Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 Important Kernel Security Advisory ELSA-2026-21706

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 httpd Important Denial of Service Vuln ELSA-2026-22140

Calendar White Jun 02, 2026
Important
Oracle Large Esm H800
Oracle

Oracle Linux 8 ELSA-2026-22315 compat-openssl10 Moderate DoS Fix

Calendar White Jun 02, 2026
moderate
Oracle Large Esm H900
Oracle

Oracle Linux 8 gnutls Important Buffer Overflow Auth Bypass ELSA-2026-20611

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS nginx Security Advisory for Critical DoS Vulnerabilities

Calendar White Jun 03, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 LTS MySQL Important Security Issues USN-8363-2

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS GStreamer Base Significant DoS Attack Vulnerability Alert

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS python-pip Moderate DoS Regression Fix USN-8344-3

Calendar White Jun 03, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
197
Ls Advisories Deblts Esm H240
Price Tag 1security advisorycriticaldebian

Debian 10 Buster DLA-3311-1 Critical Heimdal Integrity Issue

I discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check handlers for gssapi, . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3311-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Helmut Grohne February 08, 2023 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : heimdal Version : 7.5.0+dfsg-3+deb10u2 CVE ID : CVE-2022-45142 Debian Bug : #1030849 I discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check handlers for gssapi, resulting in incorrect validation of message integrity codes. For Debian 10 buster, this problem has been fixed in version 7.5.0+dfsg-3+deb10u2. We recommend that you upgrade your heimdal packages. For the detailed security status of heimdal please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/heimdal Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Advisory DLA-3312-1 regarding openssl resolves buffer overflow vulnerabilities affecting ssl connection security.. Heimdal Security, Debian Advisory, Kerberos Compatibility. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 08, 2023 •Critical Debian LTS
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorysecurity updatesecurity issue

Red Hat Enterprise Linux 7.3 RHSA-2021-0693 Critical: BIND Buffer Overflow

An update for bind is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: bind security update Advisory ID: RHSA-2021:0693-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:0693 Issue date: 2021-03-02 CVE Names: CVE-2020-8625 ==================================================================== 1. Summary: An update for bind is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.3) - noarch, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.3) - x86_64 3. Description: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation (CVE-2020-8625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 After installing the update, the BIND daemon (named) will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1928486 - CVE-2020-8625 bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.3): Source: bind-9.9.4-50.el7_3.5.src.rpm noarch: bind-license-9.9.4-50.el7_3.5.noarch.rpm x86_64: bind-9.9.4-50.el7_3.5.x86_64.rpm bind-chroot-9.9.4-50.el7_3.5.x86_64.rpm bind-debuginfo-9.9.4-50.el7_3.5.i686.rpm bind-debuginfo-9.9.4-50.el7_3.5.x86_64.rpm bind-libs-9.9.4-50.el7_3.5.i686.rpm bind-libs-9.9.4-50.el7_3.5.x86_64.rpm bind-libs-lite-9.9.4-50.el7_3.5.i686.rpm bind-libs-lite-9.9.4-50.el7_3.5.x86_64.rpm bind-pkcs11-9.9.4-50.el7_3.5.x86_64.rpm bind-pkcs11-libs-9.9.4-50.el7_3.5.i686.rpm bind-pkcs11-libs-9.9.4-50.el7_3.5.x86_64.rpm bind-pkcs11-utils-9.9.4-50.el7_3.5.x86_64.rpm bind-utils-9.9.4-50.el7_3.5.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.3): x86_64: bind-debuginfo-9.9.4-50.el7_3.5.i686.rpm bind-debuginfo-9.9.4-50.el7_3.5.x86_64.rpm bind-devel-9.9.4-50.el7_3.5.i686.rpm bind-devel-9.9.4-50.el7_3.5.x86_64.rpm bind-lite-devel-9.9.4-50.el7_3.5.i686.rpm bind-lite-devel-9.9.4-50.el7_3.5.x86_64.rpm bind-pkcs11-devel-9.9.4-50.el7_3.5.i686.rpm bind-pkcs11-devel-9.9.4-50.el7_3.5.x86_64.rpm bind-sdb-9.9.4-50.el7_3.5.x86_64.rpm bind-sdb-chroot-9.9.4-50.el7_3.5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-8625 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYD4m8tzjgjWX9erEAQjJwQ/9Ezf+8/Bcc1GXOnGqt9TPZmgiGb7Dcie/ orQZKUNt4obp3vxsliGq98WlE3+DCkzx1zqtbv13V8V56aFg1qj0qHMY2/FtLOBn Nb7maUkbUY8kRSKjLYlWnC6JitZjMHR8KtNiNJmfNrxBUEnDYumdtRmt4a8AM9wz gd+vXt+8vFYI5OxHlXGJnSHnZHFNnTR2F3CiChPczGqbJbKHx017pxbqnr604Dr2 dJKMyInZ9/J7/7ce56a9ZVd1NrtbRdzpBkzKk0TtdEWOBzaTPjoudRuZ0XR1+19m UlHqLoYDkU1eQGMAutBRiYelYMEXHigdzVBZiR0yqZ/40ePGTzBYJJMtgAv/2c5z drVMY3dLPQPaJozr5Bo9iD38g34DKYRPht6Xx+T7cKFSSSbfaxP4vhKoUI8KpwsX 2AIcJCzWW4WQR+Whypyc6PNgFarUTZRmDp5hGU8J1HjCiEiYQ+931MRwkIPdPNyG peZ508jENuUuwCfU6LhLfkqPQsuZggbCWo2avZZwSwk+Z81DB7XOpcDfhnJyZMLG HyOy9/CaDE6MNVg5FwfvSgkdTmnhULyOvTaCH6zKSmhhKtji0USUL50/xZ8K7+we 1pc2PHF4z1iaqelgvq1bZy6h8w5Z5pwS8zjQ9Q1kBy5kBGO/7X4t15JWw5otzknQ Qd08tFZFIec=/yHZ -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://listman.redhat.com/mailman/listinfo/rhsa-announce . Oracle has released an essential MySQL patch for version 5.7. Safeguard your databases against potential security threats.. RedHat Security,BIND Update,Enterprise Linux,Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 02, 2021 •Critical Red Hat
Banner 4 1028x280 1708121825 1771600306
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorysecurity updateRed Hat

Red Hat Enterprise Linux 7.2 Security Update: Important Buffer Overflow Fix

An update for bind is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: bind security update Advisory ID: RHSA-2021:0694-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:0694 Issue date: 2021-03-02 CVE Names: CVE-2020-8625 ==================================================================== 1. Summary: An update for bind is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.2) - noarch, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.2) - x86_64 3. Description: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation (CVE-2020-8625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 After installing the update, the BIND daemon (named) will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1928486 - CVE-2020-8625 bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.2): Source: bind-9.9.4-29.el7_2.10.src.rpm noarch: bind-license-9.9.4-29.el7_2.10.noarch.rpm x86_64: bind-9.9.4-29.el7_2.10.x86_64.rpm bind-chroot-9.9.4-29.el7_2.10.x86_64.rpm bind-debuginfo-9.9.4-29.el7_2.10.i686.rpm bind-debuginfo-9.9.4-29.el7_2.10.x86_64.rpm bind-libs-9.9.4-29.el7_2.10.i686.rpm bind-libs-9.9.4-29.el7_2.10.x86_64.rpm bind-libs-lite-9.9.4-29.el7_2.10.i686.rpm bind-libs-lite-9.9.4-29.el7_2.10.x86_64.rpm bind-pkcs11-9.9.4-29.el7_2.10.x86_64.rpm bind-pkcs11-libs-9.9.4-29.el7_2.10.i686.rpm bind-pkcs11-libs-9.9.4-29.el7_2.10.x86_64.rpm bind-pkcs11-utils-9.9.4-29.el7_2.10.x86_64.rpm bind-utils-9.9.4-29.el7_2.10.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.2): x86_64: bind-debuginfo-9.9.4-29.el7_2.10.i686.rpm bind-debuginfo-9.9.4-29.el7_2.10.x86_64.rpm bind-devel-9.9.4-29.el7_2.10.i686.rpm bind-devel-9.9.4-29.el7_2.10.x86_64.rpm bind-lite-devel-9.9.4-29.el7_2.10.i686.rpm bind-lite-devel-9.9.4-29.el7_2.10.x86_64.rpm bind-pkcs11-devel-9.9.4-29.el7_2.10.i686.rpm bind-pkcs11-devel-9.9.4-29.el7_2.10.x86_64.rpm bind-sdb-9.9.4-29.el7_2.10.x86_64.rpm bind-sdb-chroot-9.9.4-29.el7_2.10.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-8625 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYD4mPtzjgjWX9erEAQjdhRAAnw2Q/IXY6zL4kOMroVfbLI52/d7YnfTj tSNhRxkF6NgyaBX3ol50YitkMJrX9EA6W9/uTFY3TTwaPR2kt8xQKz2+g7hIs+wb 4CuMh0oLOy+oiqZ6IOeT6s1XAc/mLpGXz8jp7GBmW1B/hDD6UTbBl1i8+Vmt8pos 4r3gFM/TCr3qd25KqOiA9TriX29TikUpOVkhd2RqyQoVIomUr1Wrf68Ff+47dZIT 13Xlb5hXJXnpHQwdD52CRBGcxBR0pDM3YOSwXxzo7JnQ8mlNipQqySlRFVOtuzYz Y9B813AIFWaYL+shdISB9FNAA0jPjZO/mYwsnfg1yurPzeju8IU35IC222NzrB4x /pByl4zI7KjuJKZi8Nc7K0KPDrFuvoHvatGEVAIkW0h+3+BwPmPinWnDhEIuO0yF PXC1U1F0O780aHSo2b9e6/yqAha+gVwttluLgxZHAnbuiwDTLYGRU4dnKo5voDFy xg2cCsIyESUvi+rtopMgHyrUABS2eQjEtz78C8XqYVZiHQUBdD6hbUpH9uchFCK2 cbwbM+McpiHlNrO7VbZSuF6LrPY/HbdKvaXWsDzGzO3oTU0KiWsEyWNS0Rc/Go6C 5J9aHVW3hrHw+rScurI4t24ZdicFozLJKC8K0vaO/+140g5cTU8A0B13fNDZKXcB rFlA8A+P+sA=6vHg -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://listman.redhat.com/mailman/listinfo/rhsa-announce . Explore essential security enhancements for Bind within Red Hat Enterprise Linux. Find detailed information on risks and their corresponding solutions here.. Red Hat Enterprise Update, Security Advisory, Bind Fix, Buffer Overflow. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 02, 2021 •Important Red Hat
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoracritical

Fedora 30: FEDORA-2019-0f4190cdb0 Critical: OpenSSH Flaws Resolved

New upstream release with significantly reworked PKCS#11 support, GSSAPI key exchange and several fixes for CVE-2019-6111 and CVE-2019-6109. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-0f4190cdb0 2019-05-04 00:16:11.078321 --------------------------------------------------------------------------------Name : openssh Product : Fedora 30 Version : 8.0p1 Release : 1.fc30 URL : https://www.openssh.org/portable.html Summary : An open source implementation of SSH protocol version 2 Description : SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. --------------------------------------------------------------------------------Update Information: New upstream release with significantly reworked PKCS#11 support, GSSAPI key exchange and several fixes for CVE-2019-6111 and CVE-2019-6109 --------------------------------------------------------------------------------ChangeLog: * Fri Apr 26 2019 Jakub Jelen - 8.0p1-1 + 0.10.3-7 - New upstream release (#1701072) - Removed support for VendroPatchLevel configuration option - Significant rework of GSSAPI Key Exchange - Significant rework of PKCS#11 URI support --------------------------------------------------------------------------------References: [ 1 ] Bug #1666127 - CVE-2019-6111 openssh: Improper validation of object names allows malicious server tooverwrite files via scp client https://bugzilla.redhat.com/show_bug.cgi?id=1666127 [ 2 ] Bug #1666119 - CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output https://bugzilla.redhat.com/show_bug.cgi?id=1666119 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-0f4190cdb0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Uncover the newest Fedora security patch for OpenSSH tackling significant vulnerabilities and improving functionalities.. Fedora Security Update, OpenSSH, GSSAPI, PKCS#11 Fixes. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 03, 2019 •Important Fedora
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here