Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
89

Fedora 24: KDEPIM Libraries Critical Flaw CVE-2016-7966 Update

the new package fixes the CVE-2016-7966. for more info please take a look at https://kde.org/info/security/advisory-20161006-1.txt. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-c9d15bbcbb 2016-11-03 19:08:13.237127 -------------------------------------------------------------------------------- Name : kdepimlibs Product : Fedora 24 Version : 4.14.10 Release : 15.fc24 URL : Summary : KDE PIM Libraries Description : Personal Information Management (PIM) libraries for KDE 4. -------------------------------------------------------------------------------- Update Information: the new package fixes the CVE-2016-7966. for more info please take a look at https://kde.org/info/security/advisory-20161006-1.txt -------------------------------------------------------------------------------- References: [ 1 ] Bug #1382298 - CVE-2016-7966 CVE-2016-7967 CVE-2016-7968 kdepim4: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1382298 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade kdepimlibs' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora's latest kdepimlibs update addresses the critical CVE-2016-7966 vulnerability. For installation guidance and detailed changes, check the official release notes. Fedora Update,KDEPIMLibraries,Critical Flaw,PIM Libraries,Security Update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 03, 2016 Critical Fedora
89

Fedora 25 kdepimlibs Security Advisory - CVE-2016-7966 Critical Fix

the new package fixes the CVE-2016-7966. for more info please take a look at https://kde.org/info/security/advisory-20161006-1.txt. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-92c112a380 2016-10-31 07:34:30.242358 -------------------------------------------------------------------------------- Name : kdepimlibs Product : Fedora 25 Version : 4.14.10 Release : 15.fc25 URL : Summary : KDE PIM Libraries Description : Personal Information Management (PIM) libraries for KDE 4. -------------------------------------------------------------------------------- Update Information: the new package fixes the CVE-2016-7966. for more info please take a look at https://kde.org/info/security/advisory-20161006-1.txt -------------------------------------------------------------------------------- References: [ 1 ] Bug #1382298 - CVE-2016-7966 CVE-2016-7967 CVE-2016-7968 kdepim4: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1382298 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade kdepimlibs' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora 25 rolls out kdepimlibs updates addressing CVE-2016-7966, enhancing both security measures and overall performance. It's advisable to install through DNF.. Fedora 25, kdepimlibs, security update,CVE-2016-7966, KDE PIM. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 31, 2016 Critical Fedora
87

Debian 8 KMail DSA-3697-1 Moderate: HTML Injection Risk

Roland Tapken discovered that insufficient input sanitising in KMail's plain text viewer allowed the injection of HTML code. For the stable distribution (jessie), this problem has been fixed in . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3697-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : kdepimlibs CVE ID : CVE-2016-7966 Roland Tapken discovered that insufficient input sanitising in KMail's plain text viewer allowed the injection of HTML code. For the stable distribution (jessie), this problem has been fixed in version 4:4.14.2-2+deb8u2. We recommend that you upgrade your kdepimlibs packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Explore the resolution implemented by Debian for an HTML vulnerability in KMail's display functionality through the security patch DSA-3697-1 concerning kdepimlibs.. KMail Security Update, Debian DSA-3697-1, HTML Injection Fix. . LinuxSecurity.com Team

Calendar%202 Oct 21, 2016 Debian
172

Ubuntu 12.04 LTS USN-3100-1 Moderate HTML Injection In KMail

KMail could be made to run HTML if it opened a specially crafted email.. =========================================================================Ubuntu Security Notice USN-3100-1 October 12, 2016 kdepimlibs vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: KMail could be made to run HTML if it opened a specially crafted email. Software Description: - kdepimlibs: the KDE PIM libraries Details: Roland Tapken discovered that the KDE-PIM Libraries incorrectly filtered URLs. A remote attacker could use this issue to perform an HTML injection attack in the KMail plain text viewer. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: libkpimutils4 4:4.8.5-0ubuntu0.3 After a standard system update you need to restart KMail to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3100-1 CVE-2016-7966 Package Information: https://launchpad.net/ubuntu/+source/kdepimlibs/4:4.8.5-0ubuntu0.3 . KMail may be susceptible to manipulation through specially designed emails that execute HTML injections, impacting Ubuntu 12.04 LTS along with its derivatives.. KMail Attack, HTML Injection, Ubuntu 12.04 LTS, KDE PIM Libraries, Security Update. . LinuxSecurity.com Team

Calendar%202 Oct 12, 2016 Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200