Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Chromium Important Use After Free Issues Fix 2026-21382-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 opam Important Security Update 2026-21380-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 ID 21374 Vim Important Code Execution Issues

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Python-Aiohttp Important Resource Issues Vuln 2026-21372-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed iscsiuio Moderate CVE-2026-44943 Advisory 2026-11317-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed libsoup Moderate CVE-2026-12478 Advisory 2026-11316-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE libgit2 Moderate Security Update for 5 Issues 2026-11315-1

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Ubuntu: DSA 634-1 Important: Api Insecure Cache Vulnerability Risk

Peter Samuelson, upstream maintainer of bmv, a PostScript viewer for SVGAlib, discovered that temporary files are created in an insecure fashion. A malicious local user could cause arbitrary files to be overwritten by a symlink attack.. --------------------------------------------------------------------------Debian Security Advisory DSA 633-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze January 11th, 2005 http://www.debian.org/security/faq --------------------------------------------------------------------------Package : bmv Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no CVE ID : CAN-2003-0014 Peter Samuelson, upstream maintainer of bmv, a PostScript viewer for SVGAlib, discovered that temporary files are created in an insecure fashion. A malicious local user could cause arbitrary files to be overwritten by a symlink attack. For the stable distribution (woody) this problem has been fixed in version 1.2-14.2. For the unstable distribution (sid) this problem has been fixed in version 1.2-17. We recommend that you upgrade your bmv packages. Upgrade Instructions --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 565 7b056960fafe4fca7c72083788cf5844 Size/MD5 checksum: 11811 ab4e7218ce67de842d3a78e1c8e11caf Size/MD5 checksum: 50755 40c881800edac6b1d2ce75ea8da6e6b4 Intel IA-32 architecture: Size/MD5 checksum: 21762 b625704138829c0dcd96a25e0a7f365b These files will probably be moved into the stable distribution on its next revision. ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Ubuntu Security Notice USN-1234-1 highlights vulnerabilities in temporary file management which could allow for symlink exploitation.. Debian Security, Symlink Attacks, Insecure Files. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 11, 2005 •Important Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian Flim High Risk Unsecured Temporary File Access DSA 500-1

This vulnerability could be exploited by a local user to overwrite files with the privileges of the user running emacs.. Debian Security Advisory DSA 500-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman May 1st, 2004 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : flim Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no CVE Ids : CAN-2004-0422 Tatsuya Kinoshita discovered a vulnerability in flim, an emacs library for working with internet messages, where temporary files were created without taking appropriate precautions. This vulnerability could potentially be exploited by a local user to overwrite files with the privileges of the user running emacs. the 'chroot' option. For the current stable distribution (woody) this problem has been fixed in version 1.14.3-9woody1. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you update your flim package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 576 e355dde8fc5dfb1b6b86504ad98ecb3f Size/MD5 checksum: 8044 71ee1b83fab4c323625b1dbd34a84497 Size/MD5 checksum: 165844 5931a530506e944f0605aeb022b5b97c Architecture independent components: Size/MD5 checksum: 156874 525f828cc8022e80601cb5c67d10b482 These files will probably bemoved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Debian Security Advisory DSA 500-1 outlines a critical flaw in flim, enabling local users to compromise file integrity.. debian advisories,insecure files,flim security,local exploitation. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 10, 2004 •Critical Debian
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorysoftware updatedebian

Debian: DSA 367-1 Critical: Caffeine Security Flaw in User Session Handling

eroaster does nottake appropriate security precautions when creating a temporary filefor use as a lockfile.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 366-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman August 5th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : eroaster Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no CVE Id : CAN-2003-0656 eroaster, a frontend for burning CD-R media using cdrecord, does not take appropriate security precautions when creating a temporary file for use as a lockfile. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running eroaster. For the stable distribution (woody) this problem has been fixed in version 2.1.0.0.3-2woody1. For the unstable distribution (sid) this problem has been fixed in version 2.2.0-0.5-1. We recommend that you update your eroaster package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 641 384fd61393ef45c246489da03dec960c Size/MD5 checksum: 2442 1356f13831c215a137f8639c3a656ee9 Size/MD5 checksum: 160884 1337d58a0c140ef62f2184699132ed40 Architecture independent components: Size/MD5 checksum: 145184 757bdf67c5b40eb6309260d90f1006ab These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Debian Security Advisory DSA 367-1 details critical Caffeine security flaw in user session handling requiring urgent updates.. Debian,Eroaster,Temporary File,Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Aug 06, 2003 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian: DSA 286-1 Critical: Gs-Common Insecure Temporary File Exploit

A file is created in an insecure fashion, which could allow a local attacker to overwrite files owned by a user who invokes ps2epsi.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 286-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze April 14th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : gs-common Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no Paul Szabo discovered insecure creation of a temporary file in ps2epsi, a script that is distributed as part of gs-common which contains common files for different Ghostscript releases. ps2epsiuses a temporary file in the process of invoking ghostscript. This file was created in an insecure fashion, which could allow a local attacker to overwrite files owned by a user who invokes ps2epsi. For the stable distribution (woody) this problem has been fixed in version 0.3.3.0woody1. The old stable distribution (potato) is not affected by this problem. For the unstable distribution (sid) these problems have been fixed in version 0.3.3.1. We recommend that you upgrade your gs-common package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 522 16e9ffda57fcdb6c48e977e499fd8671 Size/MD5 checksum: 16202 9588ecfa64ccffdc50df77cdf282edc0 Architecture independent components: Size/MD5 checksum: 23008 77cc8798e636d26f6fa3a9913afc1de4 These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Local attacker could exploit a weak transient document located in gs-shared. Ensure your application is current to maintain safety standards.. Debian Security,Gs-Common,File Protection,Local Threat. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 15, 2003 •Critical Debian
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics