Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 430
Alerts This Week
Warning Icon 1 430

Stay Secure with the Latest Linux Advisories

Rockylinux Esm H800
Rocky

Rocky Linux 8 java-17-openjdk Important TLS Enhancement RLSA-2026-42887

Calendar White Jul 26, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS hplip Significant Privilege Escalation Code Execution DLA-4699-1

Calendar White Jul 26, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Firefox Important Update to Version 153.0 - Performance Boost

Calendar White Jul 25, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 2026-4a2d23b470 google-osconfig-agent Important DoS Issues

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 moby-engine Update v29.6.2 Denial of Service Vulnerability

Calendar White Jul 25, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 xrdp Important Denial Of Service Risks Advisory 2026-952a486b39

Calendar White Jul 25, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 Libreswan Important IKE Tunnel Security Update CVE-2026-14957

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 WebKitGTK Important Security Fixes Advisory 2026-ec8e535c6e

Calendar White Jul 25, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 p11-kit Critical Stack Exhaustion Fix CVE-2026-13757

Calendar White Jul 25, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticalDebian

Debian: DSA-5638-1 Critical Libuv1 Update - SSRF Threat Mitigation

It was discovered that the uv_getaddrinfo() function in libuv, an asynchronous event notification library, incorrectly truncated certain hostnames, which may result in bypass of security measures on internal APIs or SSRF attacks. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5638-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso March 10, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libuv1 CVE ID : CVE-2024-24806 Debian Bug : 1063484 It was discovered that the uv_getaddrinfo() function in libuv, an asynchronous event notification library, incorrectly truncated certain hostnames, which may result in bypass of security measures on internal APIs or SSRF attacks. For the oldstable distribution (bullseye), this problem has been fixed in version 1.40.0-2+deb11u1. For the stable distribution (bookworm), this problem has been fixed in version 1.44.2-1+deb12u1. We recommend that you upgrade your libuv1 packages. For the detailed security status of libuv1 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libuv1 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Notice DSA-5639-2 addresses vulnerabilities in libuv1, highlighting the critical issue of hostname shortening and its potential consequences.. libuv1 update, SSL attacks, Debian advisory, event notification, security measures. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 10, 2024 •Critical Debian
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorysecurity issueupdate

Mageia: 2021-0594 Critical Security Update for e2guardian on Mageia 8

e2guardian did not validate TLS hostnames (CVE-2021-44273) References: - https://bugs.mageia.org/show_bug.cgi?id=29811 - https://www.openwall.com/lists/oss-security/2021/12/23/2 . MGASA-2021-0594 - Updated e2guardian packages fix security vulnerability Publication date: 30 Dec 2021 URL: https://advisories.mageia.org/MGASA-2021-0594.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-44273 e2guardian did not validate TLS hostnames (CVE-2021-44273) References: - https://bugs.mageia.org/show_bug.cgi?id=29811 - https://www.openwall.com/lists/oss-security/2021/12/23/2 - https://www.cve.org/CVERecord?id=CVE-2021-44273 SRPMS: - 8/core/e2guardian-5.3.4-1.1.mga8 . The recent e2guardian release addresses a critical TLS hostname validation vulnerability, bolstering the security of Mageia 8. For further details, refer to our advisory.. Mageia Security Update, e2guardian TLS Fix, Mageia Advisory 2021, Hostname Validation, Security Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Dec 30, 2021 •Critical Mageia
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics