Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE shibboleth-sp Important SQL Injection Vulnerability CVE-2025-9943

Calendar White Jul 20, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE gstreamer-plugins-bad Important Buffer Overflow Issues 2026-3125-1

Calendar White Jul 20, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux Kernel Important Security Advisory USN-8569-1

Calendar White Jul 20, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 24.04 LTS Linux Kernel Critical Security Update 8570-1

Calendar White Jul 20, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu libXfont Important Denial Of Service Heap Overflow Vuln 8560-1

Calendar White Jul 20, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS rlottie Critical Denial of Service USN-8559-1

Calendar White Jul 20, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 Linux Kernel Privilege Escalation Vulnerabilities USN-8568-1

Calendar White Jul 20, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 22.04 Kernel Important Security Flaws Fix USN-8567-1

Calendar White Jul 20, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE libsuricata8 Moderate Update Advisory 2026-11308-1

Calendar White Jul 20, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 0 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryupdateimportant

openSUSE gsasl Significant Memory Exposure Resolution 2026-21303-1

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for gsasl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21303-1 Rating: important References: * bsc#1268885 Cross-References: * CVE-2026-56968 CVSS scores: * CVE-2026-56968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56968 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for gsasl fixes the following issue - CVE-2026-56968: improper sanitization of a short challenge in `_gsasl_ntlm_client_step` of the NTLM client can lead to memory disclosure (bsc#1268885). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1214=1 Package List: - openSUSE Leap 16.0: gsasl-2.2.1-160000.4.1 gsasl-devel-2.2.1-160000.4.1 gsasl-lang-2.2.1-160000.4.1 libgsasl18-2.2.1-160000.4.1 References: * https://www.suse.com/security/cve/CVE-2026-56968.html . An important update for openSUSE addressing a memory disclosure in gsasl. Install necessary patches promptly.. openSUSE gsasl update memory disclosure patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 13, 2026 •Important OpenSUSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryDoSimportant

openSUSE Leap gsasl Important DoS Fix Advisory 2026-21004-1 CVE-2026-48829

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for gsasl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21004-1 Rating: important References: * bsc#1266371 Cross-References: * CVE-2026-48829 CVSS scores: * CVE-2026-48829 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48829 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for gsasl fixes the following issues: Changes in gsasl: - CVE-2026-48829: DIGEST-MD5: Fix NULL pointer dereference in parser (bsc#1266371) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1016=1 Package List: - openSUSE Leap 16.0: gsasl-2.2.1-160000.3.1 gsasl-devel-2.2.1-160000.3.1 gsasl-lang-2.2.1-160000.3.1 libgsasl18-2.2.1-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2026-48829.html . Update for openSUSE Leap addresses critical gsasl security issue with CVE-2026-48829 and includes a bug fix.. openSUSE gsasl security update, CVE-2026-48829 patch, important security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 30, 2026 •Important OpenSUSE
Banner 3 1028x280 1708121785 1771599793
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorydenial of servicesecurity update

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

It was discovered that missing input sanitising in the DIGEST-MD5 parser of the GNU SASL library could result in denial of service. For Debian 11 bullseye, this problem has been fixed in version 1.10.0-4+deb11u2. We recommend that you upgrade your gsasl packages.. Debian LTS Advisory DLA-4618-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Thorsten Alteholz June 05, 2026 https://wiki.debian.org/LTS Package : gsasl Version : 1.10.0-4+deb11u2 CVE ID : CVE-2026-48829 It was discovered that missing input sanitising in the DIGEST-MD5 parser of the GNU SASL library could result in denial of service. For Debian 11 bullseye, this problem has been fixed in version 1.10.0-4+deb11u2. We recommend that you upgrade your gsasl packages. For the detailed security status of gsasl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gsasl Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Upgrade gsasl in Debian 11 to fix critical input sanitisation issue leading to DoS threat.. Debian LTS, gsasl, input sanitisation, security patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •Critical Debian LTS
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorydenial of serviceupdate

Debian 11 gsasl High Denial of Service Vulnern DLA-4618-1 CVE-2026-48829

It was discovered that missing input sanitising in the DIGEST-MD5 parser of the GNU SASL library could result in denial of service. For Debian 11 bullseye, this problem has been fixed in version 1.10.0-4+deb11u2. We recommend that you upgrade your gsasl packages.. Debian LTS Advisory DLA-4618-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Thorsten Alteholz June 05, 2026 https://wiki.debian.org/LTS Package : gsasl Version : 1.10.0-4+deb11u2 CVE ID : CVE-2026-48829 It was discovered that missing input sanitising in the DIGEST-MD5 parser of the GNU SASL library could result in denial of service. For Debian 11 bullseye, this problem has been fixed in version 1.10.0-4+deb11u2. We recommend that you upgrade your gsasl packages. For the detailed security status of gsasl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gsasl Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Fixes a denial of service flaw in the GNU SASL library gsasl for Debian 11 bullseye.. Debian Security Advisory, GSASL Denial of Service, Debian Package Update, LTS Security, GNU SASL Upgrade. . Severity: high. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •high Debian LTS
Banner 3 1028x280 1708121785 1771599793
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of serviceDoS

