecture (ARM) Size/MD5 checksum: 56064 eb60a8336c020a588458bb07fb57c1bc hppa architecture (HP PA RISC) Size/MD5 checksum: 59824 be52ea467c6651b65a371895948005b4 i386 architecture (Intel ia32) Size/MD5 checksum: 52514 1850fa2d6b54fe1029553605509ef7cf ia64 architecture (Intel ia64) Size/MD5 checksum: 76252 ce03fb64e959c8a2f24ad3744ca80fd5 m68k architecture (Motorola Mc680x0) Size/MD5 checksum: 53120 8c98a08982680a42e1c6aab585faf487 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 60736 14cbe8b15c5260b969961cf4107da991 mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 60040 3bdbbf546125a75c00800cb4039b25ab powerpc architecture (PowerPC) Size/MD5 checksum: 54812 8d33fe8cb068bf1f02ce0c4a8cd3c8d0 s390 architecture (IBM S/390) Size/MD5 checksum: 58208 9e7eeadcaefc2fe90aa11ece173348e2 Debian GNU/Linux 4.0 alias etch - -------------------------------Source archives: Size/MD5 checksum: 577 7b8743189acd9b4c0a7a25cabb5b753d Size/MD5 checksum: 5128 2f82244bd73046f31b07e77a7381dd15 Size/MD5 checksum: 50195 5a8a4057c4dac1d765da5f9ef4527bdf alpha architecture (DEC Alpha) Size/MD5 checksum: 62970 e481f4f8ce70b25a648a2d3678d48e07 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 57924 a5a6906e8d05beeffc763379a9c45ba2 arm architecture (ARM) Size/MD5 checksum: 56278 b06bf3f7722f034096719c7153fae5bd i386 architecture (Intel ia32) Size/MD5 checksum: 52558 ceed89333fd99a11d26765390ae35871 ia64 architecture (Intel ia64) Size/MD5 checksum: 75164 ca893189af6fe68536774bac7dd357a1 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 61010 a5415b5fb389903c20c431a245fcb3fb mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 60064 2961a652e3cb269a0671fe2281b2f017 powerpc architecture (PowerPC) Size/MD5 checksum: 54734 23a4389bb781e0a054c1687986ac1b1a s390 architecture (IBM S/390) Size/MD5 checksum: 58988 38bf328294b2afe633ef99a5b97f3f1e sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 56132 d2e1cd3190fe528527beaacc2ef6be3f These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian security patches improve exiftool addressing significant vulnerabilities such as buffer overflows and memory leaks.. Debian Security, Exiftags Issues, Security Updates, Critical Issues, Memory Problems. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 01, 2008 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticalheap corruption

Debian: DSA-1533-1 Critical: Exiftags Input Flaws Cause Code Execution

Inadequate EXIF property validation could lead to invalid memory accesses if executed on a maliciously crafted image, potentially including heap corruption and the execution of arbitrary code.. - ------------------------------------------------------------------------Debian Security Advisory DSA-1533-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Devin Carraway March 27, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------Package : exiftags Vulnerability : insufficient input sanitizing Problem type : local (remote) Debian-specific: no CVE Id(s) : CVE-2007-6354 CVE-2007-6355 CVE-2007-6356 Debian Bug : 457062 Christian Schmid and Meder Kydyraliev (Google Security) discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. The Common Vulnerabilities and Exposures project identified the following three problems: CVE-2007-6354 Inadequate EXIF property validation could lead to invalid memory accesses if executed on a maliciously crafted image, potentially including heap corruption and the execution of arbitrary code. CVE-2007-6355 Flawed data validation could lead to integer overflows, causing other invalid memory accesses, also with the potential for memory corruption or arbitrary code execution. CVE-2007-6356 Cyclical EXIF image file directory (IFD) references could cause a denial of service (infinite loop). For the stable distribution (etch), these problems have been fixed in version 0.98-1.1+etch1. The old stable distribution (sarge) cannot be fixed synchronously with the Etch version due to a technical limitation in the Debian archive management scripts. For the unstable distribution (sid), these problems have been fixed in version 1.01-0.1. We recommend that you upgrade your exiftags package. Debian 4.0(stable) - -------------------Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 577 7b8743189acd9b4c0a7a25cabb5b753d Size/MD5 checksum: 5128 2f82244bd73046f31b07e77a7381dd15 Size/MD5 checksum: 50195 5a8a4057c4dac1d765da5f9ef4527bdf alpha architecture (DEC Alpha) Size/MD5 checksum: 62970 e481f4f8ce70b25a648a2d3678d48e07 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 57924 a5a6906e8d05beeffc763379a9c45ba2 arm architecture (ARM) Size/MD5 checksum: 56278 b06bf3f7722f034096719c7153fae5bd i386 architecture (Intel ia32) Size/MD5 checksum: 52558 ceed89333fd99a11d26765390ae35871 ia64 architecture (Intel ia64) Size/MD5 checksum: 75164 ca893189af6fe68536774bac7dd357a1 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 61010 a5415b5fb389903c20c431a245fcb3fb mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 60064 2961a652e3cb269a0671fe2281b2f017 powerpc architecture (PowerPC) Size/MD5 checksum: 54734 23a4389bb781e0a054c1687986ac1b1a s390 architecture (IBM S/390) Size/MD5 checksum: 58988 38bf328294b2afe633ef99a5b97f3f1e sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 56132 d2e1cd3190fe528527beaacc2ef6be3f These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Debian Security Notice DSA-1533-1 provides solutions for exiftags, tackling numerous significant vulnerabilities.. Debian Advisory, Exiftags Issues, Input Flaws, Memory Corruption. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 27, 2008 •Critical Debian
Banner 2 1028x280 1708121730 1 1771599631
91
Ls Advisories Gentoo Esm H240
Price Tag%201security advisorydenial of servicegentoo

Gentoo: GLSA-200712-17 Normal: Exiftags Arbitrary Code Threats

Multiple vulnerabilities in exiftags possibly allow for the execution of arbitrary code or a Denial of Service.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200712-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: exiftags: Multiple vulnerabilities Date: December 29, 2007 Bugs: #202354 ID: 200712-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities in exiftags possibly allow for the execution of arbitrary code or a Denial of Service. Background ========= exiftags is a library and set of tools for parsing, editing and saving Exif metadata from images. Exif, the Exchangeable image file format, specifies the addition of metadata tags to JPEG, TIFF and RIFF files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/exiftags < 1.01 > = 1.01 Description ========== Meder Kydyraliev (Google Security) discovered that Exif metadata is not properly sanitized before being processed, resulting in illegal memory access in the postprop() and other functions (CVE-2007-6354). He also discovered integer overflow vulnerabilities in the parsetag() and other functions (CVE-2007-6355) and an infinite recursion in the readifds() function caused by recursive IFD references (CVE-2007-6356). Impact ===== An attacker could entice the user of an application making use of exiftags or an application included in exiftags to load an image file with specially crafted Exiftags, possibly resulting in the execution of arbitrary code with the privileges of the user running the application or a Denial of Service. Workaround ========= There is no known workaround at this time. Resolution ========= All exiftags users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-gfx/exiftags-1.01" References ========= [ 1 ] CVE-2007-6354 https://www.cve.org/CVERecord?id=CVE-2007-6354 [ 2 ] CVE-2007-6355 https://www.cve.org/CVERecord?id=CVE-2007-6355 [ 3 ] CVE-2007-6356 https://www.cve.org/CVERecord?id=CVE-2007-6356 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200712-17 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2007 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Mozilla - iD8DBQFHdlLBuhJ+ozIKI5gRAtz/AJwJMT4Gl3RaLl9RhM3nldvZg1G5GwCfb162 ES9/nzyGoX/7sZHZM/e2VS0=UvnK -----END PGP SIGNATURE----- . Several security flaws in exiftags may result in unauthorized code execution or cause Denial of Service. It is recommended to apply updates.. Exiftags Vulnerabilities, Gentoo Security Advisory, Arbitrary Code, Denial of Service, Image Metadata. . LinuxSecurity.com Team

Calendar%202 Dec 29, 2007 Gentoo
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics