Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Stay Secure with the Latest Linux Advisories

Ubuntu Large Esm H800
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 CUPS Critical Control Character Injection CVE-2026-34980

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579-1

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H800
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Chromium Important Use After Free Issues Fix 2026-21382-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 5 articles for you...
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorycriticaldebian

Debian 11 bullseye DLA-4126-2 critical: jinja2 regression fix

The fix for CVE-2025-27516 announced in DLA-4126 does not supporting Python 2. Now, the support of Python 2 was re-instated. For Debian 11 bullseye, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4126-2 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Lucas Kanashiro April 30, 2025 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : jinja2 Version : 2.11.3-1+deb11u4 CVE ID : CVE-2025-27516 Debian Bug : #1103045 The fix for CVE-2025-27516 announced in DLA-4126 does not supporting Python 2. Now, the support of Python 2 was re-instated. For Debian 11 bullseye, this problem has been fixed in version 2.11.3-1+deb11u4. We recommend that you upgrade your jinja2 packages. For the detailed security status of jinja2 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/jinja2 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Correction for jinja2 regression concerning Python 2 compatibility noted in DLA-4126-2 for Debian 11 bullseye.. jinja2 update, Debian 11, security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 30, 2025 •Critical Debian LTS
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorysecurity issuecode execution

Ubuntu 7343-2: Jinja2 Security Advisory Updates

USN-7343-1 introduced a regression in Jinja2.. ========================================================================== Ubuntu Security Notice USN-7343-2 March 12, 2025 jinja2 regression ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: USN-7343-1 introduced a regression in Jinja2. Software Description: - jinja2: small but fast and easy to use stand-alone template engine Details: USN-7343-1 fixed vulnerabilities in Jinja2. The update introduced a regression when attempting to import Jinja2 on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Rafal Krupinski discovered that Jinja2 did not properly restrict the execution of code in situations where templates are used maliciously. An attacker with control over a template's filename and content could potentially use this issue to enable the execution of arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2024-56201) It was discovered that Jinja2 sandboxed environments could be escaped through a call to a string format method. An attacker could possibly use this issue to enable the execution of arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2024-56326) It was discovered that Jinja2 sandboxed environments could be escaped through the malicious use of certain filters. An attacker could possibly use this issue to enable the execution of arbitrary code. (CVE-2025-27516) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS python-jinja2 2.10.1-2ubuntu0.6 python3-jinja2 2.10.1-2ubuntu0.6 Ubuntu 18.04 LTS python-jinja2 2.10-1ubuntu0.18.04.1+esm5 Available with Ubuntu Pro python3-jinja2 2.10-1ubuntu0.18.04.1+esm5 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7343-2 https://ubuntu.com/security/notices/USN-7343-1 https://bugs.launchpad.net/ubuntu/+source/jinja2/+bug/2102129 Package Information: https://launchpad.net/ubuntu/+source/jinja2/2.10.1-2ubuntu0.6 . Jinja2 update for Ubuntu addresses a critical regression issue from a previous advisory impacting template execution. . usn-7343-1, introduced, regression, jinja2, ======================================================. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 13, 2025 •Critical Ubuntu
Banner 2 1028x280 1708121730 1 1771599631
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorymoderateUbuntu

Ubuntu 7343-1: Jinja2 Security Advisory Updates

Several security issues were fixed in Jinja2.. ========================================================================== Ubuntu Security Notice USN-7343-1 March 11, 2025 jinja2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Jinja2. Software Description: - jinja2: small but fast and easy to use stand-alone template engine Details: Rafal Krupinski discovered that Jinja2 did not properly restrict the execution of code in situations where templates are used maliciously. An attacker with control over a template's filename and content could potentially use this issue to enable the execution of arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2024-56201) It was discovered that Jinja2 sandboxed environments could be escaped through a call to a string format method. An attacker could possibly use this issue to enable the execution of arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2024-56326) It was discovered that Jinja2 sandboxed environments could be escaped through the malicious use of certain filters. An attacker could possibly use this issue to enable the execution of arbitrary code. (CVE-2025-27516) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 python3-jinja2 3.1.3-1ubuntu1.24.10.2 Ubuntu 24.04 LTS python3-jinja2 3.1.2-1ubuntu1.3 Ubuntu 22.04 LTS python3-jinja2 3.0.3-1ubuntu0.4 Ubuntu 20.04 LTS python-jinja2 2.10.1-2ubuntu0.5 python3-jinja2 2.10.1-2ubuntu0.5 Ubuntu 18.04 LTS python-jinja2 2.10-1ubuntu0.18.04.1+esm4 Available with Ubuntu Pro python3-jinja2 2.10-1ubuntu0.18.04.1+esm4 Available with Ubuntu Pro Ubuntu 16.04 LTS python-jinja2 2.8-1ubuntu0.1+esm5 Available with Ubuntu Pro python3-jinja2 2.8-1ubuntu0.1+esm5 Available with Ubuntu Pro Ubuntu 14.04 LTS python-jinja2 2.7.2-2ubuntu0.1~esm6 Available with Ubuntu Pro python3-jinja2 2.7.2-2ubuntu0.1~esm6 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7343-1 CVE-2024-56201, CVE-2024-56326, CVE-2025-27516 Package Information: https://launchpad.net/ubuntu/+source/jinja2/3.1.3-1ubuntu1.24.10.2 https://launchpad.net/ubuntu/+source/jinja2/3.1.2-1ubuntu1.3 https://launchpad.net/ubuntu/+source/jinja2/3.0.3-1ubuntu0.4 https://launchpad.net/ubuntu/+source/jinja2/2.10.1-2ubuntu0.5 . Security issues fixed in Jinja2 for multiple Ubuntu versions, addressing execution risks and code exploitation.. security, jinja2, ======================================================. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 12, 2025 •Important Ubuntu
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryUbuntuupdate instructions

Ubuntu 24.10: USN-7244-1 critical: jinja2 code execution risks

Several security issues were fixed in jinja2.. ========================================================================== Ubuntu Security Notice USN-7244-1 January 30, 2025 jinja2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in jinja2. Software Description: - jinja2: small but fast and easy to use stand-alone template engine Details: It was discovered that Jinja2 incorrectly handled certain filenames when compiling template content. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-56201) It was discovered that Jinja2 incorrectly handled string formatting calls. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-56326) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 python3-jinja2 3.1.3-1ubuntu1.24.10.1 Ubuntu 24.04 LTS python3-jinja2 3.1.2-1ubuntu1.2 Ubuntu 22.04 LTS python3-jinja2 3.0.3-1ubuntu0.3 Ubuntu 20.04 LTS python-jinja2 2.10.1-2ubuntu0.4 python3-jinja2 2.10.1-2ubuntu0.4 Ubuntu 18.04 LTS python-jinja2 2.10-1ubuntu0.18.04.1+esm3 Available with Ubuntu Pro python3-jinja2 2.10-1ubuntu0.18.04.1+esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7244-1 CVE-2024-56201, CVE-2024-56326 Package Information: https://launchpad.net/ubuntu/+source/jinja2/3.1.3-1ubuntu1.24.10.1 https://launchpad.net/ubuntu/+source/jinja2/3.1.2-1ubuntu1.2 https://launchpad.net/ubuntu/+source/jinja2/3.0.3-1ubuntu0.3 https://launchpad.net/ubuntu/+source/jinja2/2.10.1-2ubuntu0.4 . New updates for Ubuntu tackle multiple jinja2 security flaws, underscoring the importance of prompt patching.. jinja2 Updates, Ubuntu Security Advisory, code execution risks. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 30, 2025 •Critical Ubuntu
Banner 2 1028x280 1708121730 1 1771599631
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebianpackage update

Debian 11 bullseye: DLA-3988-2 moderate: jinja2 python fix

This update fixes a regression that broke the python-jinja2 package for Python 2. Note that while this regression has been fixed, running applications . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3988-2 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk December 09, 2024 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : jinja2 Version : 2.11.3-1+deb11u2 This update fixes a regression that broke the python-jinja2 package for Python 2. Note that while this regression has been fixed, running applications with Python 2 continues to be unsupported in Debian 11 bullseye: For Debian 11 bullseye, this problem has been fixed in version 2.11.3-1+deb11u2. We recommend that you upgrade your jinja2 packages. For the detailed security status of jinja2 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/jinja2 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Notice DLA-3989-3 addresses jinja2 backend issue concerning Python 3 packages in Debian 12 bookworm.. Debian Update, Jinja2 Fix, Python 2 Regression, Security Advisory. . LinuxSecurity.com Team

Calendar%202 Dec 09, 2024 Debian LTS
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisoryDebianvulnerability

Debian 11 bullseye DLA-3988-1: jinja2 HTML Injection Fix

HTML attribute injection has been fixed in Jinja, a Python templating engine. For Debian 11 bullseye, these problems have been fixed in version 2.11.3-1+deb11u1. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3988-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk December 09, 2024 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : jinja2 Version : 2.11.3-1+deb11u1 CVE ID : CVE-2024-22195 CVE-2024-34064 Debian Bug : 1060748 1070712 HTML attribute injection has been fixed in Jinja, a Python templating engine. For Debian 11 bullseye, these problems have been fixed in version 2.11.3-1+deb11u1. We recommend that you upgrade your jinja2 packages. For the detailed security status of jinja2 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/jinja2 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . The latest security patch for jinja2 on Debian 11 bullseye resolves vulnerabilities related to HTML attribute injection with the release of version 2.11.3-1+deb11u1.. jinja2 security update, Debian LTS advisory, HTML injection fix, Python templating engine. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Dec 08, 2024 •Critical Debian LTS
Banner 2 1028x280 1708121730 1 1771599631
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorysoftware updateubuntu

Ubuntu 24.04 LTS: USN-6787-1 Moderate: Jinja2 XSS Security Alert

Jinja2 could allow cross-site scripting (XSS) attacks.. ========================================================================== Ubuntu Security Notice USN-6787-1 May 28, 2024 jinja2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Jinja2 could allow cross-site scripting (XSS) attacks. Software Description: - jinja2: small but fast and easy to use stand-alone template engine Details: It was discovered that Jinja2 incorrectly handled certain HTML attributes that were accepted by the xmlattr filter. An attacker could use this issue to inject arbitrary HTML attribute keys and values to potentially execute a cross-site scripting (XSS) attack. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS python3-jinja2 3.1.2-1ubuntu1.1 Ubuntu 23.10 python3-jinja2 3.1.2-1ubuntu0.23.10.2 Ubuntu 22.04 LTS python3-jinja2 3.0.3-1ubuntu0.2 Ubuntu 20.04 LTS python-jinja2 2.10.1-2ubuntu0.3 python3-jinja2 2.10.1-2ubuntu0.3 Ubuntu 18.04 LTS python-jinja2 2.10-1ubuntu0.18.04.1+esm2 Available with Ubuntu Pro python3-jinja2 2.10-1ubuntu0.18.04.1+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS python-jinja2 2.8-1ubuntu0.1+esm3 Available with Ubuntu Pro python3-jinja2 2.8-1ubuntu0.1+esm3 Available with Ubuntu Pro Ubuntu 14.04 LTS python-jinja2 2.7.2-2ubuntu0.1~esm3 Available with Ubuntu Pro python3-jinja2 2.7.2-2ubuntu0.1~esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6787-1 CVE-2024-34064 Package Information: https://launchpad.net/ubuntu/+source/jinja2/3.1.2-1ubuntu1.1 https://launchpad.net/ubuntu/+source/jinja2/3.1.2-1ubuntu0.23.10.2 https://launchpad.net/ubuntu/+source/jinja2/3.0.3-1ubuntu0.2 https://launchpad.net/ubuntu/+source/jinja2/2.10.1-2ubuntu0.3 . The Jinja2 security flaw exposes cross-site scripting risks; Ubuntu has released updates providing solutions to mitigate this vulnerability.. jinja2 security,xss threat,ubuntu advisory,software patch,update instructions. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 29, 2024 •Important Ubuntu
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderateFedora

Fedora 39: FEDORA-2024-b123d456cd Critical: jinja2 Security Update

Update to jinja2-3.1.4, fixes CVE-2024-34064.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-e609c057ad 2024-05-16 01:08:08.062410 -------------------------------------------------------------------------------- Name : mingw-python-jinja2 Product : Fedora 39 Version : 3.1.4 Release : 1.fc39 URL : https://palletsprojects.com/projects/jinja/ Summary : MinGW Windows Python jinja2 library Description : MinGW Windows Python jinja2 library. -------------------------------------------------------------------------------- Update Information: Update to jinja2-3.1.4, fixes CVE-2024-34064. -------------------------------------------------------------------------------- ChangeLog: * Tue May 7 2024 Sandro Mani - 3.1.4-1 - Update to 3.1.4 * Thu Jan 25 2024 Fedora Release Engineering - 3.1.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 3.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2279486 - TRIAGE CVE-2024-34064 mingw-python-jinja2: jinja2: accepts keys containing non-attribute characters [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2279486 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-e609c057ad' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . This enhancement addresses the jinja2 security concern in Fedora 39, improving the system's defense against potential threats.. mingw-python, jinja2 update, security patch, Fedora security, bug fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 16, 2024 •Critical Fedora
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics