Stay Vigilant with Timely Linux Security Advisories

Refine advisories

X Clear Filters

Low (7)

Mageia (2546)

bugfix (656)

important (26064)

security advisory (112981)

security issue (14297)

software update (11484)

critical (19064)

denial of service (16929)

fedora (8037)

python-pillow (71)

Gentoo (1)

OpenSUSE (1)

SuSE (7)

Ubuntu (1)

Published Date Range

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Advisory Watch

Linux Security Week

Community Poll

More Polls

Should Linux servers automatically install security updates?

Message!

Yes — critical security patches should install automatically.
No — every update should be tested before deployment.
Only critical vulnerabilities should auto-install.
I patch when Reddit starts panicking.

No answer selected. Please try again.

Please select either existing option or enter your own, however not both.

Please select minimum {0} answer(s).

Please select maximum {0} answer(s).

/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json

157

radio

Yes — critical security patches should install automatically. (0%)

0% votes

No — every update should be tested before deployment. (0%)

0% votes

Only critical vulnerabilities should auto-install. (0%)

0% votes

I patch when Reddit starts panicking. (0%)

0% votes

[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

bottom 200

Ubuntu 24.04 Linux Kernel High Copy Fail Escalation USN-8277-2

Fedora 42 Kernel Important Security Fix Update 2026-b9f338a467

Fedora 44 linux-firmware Update 20260519 ASoC Firmware Enhancements

Ubuntu 26.04 LTS Samba Critical Update Denial of Service USN-8306-1

Explore Latest Linux Security advisories

We found 1 articles for you...

100

security advisorydenial of serviceSuSE

SUSE iproute2 Low Denial of Service Threat Advisory 2026-2620-1

An update that solves one vulnerability and has one security fix can now be installed.. # Security update for iproute2 Announcement ID: SUSE-SU-2026:2620-1 Release Date: 2026-06-24T09:04:19Z Rating: low References: * bsc#1204562 * bsc#1254324 Cross-References: * CVE-2024-58251 CVSS scores: * CVE-2024-58251 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-58251 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-58251 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for iproute2 fixes the following issue * CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324). Other updates: * support display of bound but unconnected sockets (bsc#1204562) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2620=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2620=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2620=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2620=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2620=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2620=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * iproute2-5.14-150400.3.6.1 *libnetlink-devel-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-arpd-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * iproute2-arpd-debuginfo-5.14-150400.3.6.1 * iproute2-bash-completion-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-58251.html * https://bugzilla.suse.com/show_bug.cgi?id=1204562 * https://bugzilla.suse.com/show_bug.cgi?id=1254324 . SUSE updates iproute2 to address denial of service vulnerability CVE-2024-58251 with a low severity rating.. SUSE iproute2 security update denial service CVE-2024-58251. . Severity: Low. LinuxSecurity.com Team

Jun 24, 2026 •Low SuSE

202

security advisorydenial of servicepatch

openSUSE iproute2 Low Denial of Service Vulnerability 2026-2620-1

An update that solves one vulnerability and has one security fix can now be installed.. # Security update for iproute2 Announcement ID: SUSE-SU-2026:2620-1 Release Date: 2026-06-24T09:04:19Z Rating: low References: * bsc#1204562 * bsc#1254324 Cross-References: * CVE-2024-58251 CVSS scores: * CVE-2024-58251 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-58251 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-58251 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for iproute2 fixes the following issue * CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324). Other updates: * support display of bound but unconnected sockets (bsc#1204562) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2620=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2620=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2620=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2620=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2620=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2620=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * iproute2-5.14-150400.3.6.1 *libnetlink-devel-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-arpd-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * iproute2-arpd-debuginfo-5.14-150400.3.6.1 * iproute2-bash-completion-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * iproute2-5.14-150400.3.6.1 * iproute2-debugsource-5.14-150400.3.6.1 * iproute2-debuginfo-5.14-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-58251.html * https://bugzilla.suse.com/show_bug.cgi?id=1204562 * https://bugzilla.suse.com/show_bug.cgi?id=1254324 . Update resolves low-severity denial of service issue in iproute2 for openSUSE users. Install the patch now to enhance security.. iproute2 update, openSUSE patch, Linux security, service security, denial of service. . Severity: Low. LinuxSecurity.com Team

Jun 24, 2026 •Low OpenSUSE

100

security advisorydenial of serviceSuSE

SUSE Linux Micro 6.1 Iproute2 Low Denial of Service Patch Update

An update that solves one vulnerability and has four fixes can now be installed.. # Security update for iproute2 Announcement ID: SUSE-SU-2026:21737-1 Release Date: 2026-05-20T11:02:46Z Rating: low References: * bsc#1204562 * bsc#1234383 * bsc#1243005 * bsc#1248660 * bsc#1254324 Cross-References: * CVE-2024-58251 CVSS scores: * CVE-2024-58251 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-58251 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-58251 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability and has four fixes can now be installed. ## Description: This update for iproute2 fixes the following issue * CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324). Changes for iproute2: * support display of bound but unconnected sockets (bsc#1204562). * avoid spurious cgroup warning (bsc#1234383). * add post-6.4 follow-up fixes (bsc#1243005). * devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-537=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * iproute2-debugsource-6.4-slfo.1.1_1.1 * iproute2-6.4-slfo.1.1_1.1 * iproute2-debuginfo-6.4-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-58251.html * https://bugzilla.suse.com/show_bug.cgi?id=1204562 * https://bugzilla.suse.com/show_bug.cgi?id=1234383 * https://bugzilla.suse.com/show_bug.cgi?id=1243005 * https://bugzilla.suse.com/show_bug.cgi?id=1248660 * https://bugzilla.suse.com/show_bug.cgi?id=1254324 . Install the latest SUSE security advisory foriproute2 addressing a low-level denial of service issue and more.. SUSE Security, iproute2 Update, Linux Micro Security, Denial of Service Fix, Security Patch. . Severity: Low. LinuxSecurity.com Team

May 22, 2026 •Low SuSE

100

security advisorydenial of serviceSuSE

SUSE Linux Micro 6.0 iproute2 Low Denial of Service Update 2026-21679-1

An update that solves one vulnerability and has four fixes can now be installed.. # Security update for iproute2 Announcement ID: SUSE-SU-2026:21679-1 Release Date: 2026-05-15T10:43:49Z Rating: low References: * bsc#1204562 * bsc#1234383 * bsc#1243005 * bsc#1248660 * bsc#1254324 Cross-References: * CVE-2024-58251 CVSS scores: * CVE-2024-58251 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-58251 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-58251 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability and has four fixes can now be installed. ## Description: This update for iproute2 fixes the following issue * CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324). Changes for iproute2: * support display of bound but unconnected sockets (bsc#1204562). * avoid spurious cgroup warning (bsc#1234383). * add post-6.4 follow-up fixes (bsc#1243005). * devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-714=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * iproute2-debugsource-6.4-1.1 * iproute2-6.4-1.1 * iproute2-debuginfo-6.4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-58251.html * https://bugzilla.suse.com/show_bug.cgi?id=1204562 * https://bugzilla.suse.com/show_bug.cgi?id=1234383 * https://bugzilla.suse.com/show_bug.cgi?id=1243005 * https://bugzilla.suse.com/show_bug.cgi?id=1248660 * https://bugzilla.suse.com/show_bug.cgi?id=1254324 . Update for iproute2 addresses one issue and four useful fixes for SUSE Linux Micro6.0.. SUSE Update, iproute2 Fix, Denial of Service, Linux Security. . Severity: Low. LinuxSecurity.com Team

May 19, 2026 •Low SuSE

100

security advisorySuSElow

SUSE Linux Micro 6.2 iproute2 Low Terminal Lock Up 2026-21582-1

An update that solves one vulnerability, contains one feature and has two fixes can now be installed.. # Security update for iproute2 Announcement ID: SUSE-SU-2026:21582-1 Release Date: 2026-05-07T07:31:57Z Rating: low References: * bsc#1241316 * bsc#1253044 * bsc#1254324 * jsc#PED-14787 Cross-References: * CVE-2024-58251 CVSS scores: * CVE-2024-58251 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-58251 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-58251 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability, contains one feature and has two fixes can now be installed. ## Description: This update for iproute2 fixes the following issues: Security issues fixed: * CVE-2024-58251: terminal lock up via ANSI terminal escape sequence set in `argv[0]` (bsc#1254324). Other updates and bugfixes: * Fix package for immutable mode (jsc#PED-14787). * Add netshaper support (bsc#1253044). * Add follow-up fixes included by upstream after the 6.12 release (bsc#1241316): * Parse FQ band weights correctly * bond: fix stack smash in xstats * ip: support setting multiple features * tc: gred: fix debug print ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-715=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * iproute2-debugsource-6.12-160000.3.1 * iproute2-debuginfo-6.12-160000.3.1 * iproute2-6.12-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-58251.html * https://bugzilla.suse.com/show_bug.cgi?id=1241316 * https://bugzilla.suse.com/show_bug.cgi?id=1253044 *https://bugzilla.suse.com/show_bug.cgi?id=1254324 * https://jira.suse.com/browse/PED-14787 . Update released for SUSE to address a terminal lock-up issue in iproute2; patch recommended for low severity vulnerability.. SUSE Linux, iproute2, terminal lock up, CVE-2024-58251. . Severity: Low. LinuxSecurity.com Team

May 15, 2026 •Low SuSE

100

security advisorySuSElow

SUSE iproute2 Low Terminal Hang Fix CVE-2024-58251 2026-21572-1

An update that solves one vulnerability, contains one feature and has two fixes can now be installed.. # Security update for iproute2 Announcement ID: SUSE-SU-2026:21572-1 Release Date: 2026-05-07T07:37:28Z Rating: low References: * bsc#1241316 * bsc#1253044 * bsc#1254324 * jsc#PED-14787 Cross-References: * CVE-2024-58251 CVSS scores: * CVE-2024-58251 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-58251 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-58251 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability, contains one feature and has two fixes can now be installed. ## Description: This update for iproute2 fixes the following issues: Security issues fixed: * CVE-2024-58251: terminal lock up via ANSI terminal escape sequence set in `argv[0]` (bsc#1254324). Other updates and bugfixes: * Fix package for immutable mode (jsc#PED-14787). * Add netshaper support (bsc#1253044). * Add follow-up fixes included by upstream after the 6.12 release (bsc#1241316): * Parse FQ band weights correctly * bond: fix stack smash in xstats * ip: support setting multiple features * tc: gred: fix debug print ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-715=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-715=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * iproute2-6.12-160000.3.1 * iproute2-debugsource-6.12-160000.3.1 * iproute2-debuginfo-6.12-160000.3.1 *libnetlink-devel-6.12-160000.3.1 * iproute2-arpd-6.12-160000.3.1 * iproute2-bash-completion-6.12-160000.3.1 * iproute2-arpd-debuginfo-6.12-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * iproute2-6.12-160000.3.1 * iproute2-debugsource-6.12-160000.3.1 * iproute2-debuginfo-6.12-160000.3.1 * libnetlink-devel-6.12-160000.3.1 * iproute2-arpd-6.12-160000.3.1 * iproute2-bash-completion-6.12-160000.3.1 * iproute2-arpd-debuginfo-6.12-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-58251.html * https://bugzilla.suse.com/show_bug.cgi?id=1241316 * https://bugzilla.suse.com/show_bug.cgi?id=1253044 * https://bugzilla.suse.com/show_bug.cgi?id=1254324 * https://jira.suse.com/browse/PED-14787 . SUSE updates iproute2 to address terminal hang issues, fixing CVE-2024-58251 with low severity rating. Stay secure!. SUSE iproute2 CVE-2024-58251 security updates low severity. . Severity: Low. LinuxSecurity.com Team

May 11, 2026 •Low SuSE

100

security advisorydenial of serviceupdate

SUSE connectivity tool iproute2 Potential DDoS Risk SUSE-SU-2026-1450-5

An update that solves one vulnerability can now be installed.. # Security update for iproute2 Announcement ID: SUSE-SU-2026:1418-1 Release Date: 2026-04-16T16:43:07Z Rating: low References: * bsc#1254324 Cross-References: * CVE-2024-58251 CVSS scores: * CVE-2024-58251 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-58251 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-58251 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for iproute2 fixes the following issue: * CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1418=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1418=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * iproute2-arpd-debuginfo-6.4-150600.7.12.1 * libnetlink-devel-6.4-150600.7.12.1 * iproute2-6.4-150600.7.12.1 * iproute2-debugsource-6.4-150600.7.12.1 * iproute2-bash-completion-6.4-150600.7.12.1 * iproute2-debuginfo-6.4-150600.7.12.1 * iproute2-arpd-6.4-150600.7.12.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * iproute2-arpd-debuginfo-6.4-150600.7.12.1 * libnetlink-devel-6.4-150600.7.12.1 * iproute2-6.4-150600.7.12.1 * iproute2-debugsource-6.4-150600.7.12.1 *iproute2-bash-completion-6.4-150600.7.12.1 * iproute2-debuginfo-6.4-150600.7.12.1 * iproute2-arpd-6.4-150600.7.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-58251.html * https://bugzilla.suse.com/show_bug.cgi?id=1254324 . This update resolves a low-severity denial of service issue in iproute2 for SUSE systems. Stay secure with updates.. SUSE iproute2 security low update denial of service. . Severity: Low. LinuxSecurity.com Team

Apr 17, 2026 •Low SuSE

100

security advisorymoderateiproute2

SUSE Linux: 2021:3452-1 Moderate: iproute2 Use-After-Free Fix

An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for iproute2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:3452-1 Rating: moderate References: #1085669 #1171452 Cross-References: CVE-2019-20795 CVSS scores: CVE-2019-20795 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2019-20795 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Server 12-SP5 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for iproute2 fixes the following issues: - CVE-2019-20795: Fixed a use-after-free vulnerability in get_netnsid_from_name. (bsc#1171452) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-3452=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-3452=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): iproute2-debuginfo-4.12-16.6.1 iproute2-debugsource-4.12-16.6.1 libnetlink-devel-4.12-16.6.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): iproute2-4.12-16.6.1 iproute2-debuginfo-4.12-16.6.1 iproute2-debugsource-4.12-16.6.1 References: https://www.suse.com/security/cve/CVE-2019-20795.html https://bugzilla.suse.com/1085669 https://bugzilla.suse.com/1171452 . SUSE hasreleased a security patch for tcpdump addressing a moderate critical vulnerability. Updates can now be accessed for the impacted systems.. iproute2 Update, SUSE Security Announcement, Software Development Kit, Network Utilities Security. . LinuxSecurity.com Team

Oct 18, 2021 SuSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Advisory Watch

Linux Security Week

Community Poll

More Polls

Should Linux servers automatically install security updates?

Message!

Yes — critical security patches should install automatically.
No — every update should be tested before deployment.
Only critical vulnerabilities should auto-install.
I patch when Reddit starts panicking.

No answer selected. Please try again.

Please select either existing option or enter your own, however not both.

Please select minimum {0} answer(s).

Please select maximum {0} answer(s).

/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json

157

radio

Yes — critical security patches should install automatically. (0%)

0% votes

No — every update should be tested before deployment. (0%)

0% votes

Only critical vulnerabilities should auto-install. (0%)

0% votes

I patch when Reddit starts panicking. (0%)

0% votes

bottom 200

Stay Secure with the Latest Linux Advisories

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Fedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e

Fedora 43 libseccomp Critical Security Fixes 2026-9afc6b6bb3

Fedora 43 dnsx Update Addresses Critical DoS Cross-Site Scripting Issues

Fedora 43 OpenSSH Significant Update for Remote File Misplacement Issue

Fedora 43 freerdp Important Update Notification 2026-fa672d26a8

Fedora 43 LibTIFF Critical Security Update for Arbitrary Code Execution

Fedora 43 mingw-python-idna Critical DoS Risk Update 2026-9dbf4d0ca8

Fedora 43 mingw-python-pip Critical Path Traversal Risk Advisory

Refine advisories

Get the latest News and Insights

Community Poll

Should Linux servers automatically install security updates?

Trending News

Ubuntu 24.04 Linux Kernel High Copy Fail Escalation USN-8277-2

Fedora 42 Kernel Important Security Fix Update 2026-b9f338a467

Fedora 44 linux-firmware Update 20260519 ASoC Firmware Enhancements

Ubuntu 26.04 LTS Samba Critical Update Denial of Service USN-8306-1

Explore Latest Linux Security advisories

SUSE iproute2 Low Denial of Service Threat Advisory 2026-2620-1

openSUSE iproute2 Low Denial of Service Vulnerability 2026-2620-1

SUSE Linux Micro 6.1 Iproute2 Low Denial of Service Patch Update

SUSE Linux Micro 6.0 iproute2 Low Denial of Service Update 2026-21679-1

SUSE Linux Micro 6.2 iproute2 Low Terminal Lock Up 2026-21582-1

SUSE iproute2 Low Terminal Hang Fix CVE-2024-58251 2026-21572-1

SUSE connectivity tool iproute2 Potential DDoS Risk SUSE-SU-2026-1450-5

SUSE Linux: 2021:3452-1 Moderate: iproute2 Use-After-Free Fix

Get the latest News and Insights

Community Poll

Should Linux servers automatically install security updates?

Trending News

Ubuntu 24.04 Linux Kernel High Copy Fail Escalation USN-8277-2

Fedora 42 Kernel Important Security Fix Update 2026-b9f338a467

Fedora 44 linux-firmware Update 20260519 ASoC Firmware Enhancements

Ubuntu 26.04 LTS Samba Critical Update Denial of Service USN-8306-1

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Stay Secure with the Latest Linux Advisories

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Fedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e

Fedora 43 libseccomp Critical Security Fixes 2026-9afc6b6bb3

Fedora 43 dnsx Update Addresses Critical DoS Cross-Site Scripting Issues

Fedora 43 OpenSSH Significant Update for Remote File Misplacement Issue

Fedora 43 freerdp Important Update Notification 2026-fa672d26a8

Fedora 43 LibTIFF Critical Security Update for Arbitrary Code Execution

Fedora 43 mingw-python-idna Critical DoS Risk Update 2026-9dbf4d0ca8

Fedora 43 mingw-python-pip Critical Path Traversal Risk Advisory

Refine advisories

severity

Topics

Distro

Published Date

Get the latest News and Insights

Community Poll

Should Linux servers automatically install security updates?

Trending News

Explore Latest Linux Security advisories

Get the latest News and Insights

Community Poll

Should Linux servers automatically install security updates?

Trending News

Search Topics

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!