Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e

Calendar White Jul 20, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 libseccomp Critical Security Fixes 2026-9afc6b6bb3

Calendar White Jul 20, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 dnsx Update Addresses Critical DoS Cross-Site Scripting Issues

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 OpenSSH Significant Update for Remote File Misplacement Issue

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 freerdp Important Update Notification 2026-fa672d26a8

Calendar White Jul 20, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 LibTIFF Critical Security Update for Arbitrary Code Execution

Calendar White Jul 20, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 mingw-python-idna Critical DoS Risk Update 2026-9dbf4d0ca8

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mingw-python-pip Critical Path Traversal Risk Advisory

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 9 articles for you...
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of servicecritical

Ubuntu 26.04 LTS Inetutils Critical Privilege Escalation DoS CVE-2026-28372

Several security issues were fixed in Inetutils.. ========================================================================== Ubuntu Security Notice USN-8387-1 June 04, 2026 inetutils vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Inetutils. Software Description: - inetutils: Collection of common network programs Details: It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALS_DIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. (CVE-2026-28372) It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when processing LINEMODE SLC suboptions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-32746) It was discovered that the Inetutils telnet client incorrectly handled the NEW_ENVIRON SEND USERVAR option. An attacker could possibly use this issue to read arbitrary environment variables. (CVE-2026-32772) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS inetutils-ftp 2:2.7-2ubuntu1.1 inetutils-ftpd 2:2.7-2ubuntu1.1 inetutils-inetd 2:2.7-2ubuntu1.1 inetutils-ping 2:2.7-2ubuntu1.1 inetutils-syslogd 2:2.7-2ubuntu1.1 inetutils-talk 2:2.7-2ubuntu1.1 inetutils-talkd 2:2.7-2ubuntu1.1 inetutils-telnet 2:2.7-2ubuntu1.1 inetutils-telnetd 2:2.7-2ubuntu1.1 inetutils-tools 2:2.7-2ubuntu1.1 inetutils-traceroute 2:2.7-2ubuntu1.1 telnet 0.17+2.7-2ubuntu1.1 telnetd 0.17+2.7-2ubuntu1.1 Ubuntu 25.10 inetutils-ftp 2:2.6-1ubuntu3.2 inetutils-ftpd 2:2.6-1ubuntu3.2 inetutils-inetd 2:2.6-1ubuntu3.2 inetutils-ping 2:2.6-1ubuntu3.2 inetutils-syslogd 2:2.6-1ubuntu3.2 inetutils-talk 2:2.6-1ubuntu3.2 inetutils-talkd 2:2.6-1ubuntu3.2 inetutils-telnet 2:2.6-1ubuntu3.2 inetutils-telnetd 2:2.6-1ubuntu3.2 inetutils-tools 2:2.6-1ubuntu3.2 inetutils-traceroute 2:2.6-1ubuntu3.2 telnet 0.17+2.6-1ubuntu3.2 telnetd 0.17+2.6-1ubuntu3.2 Ubuntu 24.04 LTS inetutils-ftp 2:2.5-3ubuntu4.2 inetutils-ftpd 2:2.5-3ubuntu4.2 inetutils-inetd 2:2.5-3ubuntu4.2 inetutils-ping 2:2.5-3ubuntu4.2 inetutils-syslogd 2:2.5-3ubuntu4.2 inetutils-talk 2:2.5-3ubuntu4.2 inetutils-talkd 2:2.5-3ubuntu4.2 inetutils-telnet 2:2.5-3ubuntu4.2 inetutils-telnetd 2:2.5-3ubuntu4.2 inetutils-tools 2:2.5-3ubuntu4.2 inetutils-traceroute 2:2.5-3ubuntu4.2 telnet 0.17+2.5-3ubuntu4.2 telnetd 0.17+2.5-3ubuntu4.2 Ubuntu 22.04 LTS inetutils-ftp 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-ftpd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-inetd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-ping 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-syslogd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-talk 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-talkd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-telnet 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-telnetd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-tools 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-traceroute 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS inetutils-ftp 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-ping 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-talk 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-tools 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro Ubuntu 18.04 LTS inetutils-ftp 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-ping 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-talk 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-tools 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro Ubuntu 16.04 LTS inetutils-ftp 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-ping 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-talk 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-tools 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro Ubuntu 14.04 LTS inetutils-ftp 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-ftpd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-inetd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-ping 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-syslogd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-talk 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-talkd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-telnet 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-telnetd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-tools 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-traceroute 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8387-1 CVE-2026-28372, CVE-2026-32746,CVE-2026-32772 Package Information: https://launchpad.net/ubuntu/+source/inetutils/2:2.7-2ubuntu1.1 https://launchpad.net/ubuntu/+source/inetutils/2:2.6-1ubuntu3.2 https://launchpad.net/ubuntu/+source/inetutils/2:2.5-3ubuntu4.2 . Several critical security issues fixed in Ubuntu's Inetutils affecting multiple LTS releases. Update recommendations provided.. Inetutils Security Update, Ubuntu Critical Advisory, Linux Package Management, DoS Threats, Privilege Escalation Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 08, 2026 •Critical Ubuntu
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of serviceprivilege escalation

Ubuntu Inetutils Important Privilege Escalation Denial of Service 8387-1

Several security issues were fixed in Inetutils.. ========================================================================== Ubuntu Security Notice USN-8387-1 June 04, 2026 inetutils vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Inetutils. Software Description: - inetutils: Collection of common network programs Details: It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALS_DIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. (CVE-2026-28372) It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when processing LINEMODE SLC suboptions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-32746) It was discovered that the Inetutils telnet client incorrectly handled the NEW_ENVIRON SEND USERVAR option. An attacker could possibly use this issue to read arbitrary environment variables. (CVE-2026-32772) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS inetutils-ftp 2:2.7-2ubuntu1.1 inetutils-ftpd 2:2.7-2ubuntu1.1 inetutils-inetd 2:2.7-2ubuntu1.1 inetutils-ping 2:2.7-2ubuntu1.1 inetutils-syslogd 2:2.7-2ubuntu1.1 inetutils-talk 2:2.7-2ubuntu1.1 inetutils-talkd 2:2.7-2ubuntu1.1 inetutils-telnet 2:2.7-2ubuntu1.1 inetutils-telnetd 2:2.7-2ubuntu1.1 inetutils-tools 2:2.7-2ubuntu1.1 inetutils-traceroute 2:2.7-2ubuntu1.1 telnet 0.17+2.7-2ubuntu1.1 telnetd 0.17+2.7-2ubuntu1.1 Ubuntu 25.10 inetutils-ftp 2:2.6-1ubuntu3.2 inetutils-ftpd 2:2.6-1ubuntu3.2 inetutils-inetd 2:2.6-1ubuntu3.2 inetutils-ping 2:2.6-1ubuntu3.2 inetutils-syslogd 2:2.6-1ubuntu3.2 inetutils-talk 2:2.6-1ubuntu3.2 inetutils-talkd 2:2.6-1ubuntu3.2 inetutils-telnet 2:2.6-1ubuntu3.2 inetutils-telnetd 2:2.6-1ubuntu3.2 inetutils-tools 2:2.6-1ubuntu3.2 inetutils-traceroute 2:2.6-1ubuntu3.2 telnet 0.17+2.6-1ubuntu3.2 telnetd 0.17+2.6-1ubuntu3.2 Ubuntu 24.04 LTS inetutils-ftp 2:2.5-3ubuntu4.2 inetutils-ftpd 2:2.5-3ubuntu4.2 inetutils-inetd 2:2.5-3ubuntu4.2 inetutils-ping 2:2.5-3ubuntu4.2 inetutils-syslogd 2:2.5-3ubuntu4.2 inetutils-talk 2:2.5-3ubuntu4.2 inetutils-talkd 2:2.5-3ubuntu4.2 inetutils-telnet 2:2.5-3ubuntu4.2 inetutils-telnetd 2:2.5-3ubuntu4.2 inetutils-tools 2:2.5-3ubuntu4.2 inetutils-traceroute 2:2.5-3ubuntu4.2 telnet 0.17+2.5-3ubuntu4.2 telnetd 0.17+2.5-3ubuntu4.2 Ubuntu 22.04 LTS inetutils-ftp 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-ftpd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-inetd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-ping 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-syslogd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-talk 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-talkd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-telnet 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-telnetd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-tools 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-traceroute 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS inetutils-ftp 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-ping 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-talk 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-tools 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro Ubuntu 18.04 LTS inetutils-ftp 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-ping 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-talk 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-tools 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro Ubuntu 16.04 LTS inetutils-ftp 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-ping 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-talk 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-tools 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro Ubuntu 14.04 LTS inetutils-ftp 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-ftpd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-inetd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-ping 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-syslogd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-talk 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-talkd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-telnet 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-telnetd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-tools 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-traceroute 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8387-1 CVE-2026-28372, CVE-2026-32746,CVE-2026-32772 Package Information: https://launchpad.net/ubuntu/+source/inetutils/2:2.7-2ubuntu1.1 https://launchpad.net/ubuntu/+source/inetutils/2:2.6-1ubuntu3.2 https://launchpad.net/ubuntu/+source/inetutils/2:2.5-3ubuntu4.2 . Several security issues fixed in Inetutils on Ubuntu provide critical updates for multiple releases and mitigate risks effectively.. inetutils security, ubuntu advisory, network programs, privilege escalation, denial of service. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 08, 2026 •Important Ubuntu
Banner 1 1028x280 1708121660 1771599717
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebianprivilege escalation

Debian 11 inetutils Important DLA-4527-1 Privilege Escalation Threat

Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosure. CVE-2026-28372 Ron Ben Yizhak from SafeBreach found that the fix for CVE-2026-24061 was. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4527-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Andreas Henriksson April 11, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : inetutils Version : 2:2.0-1+deb11u4 CVE ID : CVE-2026-28372 CVE-2026-32746 CVE-2026-32772 Debian Bug : 1130741 1130742 Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosure. CVE-2026-28372 Ron Ben Yizhak from SafeBreach found that the fix for CVE-2026-24061 was not complete and can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. While Debian bullseye does not include util-linux 2.40 this problem does thus not affect it, but was still addressed in case someone manually updates util-linux and thus exposes this vulnerability. CVE-2026-32746 Adiel Sol, Arad Inbar, Erez Cohen, Nir Somech, Ben Grinberg, Daniel Lubel of DREAM Security Research Team found that the telnetd server has a buffer overflow in the LINEMODE SLC (Set Local Characters) suboption handler. This can lead to potential pre-login remote code execution. CVE-2026-32772 Justin Swartz discovered that telnet allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR. This can lead to information disclosure. For Debian 11 bullseye, these problems have been fixed in version 2:2.0-1+deb11u4. We recommend that you upgrade yourinetutils packages. For the detailed security status of inetutils please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/inetutils Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Discover the Debian LTS DLA-4527-1 advisory detailing critical inetutils vulnerabilities affecting telnet. Immediate updates recommended!. Debian vulnerabilities, inetutils, privilege escalation, telnet security, LTS advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 11, 2026 •Important Debian LTS
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianprivilege escalation

Ubuntu systemd Privilege Elevation Vulnerabilities DSA-8194-7

Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 2:2.4-2+deb12u3.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6193-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso April 03, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : inetutils CVE ID : CVE-2026-32746 CVE-2026-32772 Debian Bug : 1130741 1130742 Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 2:2.4-2+deb12u3. For the stable distribution (trixie), these problems have been fixed in version 2:2.6-3+deb13u3. We recommend that you upgrade your inetutils packages. For the detailed security status of inetutils please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/inetutils Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Addressing privilege escalation and info disclosure risks in Debian inetutils, fixes available for oldstable release.. Debian inetutils security advisory, privilege escalation, information disclosure, security update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 03, 2026 •Important Debian
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian trixie inetutils Critical Telnetd Authentication Bypass DSA-6144-1

Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this problem has been fixed in. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6144-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : inetutils CVE ID : not yet available Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this problem has been fixed in version 2:2.6-3+deb13u2. We recommend that you upgrade your inetutils packages. For the detailed security status of inetutils please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/inetutils Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . inetutils telnetd flaw allows bypass of authentication, leading to potential root access; fix recommended for Debian trixie.. Debian inetutils security telnetd authentication. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 19, 2026 •Critical Debian
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryUbuntuimportant

Ubuntu 25.10 Inetutils Telnetd Auth Bypass USN-7992-1 CVE-2026-24061

Inetutils could allow unintended access to network services.. ========================================================================== Ubuntu Security Notice USN-7992-1 February 02, 2026 inetutils vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Inetutils could allow unintended access to network services. Software Description: - inetutils: Collection of common network programs Details: Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly handled certain environment variables. A remote attacker could use this issue to bypass authentication and open a session as an administrator. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 inetutils-telnetd 2:2.6-1ubuntu3.1 Ubuntu 24.04 LTS inetutils-telnetd 2:2.5-3ubuntu4.1 Ubuntu 22.04 LTS inetutils-telnetd 2:2.2-2ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7992-1 CVE-2026-24061 Package Information: https://launchpad.net/ubuntu/+source/inetutils/2:2.2-2ubuntu0.2 . Important security update for Ubuntu Inetutils addresses access issues in telnetd that may lead to unauthorized access.. Ubuntu Security, Inetutils, network services, telnetd access, system update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 03, 2026 •Important Ubuntu
Banner 1 1028x280 1708121660 1771599717
91
Ls Advisories Gentoo Esm H240
Price Tag%201security advisoryGentooremote code execution

Gentoo inetutils High Remote Code Exec CVE-2026-24061 GLSA 202601-01

A vulnerability has been discovered in the telnetd module of inetutils, which allows remote code execution as root.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202601-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: inetutils: Remote Code Execution Date: January 26, 2026 Bugs: #969065 ID: 202601-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in the telnetd module of inetutils, which allows remote code execution as root. Background ========== Inetutils is a collection of common network programs including a telnet client and server. Affected packages ================= Package Vulnerable Unaffected ------------------ ------------ ------------ net-misc/inetutils < 2.7 > = 2.7 Description =========== The telnetd server invokes /usr/bin/login (normally running as root) passing the value of the USER environment variable received from the client as the last parameter. If the client supply a carefully crafted USER environment value being the string "-f root", and passes the telnet(1) -a or --login parameter to send this USER environment to the server, the client will be automatically logged in as root bypassing normal authentication processes. This happens because the telnetd server do not sanitize the USER environment variable before passing it on to login(1), and login(1) uses the -f parameter to by-pass normal authentication. Impact ====== An attacker can login as root via the telnetd daemon. Workaround ========== Reinstall inetutils with the telnetd USE flag disabled. This is the default in Gentoo. Resolution ========== All inetutils users with the telnetd USE flag enabled should upgradeto the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/inetutils-2.7" References ========== [ 1 ] CVE-2026-24061 https://nvd.nist.gov/vuln/detail/CVE-2026-24061 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202601-01 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2026 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5 . Discover the high severity security flaw in Gentoo's inetutils allowing remote code execution. Update recommended.. Gentoo inetutils security remote code execution. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 26, 2026 •Critical Gentoo
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorycriticaldebian

Debian 11 inetutils Auth Bypass Vulnerability Allows Remote Shell Access

Kyu Neushwaistein aka Carlos Cortes Alvarez found that inetutils, a collection of common network programs, was vulnerable to an authentication bypass problem in telnetd, which could lead to remote root shell access (if telnetd is enabled and exposed). As described also in the GNU InetUtils security advisory, it is not. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4453-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Andreas Henriksson January 25, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : inetutils Version : 2:2.0-1+deb11u3 CVE ID : CVE-2026-24061 Debian Bug : 1126047 Kyu Neushwaistein aka Carlos Cortes Alvarez found that inetutils, a collection of common network programs, was vulnerable to an authentication bypass problem in telnetd, which could lead to remote root shell access (if telnetd is enabled and exposed). As described also in the GNU InetUtils security advisory, it is not recommended to run telnetd server at all. At a minimum, restrict network access to the telnet port to trusted clients only. There is after all no encryption built into the telnet protocol, so authentication details would be sent in plain text over the network (which thus needs to be trusted). For more details see the GNU InetUtils Security Advisory: https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html For Debian 11 bullseye, this problem has been fixed in version 2:2.0-1+deb11u3. We recommend that you upgrade your inetutils packages. For the detailed security status of inetutils please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/inetutils Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . inetutilsfaces critical authentication bypass, enabling potential remote root access in exposed telnetd services.. Debian Inetutils Authentication Bypass Remote Access. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 25, 2026 •Critical Debian LTS
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics