Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
202

openSUSE Tumbleweed perl-HTTP-Daemon Moderate CVE-2026-8450 Access Issue

An update that solves one vulnerability can now be installed.. # perl-HTTP-Daemon-6.170.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10938-1 Rating: moderate Cross-References: * CVE-2026-8450 CVSS scores: * CVE-2026-8450 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the perl-HTTP-Daemon-6.170.0-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * perl-HTTP-Daemon 6.170.0-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8450.html . Update for openSUSE Tumbleweed addresses a moderate severity issue in perl-HTTP-Daemon with significant risk. Patching recommended.. openSUSE Tumbleweed perl-HTTP-Daemon update security. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 06, 2026 moderate OpenSUSE
203

Mageia 8 MGASA-2022-0349 High Severity: HTTP Daemon Request Smuggling

Request smuggling in HTTP::Daemon (CVE-2022-31081) References: - https://bugs.mageia.org/show_bug.cgi?id=30634 - https://ubuntu.com/security/notices/USN-5520-1 . MGASA-2022-0349 - Updated perl-HTTP-Daemon packages fix security vulnerability Publication date: 01 Oct 2022 URL: https://advisories.mageia.org/MGASA-2022-0349.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-31081 Request smuggling in HTTP::Daemon (CVE-2022-31081) References: - https://bugs.mageia.org/show_bug.cgi?id=30634 - https://ubuntu.com/security/notices/USN-5520-1 - https://www.cve.org/CVERecord?id=CVE-2022-31081 SRPMS: - 8/core/perl-HTTP-Daemon-6.140.0-3.mga8 . Revised perl-HTTP-Daemon distributions rectify request smuggling vulnerability. Date of release: 01 Oct 2022.. Mageia 8 Security Update, HTTP Daemon Fix, Request Smuggling Vulnerability. . LinuxSecurity.com Team

Calendar%202 Oct 01, 2022 Mageia
172

Ubuntu 16.04 ESM USN-5520-2: HTTP Request Smuggling Risk Details

HTTP-Daemon could allow HTTP Request Smuggling attacks.. =========================================================================Ubuntu Security Notice USN-5520-2 July 18, 2022 libhttp-daemon-perl vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: HTTP-Daemon could allow HTTP Request Smuggling attacks. Software Description: - libhttp-daemon-perl: simple http server class Details: USN-5520-1 fixed a vulnerability in HTTP-Daemon. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that HTTP-Daemon incorrectly handled certain crafted requests. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libhttp-daemon-perl 6.01-1ubuntu0.16.04~esm1 Ubuntu 14.04 ESM: libhttp-daemon-perl 6.01-1ubuntu0.14.04~esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5520-2 https://ubuntu.com/security/notices/USN-5520-1 CVE-2022-31081 . Ubuntu Security Notice USN-5530-1 reports a vulnerability in the HTTP-Daemon, which may result in HTTP Request Smuggling exploits. Ensure your system is patched!. HTTP Daemon Vulnerability, Ubuntu Security Advisory, Request Smuggling Attack, libhttp-daemon-perl Exploit. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 18, 2022 Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200