Ubuntu 26.04 LTS gsasl Important DoS Crash Advisory USN-8356-1

GNU SASL could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-8356-1 June 01, 2026 gsasl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: GNU SASL could be made to crash if it received specially crafted input. Software Description: - gsasl: Simple Authentication and Security Layer framework Details: It was discovered that GNU SASL did not properly handle certain DIGEST-MD5 tokens. An attacker could possibly use this issue to cause GNU SASL to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS gsasl 2.2.2-4ubuntu1.1 libgsasl18 2.2.2-4ubuntu1.1 Ubuntu 25.10 gsasl 2.2.2-2ubuntu1.1 libgsasl18 2.2.2-2ubuntu1.1 Ubuntu 24.04 LTS gsasl 2.2.1-1willsync1ubuntu0.1 libgsasl18 2.2.1-1willsync1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8356-1 CVE-2026-48829 Package Information: https://launchpad.net/ubuntu/+source/gsasl/2.2.2-4ubuntu1.1 https://launchpad.net/ubuntu/+source/gsasl/2.2.2-2ubuntu1.1 https://launchpad.net/ubuntu/+source/gsasl/2.2.1-1willsync1ubuntu0.1 . Critical update for GNU SASL on Ubuntu prevents potential crash from crafted input issues.. Ubuntu security updates, gsasl security issues, Denial of Service vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 01, 2026 •Important Ubuntu
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderateDoS

openSUSE Tumbleweed gsasl Moderate DoS Threat Fix 2026-10891-1

An update that solves one vulnerability can now be installed.. # gsasl-2.2.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10891-1 Rating: moderate Cross-References: * CVE-2026-48829 CVSS scores: * CVE-2026-48829 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48829 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the gsasl-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * gsasl 2.2.3-1.1 * gsasl-devel 2.2.3-1.1 * gsasl-lang 2.2.3-1.1 * libgsasl18 2.2.3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-48829.html . Update for openSUSE Tumbleweed to fix moderate issue in gsasl-2.2.3-1.1 enhancing security performance.. openSUSE Tumbleweed, gsasl update, moderate security issue, software security improvements. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 01, 2026 •moderate OpenSUSE
Banner 3 1028x280 1708121785 1771599793
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of serviceUbuntu

Ubuntu 26.04 LTS GNU SASL Informational Denial of Service CVE-2026-48829

GNU SASL could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-8356-1 June 01, 2026 gsasl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: GNU SASL could be made to crash if it received specially crafted input. Software Description: - gsasl: Simple Authentication and Security Layer framework Details: It was discovered that GNU SASL did not properly handle certain DIGEST-MD5 tokens. An attacker could possibly use this issue to cause GNU SASL to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS gsasl 2.2.2-4ubuntu1.1 libgsasl18 2.2.2-4ubuntu1.1 Ubuntu 25.10 gsasl 2.2.2-2ubuntu1.1 libgsasl18 2.2.2-2ubuntu1.1 Ubuntu 24.04 LTS gsasl 2.2.1-1willsync1ubuntu0.1 libgsasl18 2.2.1-1willsync1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8356-1 CVE-2026-48829 Package Information: https://launchpad.net/ubuntu/+source/gsasl/2.2.2-4ubuntu1.1 https://launchpad.net/ubuntu/+source/gsasl/2.2.2-2ubuntu1.1 https://launchpad.net/ubuntu/+source/gsasl/2.2.1-1willsync1ubuntu0.1 . Update for GNU SASL addresses a denial of service risk from specially crafted input in Ubuntu releases. Critical patch. . GNU SASL update, Ubuntu security patch, denial of service fix, gsasl vulnerability, information security advisory. . Severity: Informational. LinuxSecurity.com Team

Calendar%202 Jun 01, 2026 •Informational Ubuntu
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicecritical

Debian DSA-6271-1 gsasl Critical Denial of Service Vulnerability Fix

It was discovered that missing input sanitising in the DIGEST-MD5 parser of the GNU SASL library could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 2.2.0-1+deb12u1. For the stable distribution (trixie), this problem has been fixed in. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6271-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 14, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : gsasl CVE ID : not yet available It was discovered that missing input sanitising in the DIGEST-MD5 parser of the GNU SASL library could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 2.2.0-1+deb12u1. For the stable distribution (trixie), this problem has been fixed in version 2.2.2-1.1+deb13u1. We recommend that you upgrade your gsasl packages. For the detailed security status of gsasl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gsasl Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Denial of service risks due to input sanitizing issues in GNU SASL library gsasl fixed in Debian DSA-6271-1.. Debian Security Advisory, gsasl security fix, denial of service, GNU SASL library, input sanitizing. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 14, 2026 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics