Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Chromium Important Use After Free Issues Fix 2026-21382-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 opam Important Security Update 2026-21380-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 ID 21374 Vim Important Code Execution Issues

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Python-Aiohttp Important Resource Issues Vuln 2026-21372-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed iscsiuio Moderate CVE-2026-44943 Advisory 2026-11317-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed libsoup Moderate CVE-2026-12478 Advisory 2026-11316-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE libgit2 Moderate Security Update for 5 Issues 2026-11315-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE acl Moderate Update CVE-2026-54369 CVE-2026-54370 CVE-2026-54371

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 5 articles for you...
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorysecurity updatedebian

Debian: DSA-5337-1 Critical: Nova Information Exposure Fix

Guillaume Espanel, Pierre Libeau, Arnaud Morin and Damien Rannou discovered that missing input sanitising in the handling of VMDK images in OpenStack Compute (codenamed Nova) may result in information disclosure. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5337-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff February 01, 2023 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : nova CVE ID : CVE-2022-47951 Debian Bug : 1029561 Guillaume Espanel, Pierre Libeau, Arnaud Morin and Damien Rannou discovered that missing input sanitising in the handling of VMDK images in OpenStack Compute (codenamed Nova) may result in information disclosure. For the stable distribution (bullseye), this problem has been fixed in version 2:22.0.1-2+deb11u1. We recommend that you upgrade your nova packages. For the detailed security status of nova please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/nova Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Patch addressing input validation vulnerability in OpenStack Nova, enhancing protection for Debian installations.. OpenStack Nova, Debian Security, Information Disclosure, Input Validation, Security Update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 01, 2023 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorylocal privilege escalationDebian

Debian: DSA-4758-1 Critical: X.Org X Server Privilege Escalation

Several vulnerabilities have been discovered in the X.Org X server. Missing input sanitising in X server extensions may result in local privilege escalation if the X server is configured to run with root privileges. In addition an ASLR bypass was fixed. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4758-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2020 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : xorg-server CVE ID : CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 CVE-2020-14361 CVE-2020-14362 Debian Bug : 968986 Several vulnerabilities have been discovered in the X.Org X server. Missing input sanitising in X server extensions may result in local privilege escalation if the X server is configured to run with root privileges. In addition an ASLR bypass was fixed. For the stable distribution (buster), these problems have been fixed in version 2:1.20.4-1+deb10u1. We recommend that you upgrade your xorg-server packages. For the detailed security status of xorg-server please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/xorg-server Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian DSA-4800-1 tackles xorg-server security flaws, advising users to update for protection—full information provided.. xorg-server security, Debian advisory, privilege escalation, input validation. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 04, 2020 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebiancommand execution

Debian DSA-4009-1 Shadowsocks-Libev Critical Command Execution

Niklas Abel discovered that insufficient input sanitising in the the ss-manager component of shadowsocks-libev, a lightweight socks5 proxy, could result in arbitrary shell command execution. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4009-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff October 29, 2017 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : shadowsocks-libev CVE ID : CVE-2017-15924 Niklas Abel discovered that insufficient input sanitising in the the ss-manager component of shadowsocks-libev, a lightweight socks5 proxy, could result in arbitrary shell command execution. For the stable distribution (stretch), this problem has been fixed in version 2.6.3+ds-3+deb9u1. We recommend that you upgrade your shadowsocks-libev packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A critical update for shadowsocks-libev in Debian addresses vulnerabilities allowing unauthorized command execution. Users must upgrade promptly to ensure security.. Shadowsocks-Libev Update, Debian Security, Command Execution Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 29, 2017 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian: DSA-3007-1 Critical: Cacti SQL Injection and XSS Issues

Multiple security issues (cross-site scripting, missing input sanitising and SQL injection) have been discovered in Cacti, a web interface for graphing of monitoring systems. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3007-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff August 20, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : cacti CVE ID : CVE-2014-5025 CVE-2014-5026 CVE-2014-5027 CVE-2014-5261 CVE-2014-5262 Multiple security issues (cross-site scripting, missing input sanitising and SQL injection) have been discovered in Cacti, a web interface for graphing of monitoring systems. For the stable distribution (wheezy), these problems have been fixed in version 0.8.8a+dfsg-5+deb7u4. For the unstable distribution (sid), these problems have been fixed in version 0.8.8b+dfsg-8. We recommend that you upgrade your cacti packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Cacti, an open-source network monitoring tool, faces serious security issues, especially on Debian, mainly due to improper input sanitization and SQL injection targets.. Debian Cacti Update, Cross-Site Scripting Fix, SQL Injection Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Aug 20, 2014 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
87
Ls Advisories Debian Esm H240
Price Tag%201security advisoryDebianmultiple issues

Debian 0.34.1-1 Moderate: DTC Multiple Issues Security Update

Ansgar Burchardt, Mike O'Connor and Philipp Kern discovered multiple vulnerabilities in DTC, a web control panel for admin and accounting hosting services: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2365-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2011 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : dtc Vulnerability : several Problem type : local/remote Debian-specific: no CVE ID : CVE-2011-3195 CVE-2011-3196 CVE-2011-3197 CVE-2011-3198 CVE-2011-3199 Debian Bug : 637469 637477 637485 637584 637629 637630 637618 637537 637487 637632 637669 Ansgar Burchardt, Mike O'Connor and Philipp Kern discovered multiple vulnerabilities in DTC, a web control panel for admin and accounting hosting services: CVE-2011-3195 A possible shell insertion has been found in the mailing list handling. CVE-2011-3196 Unix rights for the apache2.conf were set incorrectly (world readable). CVE-2011-3197 Incorrect input sanitising for the $_SERVER["addrlink"] parameter could lead to SQL insertion. CVE-2011-3198 DTC was using the -b option of htpasswd, possibly revealing password in clear text using ps or reading /proc. CVE-2011-3199 A possible HTML/javascript insertion vulnerability has been found in the DNS & MX section of the user panel. This update also fixes several vulnerabilities, for which no CVE ID has been assigned: It has been discovered that DTC performs insufficient input sanitising in the package installer, leading to possible unwanted destination directory for installed packages if some DTC application packages are installed (note that these aren't available in Debian main). DTC was setting-up /etc/sudoers with permissive sudo rightsto chrootuid. Incorrect input sanitizing in the package installer could lead to SQL insertion. A malicious user could enter a specially crafted support ticket subject leading to an SQL injection in the draw_user_admin.php. For the oldstable distribution (lenny), this problem has been fixed in version 0.29.18-1+lenny2 The stable distribution (squeeze) doesn't include dtc. For the unstable distribution (sid), this problem has been fixed in version 0.34.1-1. We recommend that you upgrade your dtc packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Uncover various weaknesses in DTC impacting Debian. Insights on resolutions and suggestions are included.. DTC vulnerabilities, Debian security, input sanitising issues. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Dec 18, 2011 •Important Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian: DSA-2047-1 Urgent Aria2 Input Validation Vulnerability Issue

A vulnerability was discovered in aria2, a download client. The "name" attribute of the "file" element of metalink files is not properly sanitised before using it to download files. If a user is tricked into downloading from a specially crafted metalink file, this can be . - ------------------------------------------------------------------------ Debian Security Advisory DSA-2047-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Thijs Kinkhorst May 17, 2010 http://www.debian.org/security/faq - ------------------------------------------------------------------------ Package : aria2 Vulnerability : insufficient input sanitising Problem type : local (remote) Debian-specific: no CVE Id : CVE-2010-1512 A vulnerability was discovered in aria2, a download client. The "name" attribute of the "file" element of metalink files is not properly sanitised before using it to download files. If a user is tricked into downloading from a specially crafted metalink file, this can be exploited to download files to directories outside of the intended download directory. For the stable distribution (lenny), this problem has been fixed in version 0.14.0-1+lenny2. For the unstable distribution (sid), this problem has been fixed in version 1.9.3-1. We recommend that you upgrade your aria2 package. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 5.0 alias lenny - -------------------------------- Source archives: Size/MD5 checksum: 1343630 ae853240ee88e373a138021613e28cb1 Size/MD5 checksum: 110266f40f6d5908ed4caef208b258eb7617 Size/MD5 checksum: 21863 b2b9fec5b9a7eccd68f12ad29804cb9c alpha architecture (DEC Alpha) Size/MD5 checksum: 1272534 7783017240e59e1f8cd5bbb3bc4fd215 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 1092380 97206956e1358720fced7b3487727730 arm architecture (ARM) Size/MD5 checksum: 1207446 af7d180b51ab9129e1241fb26a4b26a6 armel architecture (ARM EABI) Size/MD5 checksum: 1015996 b9c6fd9eb3029e738389666989f2d639 hppa architecture (HP PA RISC) Size/MD5 checksum: 1261974 f656d07dec19c29d0f122083f753a624 i386 architecture (Intel ia32) Size/MD5 checksum: 1062920 681a52c51e9492c494b9f4f75549881b ia64 architecture (Intel ia64) Size/MD5 checksum: 1481560 7a2c94d39885c2a8ca84d60339aa7c42 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 1159630 2e26a8a5fb8e1d547ce11e6041dba0af mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 1150846 6582fbd585d877b014acbec16d3d8f2f powerpc architecture (PowerPC) Size/MD5 checksum: 1104136 472f6ab9514e93c143ad770c39c77e4b s390 architecture (IBM S/390) Size/MD5 checksum: 1027002 c9291e6598c0b4f081749276e3eed79a sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 1166750 b84d8c95931f2beb5c129f8d3bddaacc These files will probably be moved into the stable distribution on its next update. - --------------------------------------------------------------------------------- For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Learn the methods to address the aria2 path traversal vulnerability on Debian platforms by implementing timely updates and robust security protocols.. aria2 Fix, Debian Security Update, Input Sanitising Issue. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 17, 2010 •Important Debian
Banner 3 1028x280 1708121785 1771599793
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorybug fixremote issue

Debian: DSA-1883-2 Critical: Nagios2 Input Sanitising Remote Issue

The previous nagios2 update introduced a regression, which caused status.cgi to segfault when used directly without specifying the 'host' variable. This update fixes the problem. For reference the original advisory text follows. . - ------------------------------------------------------------------------ Debian Security Advisory DSA-1883-2 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Giuseppe Iuculano September 14, 2009 http://www.debian.org/security/faq - ------------------------------------------------------------------------ Package : nagios2 Vulnerability : missing input sanitising Problem type : remote Debian-specific: no CVE Ids : CVE-2007-5624 CVE-2007-5803 CVE-2008-1360 Debian Bugs : 448371 482445 485439 The previous nagios2 update introduced a regression, which caused status.cgi to segfault when used directly without specifying the 'host' variable. This update fixes the problem. For reference the original advisory text follows. Several vulnerabilities have been found in nagios2, ahost/service/network monitoring and management system. The Common Vulnerabilities and Exposures project identifies the following problems: Several cross-site scripting issues via several parameters were discovered in the CGI scripts, allowing attackers to inject arbitrary HTML code. In order to cover the different attack vectors, these issues have been assigned CVE-2007-5624, CVE-2007-5803 and CVE-2008-1360. For the oldstable distribution (etch), these problems have been fixed in version 2.6-2+etch5. The stable distribution (lenny) does not include nagios2 and nagios3 is not affected by these problems. The testing distribution (squeeze) and the unstable distribution (sid) do not contain nagios2 and nagios3 is not affected by these problems. We recommend that you upgrade your nagios2 packages. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install thereferenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 4.0 alias etch - ------------------------------- Debian GNU/Linux 5.0 alias lenny - -------------------------------- Debian (oldstable) - ------------------ Oldstable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 35726 1c9d7955bb59162fa82934ef12c53d73 Size/MD5 checksum: 948 93eeeb6eb5ba0d7d3d5c659f9cc762e4 Size/MD5 checksum: 1734400 a032edba07bf389b803ce817e9406c02 Architecture independent packages: Size/MD5 checksum: 59516 8edae60c2b64183afbd5b5c5c79df649 Size/MD5 checksum: 1150060 c5b23e507b405aed13e6148381a5161f alpha architecture (DEC Alpha) Size/MD5 checksum: 1222220 33fac2a26d60b48a2e3d6cc03ef161f2 Size/MD5 checksum: 1703082 685386628adefdea4ef139d8d073be57 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 1688192 fdc3c934dc4e0afa728d9789fc1071aa Size/MD5 checksum: 1098470 c08807062733811fa047eb15d9727c82 arm architecture (ARM) Size/MD5 checksum: 1025042 a9d7fa95c7eac54287a2e73478ea3ba6 Size/MD5 checksum: 1537944 59b06b0f6ae1061d01a7f1a7b85fb4b4 hppa architecture (HP PA RISC) Size/MD5 checksum: 1621998 07cca557bc05cb0f4845f05c0d2b9311 Size/MD5 checksum: 1148900 d5b10578c95a21ce66ff11cc5a870047 i386 architecture (Intel ia32) Size/MD5 checksum: 1587914 84dcc6957ce50c2b6e7ff243d21b5e8d Size/MD5 checksum: 1017162 d57c40f4621e185fee5fe0bbd814b7d5 ia64 architecture (Intel ia64) Size/MD5 checksum: 1623636 7abc0f025330c87d2c7a9b4bf3252d16 Size/MD5 checksum: 1711368 59bd21369a4a978d1509fe15f7b59349 mipsel architecture (MIPS (LittleEndian)) Size/MD5 checksum: 1663800 7fae1ba19b03ab963b9a4dfa2055cfc5 Size/MD5 checksum: 1104990 2536c8ff0b839a7028fc605b2f2faab8 powerpc architecture (PowerPC) Size/MD5 checksum: 1667892 06826d82ff58171d82bdee8c3eb32b61 Size/MD5 checksum: 1088416 0552ad5628f45dd8a0e69d0f126a40b1 sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 1485348 46f02971253b25e3e9622bc95863d022 Size/MD5 checksum: 988288 d289d9b68334c7c5a1486771136cac4c These files will probably be moved into the stable distribution on its next update. - --------------------------------------------------------------------------------- For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . - ------------------------------------------------------------------------ Debian Security Advisory . previous, nagios2, update, introduced, regression, which, caused, status, segfault. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 15, 2009 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian: DSA-1836-1 Critical Issue: Fckeditor Remote Code Execution

Vinny Guido discovered that multiple input sanitising vulnerabilities in Fckeditor, a rich text web editor component, may lead to the execution of arbitrary code. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1836-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff July 16, 2009 http://www.debian.org/security/faq - ------------------------------------------------------------------------ Package : fckeditor Vulnerability : missing input sanitising Problem type : remote Debian-specific: no CVE Id(s) : CVE-2009-2265 Vinny Guido discovered that multiple input sanitising vulnerabilities in Fckeditor, a rich text web editor component, may lead to the execution of arbitrary code. The old stable distribution (etch) doesn't contain fckeditor. For the stable distribution (lenny), this problem has been fixed in version 1:2.6.2-1lenny1. For the unstable distribution (sid), this problem has been fixed in version 1:2.6.4.1-1. We recommend that you upgrade your fckeditor package. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 5.0 alias lenny - -------------------------------- Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 934845 8b58da54703e47622e07b8fdc9f5f93d Size/MD5 checksum: 25408 2e10c633f28bdffa1afda0918783ac9e Size/MD5 checksum: 1028489da6d230d86e6347c2f5839ffd0af3 Architecture independent packages: Size/MD5 checksum: 945672 5a0d59f390945ab2df02c43be8e81a5c These files will probably be moved into the stable distribution on its next update. - --------------------------------------------------------------------------------- For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Various input validation vulnerabilities in fckeditor allow for potential remote code execution. It is advised to upgrade for enhanced protection.. Fckeditor Update, Debian Security, Input Sanitising, Code Execution Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 16, 2009 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics