Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Chromium Important Buffer Overflow Input Issues 2026-acf674bc6a

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-django5 Low Risk Data Exposure Bugs 2026-fbb9501b22

Calendar White Jul 24, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 43 dotnet10.0 Critical CVE Fixes Update 2026-d9817786d6

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 mupdf Critical Out-of-Bounds Read Fix Advisory 2026-8870088088

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 wget1 Critical Memory Corruption DoS Fix 2026-7bbb52b49d

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mbedtls 3.6.7 Important Fixes for Multiple CVEs

Calendar White Jul 24, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 sssd Critical Use-After-Free and GPO Cache Issues 2026-9ab663dcd4

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 Chromium Significant Buffer Overflow and Input Validation Issues

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Skopeo Critical DoS Fix CVE-2026-27145 Advisory 2026-9b2e56edf5

Calendar White Jul 24, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
91
Ls Advisories Gentoo Esm H240
Price Tag%201security advisorysecurity issuegentoo

Gentoo: GLSA-202105-10 Normal: GNOME Autoar Code Execution Risk

A vulnerability has been found in GNOME Autoar that could allow a remote attacker to execute arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202105-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: GNOME Autoar: User-assisted execution of arbitrary code Date: May 26, 2021 Bugs: #768828, #777126 ID: 202105-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability has been found in GNOME Autoar that could allow a remote attacker to execute arbitrary code. Background ========= GNOME Autoar provides functions and widgets for GNOME applications which want to use archives as a method to transfer directories over the internet. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-arch/gnome-autoar < 0.3.1 > = 0.3.1 Description ========== It was discovered that GNOME Autoar could extract files outside of the intended directory. Impact ===== A remote attacker could entice a user to open a specially crafted archive using GNOME Autoar, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All GNOME Autoar users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-arch/gnome-autoar-0.3.1" References ========= [ 1 ] CVE-2020-36241 https://nvd.nist.gov/vuln/detail/CVE-2020-36241 [ 2 ] CVE-2021-28650 https://nvd.nist.gov/vuln/detail/CVE-2021-28650 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202105-10 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2021 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . An exploit in GNOME Autoar permits the execution of unauthorized code from a distance. Ensure that you update to the most recent version for enhanced security.. GNOME Autoar, Remote Code Execution, Gentoo Security Advisory. . LinuxSecurity.com Team

Calendar%202 May 26, 2021 Gentoo
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorycriticalsoftware update

Mageia: 2021-0145 Critical: gnome-autoar Remote Code Execution

Yiğit Can Yılmaz discovered that GNOME Autoar could extract files outside of the intended directory. If a user were tricked into extracting a specially crafted archive, a remote attacker could create files in arbitrary locations, possibly leading to code execution (CVE-2020-36241). . MGASA-2021-0111 - Updated gnome-autoar packages fix security vulnerability Publication date: 04 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0111.html Type: security Affected Mageia releases: 7, 8 CVE: CVE-2020-36241 Yiğit Can Yılmaz discovered that GNOME Autoar could extract files outside of the intended directory. If a user were tricked into extracting a specially crafted archive, a remote attacker could create files in arbitrary locations, possibly leading to code execution (CVE-2020-36241). References: - https://bugs.mageia.org/show_bug.cgi?id=28454 - https://ubuntu.com/security/notices/USN-4733-1 - https://www.cve.org/CVERecord?id=CVE-2020-36241 SRPMS: - 7/core/gnome-autoar-0.2.3-2.1.mga7 - 8/core/gnome-autoar-0.2.4-2.1.mga8 . The latest GNOME Autoar patch resolves a vulnerability that might permit unauthorized code execution through manipulated archive file extraction.. Mageia Security Update, GNOME Autoar, Code Execution Exploit. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 04, 2021 •Critical Mageia
Banner 1 1028x280 1708121660 1771599717
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryremote exploitcritical

Ubuntu 20.10, 20.04 LTS Critical: USN-4733-1 GNOME Autoar File Overwrite

GNOME Autoar could be made to overwrite files.. =========================================================================Ubuntu Security Notice USN-4733-1 February 11, 2021 gnome-autoar vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: GNOME Autoar could be made to overwrite files. Software Description: - gnome-autoar: Archive integration support for GNOME Details: Yiğit Can Yılmaz discovered that GNOME Autoar could extract files outside of the intended directory. If a user were tricked into extracting a specially crafted archive, a remote attacker could create files in arbitrary locations, possibly leading to code execution. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.10: libgnome-autoar-0-0 0.2.4-2ubuntu0.1 libgnome-autoar-gtk-0-0 0.2.4-2ubuntu0.1 Ubuntu 20.04 LTS: libgnome-autoar-0-0 0.2.3-2ubuntu0.1 libgnome-autoar-gtk-0-0 0.2.3-2ubuntu0.1 Ubuntu 18.04 LTS: libgnome-autoar-0-0 0.2.3-1ubuntu0.1 libgnome-autoar-gtk-0-0 0.2.3-1ubuntu0.1 After a standard system update you need to restart your session to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4733-1 CVE-2020-36241 Package Information: https://launchpad.net/ubuntu/+source/gnome-autoar/0.2.4-2ubuntu0.1 https://launchpad.net/ubuntu/+source/gnome-autoar/0.2.3-2ubuntu0.1 https://launchpad.net/ubuntu/+source/gnome-autoar/0.2.3-1ubuntu0.1 . Ubuntu Security Announcement USN-4733-1 informs about a GNOME Autoar vulnerability that could result in unintended file replacements, along with crucial updates to mitigate security threats. File Overwrite,Gnome Autoar,Security Updates,Ubuntu. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 11, 2021 •Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics