Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 2,475 articles for you...
91
security advisorygentooprivilege escalationGentoo: GLSA-202507-01 high: sudo privilege escalation attack
Multiple vulnerabilities have been discovered in sudo, the worst of which could result in privilege escalation.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202507-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: sudo: Privilege escalation Date: July 01, 2025 Bugs: #959314 ID: 202507-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in sudo, the worst of which could result in privilege escalation. Background ========== sudo allows a system administrator to give users the ability to run commands as other users. Affected packages ================= Package Vulnerable Unaffected -------------- ------------ ------------ app-admin/sudo < 1.9.17_p1 > = 1.9.17_p1 Description =========== Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details. Impact ====== An attacker can escalate privileges to root by providing a special argument to sudo's --chroot (which is used for chroot purposes). Please review the referenced CVE identifier for details. Workaround ========== There is no known workaround at this time. Resolution ========== All sudo users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-admin/sudo-1.9.17_p1" References ========== [ 1 ] CVE-2025-32462 https://nvd.nist.gov/vuln/detail/CVE-2025-32462 [ 2 ] CVE-2025-32463 https://nvd.nist.gov/vuln/detail/CVE-2025-32463 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202507-01 Concerns? ========= Security is a primaryfocus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jul 01, 2025
Gentoo
91
security advisorygentoocode executionGentoo: GLSA-202506-13 high: Konsole remote command execution
An input sanitization flaw in Konsole might allow remote attackers to execute commands via a malicious URL. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Konsole: Code execution Date: June 15, 2025 Bugs: #957792 ID: 202506-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== An input sanitization flaw in Konsole might allow remote attackers to execute commands via a malicious URL Background ========== Konsole is KDE's terminal emulator. Affected packages ================= Package Vulnerable Unaffected ---------------- ------------ ------------- kde-apps/konsole < 24.12.3-r1 > = 24.12.3-r1 Description =========== Konsole supports loading URLs from the scheme handlers such as telnet://URL. This can be executed regardless of whether the telnet binary is available. It would fallback to bash in that case and execute arbitrary code. Impact ====== Clicking a malicious URL in a browser may lead to arbitrary code execution. Please review the referenced CVE identifier for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Konsole users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =kde-apps/konsole-24.12.3-r1" References ========== [ 1 ] CVE-2025-49091 https://nvd.nist.gov/vuln/detail/CVE-2025-49091 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-13 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machinesis of utmost importance to us. Any security concerns should be addressed to
Jun 15, 2025
Gentoo
91
security advisorygentooarbitrary code executionGentoo Linux: GLSA-202506-12 normal: sysstat arbitrary code execution
An integer overflow vulnerability has been found in sysstat which could result in arbitrary code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: sysstat: Arbitrary Code Execution Date: June 15, 2025 Bugs: #907121 ID: 202506-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== An integer overflow vulnerability has been found in sysstat which could result in arbitrary code execution. Background ========== sysstat is a package containing a number of performance monitoring utilities for Linux, including sar, mpstat, iostat and sa tools. Affected packages ================= Package Vulnerable Unaffected ----------------- ------------ ------------ app-admin/sysstat < 12.6.2-r1 > = 12.6.2-r1 Description =========== A vulnerability has been discovered in sysstat. Please review the CVE identifier referenced below for details. This CVE improves on an incomplete fix for CVE-2022-39377. Impact ====== On 32 bit systems, an integer overflow can be triggered when displaying activity data files. Workaround ========== There is no known workaround at this time. Resolution ========== All sysstat users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-admin/sysstat-12.6.2-r1" References ========== [ 1 ] CVE-2023-33204 https://nvd.nist.gov/vuln/detail/CVE-2023-33204 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-12 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and securityof our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 15, 2025
Gentoo
91
security advisorygentoosoftware updateGentoo: GLSA-202506-12 critical: JSON-LibJSON code execution
A vulnerability has been discovered in YAML-LibYAML, which can lead to shell injection.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: YAML-LibYAML: Shell injection Date: June 12, 2025 Bugs: #949498 ID: 202506-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in YAML-LibYAML, which can lead to shell injection. Background ========== YAML-LibYAML provides YAML Serialization using XS and libyaml for Perl. Affected packages ================= Package Vulnerable Unaffected --------------------- ------------ ------------ dev-perl/YAML-LibYAML < 0.903.0 > = 0.903.0 Description =========== YAML-LibYAML uses the legacy '2-arg' open() call which is susceptible to shell injection via malicious filenames. Impact ====== Shell injection may be used to execute arbitrary code using a malicious filename. Workaround ========== There is no known workaround at this time. Resolution ========== All YAML-LibYAML users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-perl/YAML-LibYAML-0.903.0" References ========== [ 1 ] CVE-2025-40908 https://nvd.nist.gov/vuln/detail/CVE-2025-40908 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-11 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 12, 2025
Gentoo
91
security advisorygentoosoftware updateGentoo: GLSA-202506-10 normal: File-Find-Rule Shell Injection Advisory
A vulnerability has been discovered in File-Find-Rule, which can lead to shell injection.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: File-Find-Rule: Shell Injection Date: June 12, 2025 Bugs: #957182 ID: 202506-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in File-Find-Rule, which can lead to shell injection. Background ========== File-Find-Rule is an alternative interface to File::Find. Affected packages ================= Package Vulnerable Unaffected ----------------------- ------------ ------------ dev-perl/File-Find-Rule < 0.350.0 > = 0.350.0 Description =========== File-Find-Rule uses the legacy '2-arg' open() call which is susceptible to shell injection via malicious filenames. Impact ====== Shell injection may be used to execute arbitrary code using a malicious filename. Workaround ========== There is no known workaround at this time. Resolution ========== All File-Find-Rule users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-perl/File-Find-Rule-0.350.0" References ========== [ 1 ] CVE-2011-10007 https://nvd.nist.gov/vuln/detail/CVE-2011-10007 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-10 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 12, 2025
Gentoo
91
security advisorygentoomultiple issuesGentoo: GLSA-202506-09 normal: OpenImageIO multiple issues
Multiple vulnerabilities have been discovered in OpenImageIO, the worst of which can lead to execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: OpenImageIO: Multiple Vulnerabilities Date: June 12, 2025 Bugs: #903807, #917679 ID: 202506-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in OpenImageIO, the worst of which can lead to execution of arbitrary code. Background ========== OpenImageIO is a library for reading and writing images. Affected packages ================= Package Vulnerable Unaffected ---------------------- ------------ ------------ media-libs/openimageio < 2.5.4.0 > = 2.5.4.0 Description =========== Multiple vulnerabilities have been discovered in OpenImageIO. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All OpenImageIO users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-libs/openimageio-2.5.4.0" References ========== [ 1 ] CVE-2023-22845 https://nvd.nist.gov/vuln/detail/CVE-2023-22845 [ 2 ] CVE-2023-24472 https://nvd.nist.gov/vuln/detail/CVE-2023-24472 [ 3 ] CVE-2023-24473 https://nvd.nist.gov/vuln/detail/CVE-2023-24473 [ 4 ] CVE-2023-36183 https://nvd.nist.gov/vuln/detail/CVE-2023-36183 [ 5 ] CVE-2023-42295 https://nvd.nist.gov/vuln/detail/CVE-2023-42295 [ 6 ] CVE-2023-42299 https://nvd.nist.gov/vuln/detail/CVE-2023-42299 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-09 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 12, 2025
Gentoo
91
security advisorygentooprivilege escalationGentoo: GLSA-202506-08 critical: Ruby, JRuby security vulnerability
Multiple vulberabilities have been discovered in Python and PyPy, the worst of which can lead to privilege escalation.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Python, PyPy: Multiple Vulnerabilities Date: June 12, 2025 Bugs: #929045, #937124, #938432, #939206, #945845, #953493, #956682, #957088 ID: 202506-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulberabilities have been discovered in Python and PyPy, the worst of which can lead to privilege escalation. Background ========== Python is an interpreted, interactive, object-oriented, cross-platform programming language. Affected packages ================= Package Vulnerable Unaffected --------------- --------------------- ---------------------- dev-lang/pypy < 3.10.7.3.19_p4:3.10 > = 3.10.7.3.19_p4:3.10 < 3.11.7.3.19_p9:3.11 > = 3.11.7.3.19_p9:3.11 dev-lang/python < 3.10.17_p1:3.10 > = 3.10.17_p1:3.10 < 3.11.12_p1:3.11 > = 3.11.12_p1:3.11 < 3.12.10_p1:3.12 > = 3.12.10_p1:3.12 < 3.13.3_p1:3.13 > = 3.13.3_p1:3.13 < 3.14.0_beta2:3.14 > = 3.14.0_beta2:3.14 < 3.8.20_p7:3.8 > = 3.8.20_p7:3.8 < 3.9.22_p1:3.9 > = 3.9.22_p1:3.9 Description =========== Multiple vulnerabilities have been discovered in Python, PyPy3. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Python, PyPy3 usersshould upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-lang/python-3.14.0_beta2:3.14" # emerge --ask --oneshot --verbose "> =dev-lang/python-3.13.3_p1:3.13" # emerge --ask --oneshot --verbose "> =dev-lang/python-3.12.10_p1:3.12" # emerge --ask --oneshot --verbose "> =dev-lang/python-3.11.12_p1:3.11" # emerge --ask --oneshot --verbose "> =dev-lang/python-3.10.17_p1:3.10" # emerge --ask --oneshot --verbose "> =dev-lang/python-3.9.22_p1:3.9" # emerge --ask --oneshot --verbose "> =dev-lang/python-3.8.20_p7:3.8" # emerge --ask --oneshot --verbose "> =dev-lang/pypy-3.10.7.3.19_p4:3.10" # emerge --ask --oneshot --verbose "> =dev-lang/pypy-3.11.7.3.19_p9:3.11" References ========== [ 1 ] CVE-2024-6232 https://nvd.nist.gov/vuln/detail/CVE-2024-6232 [ 2 ] CVE-2024-6923 https://nvd.nist.gov/vuln/detail/CVE-2024-6923 [ 3 ] CVE-2024-7592 https://nvd.nist.gov/vuln/detail/CVE-2024-7592 [ 4 ] CVE-2024-8088 https://nvd.nist.gov/vuln/detail/CVE-2024-8088 [ 5 ] CVE-2024-12718 https://nvd.nist.gov/vuln/detail/CVE-2024-12718 [ 6 ] CVE-2025-4138 https://nvd.nist.gov/vuln/detail/CVE-2025-4138 [ 7 ] CVE-2025-4330 https://nvd.nist.gov/vuln/detail/CVE-2025-4330 [ 8 ] CVE-2025-4516 https://nvd.nist.gov/vuln/detail/CVE-2025-4516 [ 9 ] CVE-2025-4517 https://nvd.nist.gov/vuln/detail/CVE-2025-4517 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 12, 2025
Gentoo
91
security advisoryupdategentooGentoo: GLSA-202506-06 High Risk of Qt Code Execution Vulnerabilities
Multiple vulnerabilities have been discovered in Qt, the worst of which can lead to arbitrary code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Qt: Multiple Vulnerabilities Date: June 12, 2025 Bugs: #924647, #931096, #935869, #954261 ID: 202506-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in Qt, the worst of which can lead to arbitrary code execution. Background ========== Qt is a cross-platform application development framework. Affected packages ================= Package Vulnerable Unaffected ---------------- ------------ ------------- dev-qt/qtbase < 6.8.3-r1 > = 6.8.3-r1 dev-qt/qtgui < 5.15.12-r2 > = 5.15.12-r2 dev-qt/qtnetwork < 5.15.14-r1 > = 5.15.14-r1 Description =========== Multiple vulnerabilities have been discovered in Qt. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Qt users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-qt/qtbase-6.8.3-r1" # emerge --ask --oneshot --verbose "> =dev-qt/qtnetwork-5.15.14-r1" # emerge --ask --oneshot --verbose "> =dev-qt/qtgui-5.15.12-r2" References ========== [ 1 ] CVE-2024-25580 https://nvd.nist.gov/vuln/detail/CVE-2024-25580 [ 2 ] CVE-2024-33861 https://nvd.nist.gov/vuln/detail/CVE-2024-33861 [ 3 ] CVE-2024-39936 https://nvd.nist.gov/vuln/detail/CVE-2024-39936 [ 4 ] CVE-2025-3512 https://nvd.nist.gov/vuln/detail/CVE-2025-3512 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-06 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 12, 2025
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!