Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Chromedriver Moderate Security Issues Fixed 2026-10958-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed libmozjs Moderate Update CVE-2025-70103

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Perl HTML Parser Moderate CVE-2026-8829 Advisory

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed kernel-devel Moderate Security Issue 2026-10954-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Gleam Moderate Threat Fixed 2026-10953-1

Calendar White Jun 08, 2026
moderate
Ubuntu Large Esm H900
Ubuntu

Ubuntu 25.10 Systemd Critical Arbitrary Code Exec DNS Issues USN-8402-1

Calendar White Jun 08, 2026
Critical
Opensuse Large Esm H800
openSUSE

openSUSE Epiphany Important Password Handling Issue CVE-2023-26081

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS 8399-1 Pillow Denial of Service Risk CVE-2026-42308

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS Poppler Critical DoS Code Execution Vuln USN-8400-1

Calendar White Jun 08, 2026
Critical
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -3 articles for you...
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorydenial of servicecritical

Ubuntu 25.10: klibc Critical Integer Arithmetic DoS USN-7959-1

klibc could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-7959-1 January 14, 2026 klibc vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: klibc could be made to crash if it received specially crafted input. Software Description: - klibc: Minimalistic libc subset for use with initramfs Details: It was discovered that zlib, vendored in klibc, did not properly handle integer arithmetic. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 klibc-utils 2.0.14-1ubuntu1.1 libklibc 2.0.14-1ubuntu1.1 Ubuntu 25.04 klibc-utils 2.0.13-4ubuntu1.1 libklibc 2.0.13-4ubuntu1.1 Ubuntu 24.04 LTS klibc-utils 2.0.13-4ubuntu0.2 libklibc 2.0.13-4ubuntu0.2 Ubuntu 22.04 LTS klibc-utils 2.0.10-4ubuntu0.2 libklibc 2.0.10-4ubuntu0.2 Ubuntu 20.04 LTS klibc-utils 2.0.7-1ubuntu5.2+esm1 Available with Ubuntu Pro libklibc 2.0.7-1ubuntu5.2+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS klibc-utils 2.0.4-9ubuntu2.2+esm2 Available with Ubuntu Pro libklibc 2.0.4-9ubuntu2.2+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS klibc-utils 2.0.4-8ubuntu1.16.04.4+esm3 Available with Ubuntu Pro libklibc 2.0.4-8ubuntu1.16.04.4+esm3 Available with Ubuntu Pro Ubuntu 14.04 LTS klibc-utils 2.0.3-0ubuntu1.14.04.3+esm4 Available with Ubuntu Pro libklibc 2.0.3-0ubuntu1.14.04.3+esm4 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7959-1 CVE-2016-9843 Package Information: https://launchpad.net/ubuntu/+source/klibc/2.0.13-4ubuntu1.1 https://launchpad.net/ubuntu/+source/klibc/2.0.13-4ubuntu0.2 https://launchpad.net/ubuntu/+source/klibc/2.0.10-4ubuntu0.2 . Update klibc for Ubuntu to fix critical integer arithmetic issues leading to crashes and potential DoS.. klibc udpate, Ubuntu security, Denial of Service, Ubuntu 25.10 klibc, Critical vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 14, 2026 •Critical Ubuntu
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorymoderatearbitrary code execution

Ubuntu 24.04 LTS USN-6736-2 Moderate: Klibc Memory Issue

Several security issues were fixed in klibc.. ========================================================================== Ubuntu Security Notice USN-6736-2 May 23, 2024 klibc vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS Summary: Several security issues were fixed in klibc. Software Description: - klibc: small utilities built with klibc for early boot Details: USN-6736-1 fixed vulnerabilities in klibc. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that zlib, vendored in klibc, incorrectly handled pointer arithmetic. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841) Danilo Ramos discovered that zlib, vendored in klibc, incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2018-25032) Evgeny Legerov discovered that zlib, vendored in klibc, incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2022-37434) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS klibc-utils 2.0.13-4ubuntu0.1 libklibc 2.0.13-4ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6736-2 https://ubuntu.com/security/notices/USN-6736-1 CVE-2016-9840, CVE-2016-9841, CVE-2018-25032, CVE-2022-37434 Package Information: https://launchpad.net/ubuntu/+source/klibc/2.0.13-4ubuntu0.1 . A critical klibc update has been released to address several security vulnerabilities for Ubuntu users, ensuring enhanced system protection and stability. klibc Security Update, Ubuntu 24.04 LTS, zlib vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 23, 2024 •Important Ubuntu
Banner 1 1028x280 1708121660 1771599717
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorybuffer overflowcritical

Ubuntu 23.10 USN-6736-1 Critical: Klibc Buffer Overflow Threat

Several security issues were fixed in klibc.. ========================================================================== Ubuntu Security Notice USN-6736-1 April 16, 2024 klibc vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) - Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: Several security issues were fixed in klibc. Software Description: - klibc: small utilities built with klibc for early boot Details: It was discovered that zlib, vendored in klibc, incorrectly handled pointer arithmetic. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841) Danilo Ramos discovered that zlib, vendored in klibc, incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2018-25032) Evgeny Legerov discovered that zlib, vendored in klibc, incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2022-37434) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: klibc-utils 2.0.13-1ubuntu0.1 libklibc 2.0.13-1ubuntu0.1 Ubuntu 22.04 LTS: klibc-utils 2.0.10-4ubuntu0.1 libklibc 2.0.10-4ubuntu0.1 Ubuntu 20.04 LTS: klibc-utils 2.0.7-1ubuntu5.2 libklibc 2.0.7-1ubuntu5.2 Ubuntu 18.04 LTS (Available with Ubuntu Pro): klibc-utils 2.0.4-9ubuntu2.2+esm1 libklibc 2.0.4-9ubuntu2.2+esm1 Ubuntu 16.04 LTS (Available with Ubuntu Pro): klibc-utils 2.0.4-8ubuntu1.16.04.4+esm2 libklibc 2.0.4-8ubuntu1.16.04.4+esm2 Ubuntu 14.04 LTS (Available with Ubuntu Pro): klibc-utils 2.0.3-0ubuntu1.14.04.3+esm3 libklibc 2.0.3-0ubuntu1.14.04.3+esm3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6736-1 CVE-2016-9840, CVE-2016-9841, CVE-2018-25032, CVE-2022-37434 Package Information: . Numerous updates addressing vulnerabilities in klibc for different Ubuntu versions enhance overall system reliability and reduce the risk of potential threats.. Klibc Security, Ubuntu Updates, Early Boot Utilities, System Threats. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 16, 2024 •Critical Ubuntu
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorydenial of serviceUbuntu

Ubuntu: USN-5379-1 Critical: Klibc Memory Issues and Denial of Service

Several security issues were fixed in klibc.. =========================================================================Ubuntu Security Notice USN-5379-1 April 18, 2022 klibc vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: Several security issues were fixed in klibc. Software Description: - klibc: small utilities built with klibc for early boot Details: It was discovered that klibc did not properly perform some mathematical operations, leading to an integer overflow. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-31870) It was discovered that klibc did not properly handled some memory allocations on 64 bit systems. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-31871) It was discovered that klibc did not properly handled some file sizes values on 32 bit systems. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-31872) It was discovered that klibc did not properly handled some memory allocations. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-31873) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: klibc-utils 2.0.7-1ubuntu5.1 libklibc 2.0.7-1ubuntu5.1 Ubuntu 18.04 LTS: klibc-utils 2.0.4-9ubuntu2.1 libklibc 2.0.4-9ubuntu2.1 Ubuntu 16.04 ESM: klibc-utils 2.0.4-8ubuntu1.16.04.4+esm1 libklibc 2.0.4-8ubuntu1.16.04.4+esm1 Ubuntu 14.04 ESM: klibc-utils 2.0.3-0ubuntu1.14.04.3+esm2 libklibc 2.0.3-0ubuntu1.14.04.3+esm2 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5379-1 CVE-2021-31870, CVE-2021-31871, CVE-2021-31872, CVE-2021-31873 Package Information: https://launchpad.net/ubuntu/+source/klibc/2.0.7-1ubuntu5.1 https://launchpad.net/ubuntu/+source/klibc/2.0.4-9ubuntu2.1 . Multiple vulnerabilities in klibc have been resolved through recent updates in Ubuntu. A comprehensive summary of the corrections implemented and the systems impacted is available.. Klibc Issues, Ubuntu Security, System Update Guide. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 18, 2022 •Critical Ubuntu
Banner 1 1028x280 1708121660 1771599717
197
Ls Advisories Deblts Esm H240
Price Tag 1security advisorymoderatecode execution

Debian 9: DLA-2695-1 Moderate Security Issue with Klibc Exploit Risk

Several vulnerabilities have been discovered in klibc. Depending on how klibc is used, these could lead to the execution of arbitrary code, privilege escalation, or denial of service. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-2695-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Ben Hutchings June 28, 2021 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : klibc Version : 2.0.4-9+deb9u1 CVE ID : CVE-2021-31870 CVE-2021-31871 CVE-2021-31872 CVE-2021-31873 Debian Bug : 989505 Several vulnerabilities have been discovered in klibc. Depending on how klibc is used, these could lead to the execution of arbitrary code, privilege escalation, or denial of service. Thanks to Microsoft Vulnerability Research for reporting the heap bugs and going some of the way to identifying the cpio bugs. CVE-2021-31870 Multiplication in the calloc() function may result in an integer overflow and a subsequent heap buffer overflow. CVE-2021-31871 An integer overflow in the cpio command may result in a NULL pointer dereference. CVE-2021-31872 Multiple possible integer overflows in the cpio command on 32-bit systems may result in a buffer overflow or other security impact. CVE-2021-31873 Additions in malloc() function may result in integer overflow and subsequent heap buffer overflow. For Debian 9 stretch, these problems have been fixed in version 2.0.4-9+deb9u1. We recommend that you upgrade your klibc packages. For the detailed security status of klibc please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/klibc Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -- Ben Hutchings - Debiandeveloper, member of kernel, installer and LTS teams . Enhance klibc to address various security vulnerabilities in Debian LTS, which could allow for unauthorized code execution or escalation of privileges.. Debian Security, Klibc Update, Security Fixes, Code Execution, Privilege Escalation. . LinuxSecurity.com Team

Calendar 2 Jun 28, 2021 Debian LTS
91
Ls Advisories Gentoo Esm H240
Price Tag 1security advisorygentoocommand injection

Gentoo: 2013-09-21 Normal: Klibc Command Injection Risk

A vulnerability in klibc could allow remote attackers to execute arbitrary shell code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201309-21 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: klibc: Command Injection Date: September 26, 2013 Bugs: #369075 ID: 201309-21 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability in klibc could allow remote attackers to execute arbitrary shell code. Background ========= klibc is a minimalistic libc used for making an initramfs. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-libs/klibc < 1.5.25 > = 1.5.25 Description ========== The ipconfig utility in klibc writes DHCP options to /tmp/net-$DEVICE.conf, and this file is later sourced by other scripts to get defined variables. The options written to this file are not properly escaped. Impact ===== A remote attacker could send a specially crafted DHCP reply, which could execute arbitrary shell code with the privileges of any process which sources DHCP options. Workaround ========= There is no known workaround at this time. Resolution ========= All klibc users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-libs/klibc-1.5.25" References ========= [ 1 ] CVE-2011-1930 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1930 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201309-21 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2013 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . A security flaw in Gentoo's klibc could enable remote code execution through manipulated DHCP options. It is advised to perform an upgrade to reduce potential threats.. gentoo vulnerability, klibc command injection, remote code execution. . LinuxSecurity.com Team

Calendar 2 Sep 27, 2013 Gentoo
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here