Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H900
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H800
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 15 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateupdate

SUSE lcms2 Moderate Integer Overflow Vulnerability 2026-22506-1

An update that solves two vulnerabilities can now be installed.. # Security update for lcms2 Announcement ID: SUSE-SU-2026:22506-1 Release Date: 2026-07-01T12:17:04Z Rating: moderate References: * bsc#1263703 * bsc#1264994 Cross-References: * CVE-2026-41254 * CVE-2026-42798 CVSS scores: * CVE-2026-41254 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41254 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41254 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-41254 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42798 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-42798 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for lcms2 fixes the following issues * CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). * CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1125=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1125=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * liblcms2-doc-2.16-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * liblcms2-devel-2.16-160000.4.1 * liblcms2-2-2.16-160000.4.1 * liblcms2-2-debuginfo-2.16-160000.4.1 * lcms2-2.16-160000.4.1 * lcms2-debugsource-2.16-160000.4.1 * lcms2-debuginfo-2.16-160000.4.1 *SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * liblcms2-2-2.16-160000.4.1 * liblcms2-2-debuginfo-2.16-160000.4.1 * lcms2-2.16-160000.4.1 * liblcms2-devel-2.16-160000.4.1 * lcms2-debugsource-2.16-160000.4.1 * lcms2-debuginfo-2.16-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * liblcms2-doc-2.16-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41254.html * https://www.suse.com/security/cve/CVE-2026-42798.html * https://bugzilla.suse.com/show_bug.cgi?id=1263703 * https://bugzilla.suse.com/show_bug.cgi?id=1264994 . Two vulnerabilities in lcms2 are addressed in this SUSE security update with moderate severity, urging immediate installation.. lcms2 security update, SUSE lcms2 patch, moderate severity fix. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 06, 2026 •moderate SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderateupdate

openSUSE Leap 16.0 lcms2 Moderate Integer Overflow Update 2026-21202-1

An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.. openSUSE security update: security update for lcms2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21202-1 Rating: moderate References: * bsc#1263703 * bsc#1264994 Cross-References: * CVE-2026-41254 * CVE-2026-42798 CVSS scores: * CVE-2026-41254 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41254 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-42798 ( SUSE ): 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed. Description: This update for lcms2 fixes the following issues - CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). - CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1125=1 Package List: - openSUSE Leap 16.0: lcms2-2.16-160000.4.1 liblcms2-2-2.16-160000.4.1 liblcms2-devel-2.16-160000.4.1 liblcms2-doc-2.16-160000.4.1 References: * https://www.suse.com/security/cve/CVE-2026-41254.html * https://www.suse.com/security/cve/CVE-2026-42798.html . Update for openSUSE fixes two vulnerabilities in lcms2 and introduces bug fixes. Immediate patching recommended.. openSUSE lcms2 security fix integer overflow patch. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 03, 2026 •moderate OpenSUSE
Banner 1 1028x280 1708121660 1771599717
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorycriticalthreat

Mageia 9 lcms2 Critical Integer Overflow CVE-2026-41254 Advisory 2026-0214

Security update. Publication date: 16 Jun 2026 URL: https://advisories.mageia.org/MGASA-2026-0214.html Type: security Affected Mageia releases: 9 CVE: CVE-2026-41254 Description: Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication. (CVE-2026-41254) References: - https://bugs.mageia.org/show_bug.cgi?id=35424 - https://www.openwall.com/lists/oss-security/2026/04/17/16 - https://www.openwall.com/lists/oss-security/2026/04/18/1 - https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/ - https://lists.debian.org/debian-security-announce/2026/msg00173.html - https://www.cve.org/CVERecord?id=CVE-2026-41254 SRPMS: - 9/core/lcms2-2.15-2.1.mga9 . Mageia 9 security advisory for lcms2 details critical integer overflow that needs immediate attention.. Mageia 9, security update, integer overflow, lcms2, threat advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 16, 2026 •Critical Mageia
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateupdate

SUSE Linux Micro 6.1 Advisory 2026-22070-1 lcms2 Moderate Integer Overflow

An update that solves two vulnerabilities can now be installed.. # Security update for lcms2 Announcement ID: SUSE-SU-2026:22070-1 Release Date: 2026-06-05T14:42:55Z Rating: moderate References: * bsc#1263703 * bsc#1264994 Cross-References: * CVE-2026-41254 * CVE-2026-42798 CVSS scores: * CVE-2026-41254 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41254 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41254 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-41254 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42798 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-42798 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Description: This update for lcms2 fixes the following issues * CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994). * CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-566=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * liblcms2-2-debuginfo-2.16-slfo.1.1_2.1 * lcms2-debugsource-2.16-slfo.1.1_2.1 * liblcms2-2-2.16-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41254.html * https://www.suse.com/security/cve/CVE-2026-42798.html * https://bugzilla.suse.com/show_bug.cgi?id=1263703 * https://bugzilla.suse.com/show_bug.cgi?id=1264994 . Install the latest SUSE update for lcms2 addressing two integer overflow issues and improve system stability.. SUSE Linux Update, lcms2 Security Fix, VulnerabilityManagement. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 12, 2026 •moderate SuSE
Banner 1 1028x280 1708121660 1771599717
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of servicecritical

Ubuntu 20.04 LTS Little CMS Critical Denial Of Service CVE-2026-41254

Little CMS could be made to crash or run programs if it opened a specially crafted ICC profile.. ========================================================================== Ubuntu Security Notice USN-8209-2 June 01, 2026 lcms2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Little CMS could be made to crash or run programs if it opened a specially crafted ICC profile. Software Description: - lcms2: Little CMS color management library Details: USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use this issue to cause Little CMS to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS liblcms2-2 2.9-4ubuntu0.1~esm1 Available with Ubuntu Pro liblcms2-dev 2.9-4ubuntu0.1~esm1 Available with Ubuntu Pro liblcms2-utils 2.9-4ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS liblcms2-2 2.9-1ubuntu0.1+esm1 Available with Ubuntu Pro liblcms2-dev 2.9-1ubuntu0.1+esm1 Available with Ubuntu Pro liblcms2-utils 2.9-1ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS liblcms2-2 2.6-3ubuntu2.1+esm1 Available with Ubuntu Pro liblcms2-dev 2.6-3ubuntu2.1+esm1 Available with Ubuntu Pro liblcms2-utils 2.6-3ubuntu2.1+esm1 Available with Ubuntu Pro Ubuntu 14.04 LTS liblcms2-2 2.5-0ubuntu4.2+esm1 Available with Ubuntu Pro liblcms2-dev 2.5-0ubuntu4.2+esm1 Available with Ubuntu Pro liblcms2-utils 2.5-0ubuntu4.2+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8209-2 https://ubuntu.com/security/notices/USN-8209-1 CVE-2026-41254 . Little CMS on Ubuntu systems is vulnerable to crash or remote code execution. Update packages to mitigate this risk.. Little CMS Ubuntu updates denial of service. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 01, 2026 •Critical Ubuntu
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of serviceUbuntu

Ubuntu 20.04 18.04 16.04 Little CMS High DoS Vulnerability USN-8209-2

Little CMS could be made to crash or run programs if it opened a specially crafted ICC profile.. ========================================================================== Ubuntu Security Notice USN-8209-2 June 01, 2026 lcms2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Little CMS could be made to crash or run programs if it opened a specially crafted ICC profile. Software Description: - lcms2: Little CMS color management library Details: USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use this issue to cause Little CMS to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS liblcms2-2 2.9-4ubuntu0.1~esm1 Available with Ubuntu Pro liblcms2-dev 2.9-4ubuntu0.1~esm1 Available with Ubuntu Pro liblcms2-utils 2.9-4ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS liblcms2-2 2.9-1ubuntu0.1+esm1 Available with Ubuntu Pro liblcms2-dev 2.9-1ubuntu0.1+esm1 Available with Ubuntu Pro liblcms2-utils 2.9-1ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS liblcms2-2 2.6-3ubuntu2.1+esm1 Available with Ubuntu Pro liblcms2-dev 2.6-3ubuntu2.1+esm1 Available with Ubuntu Pro liblcms2-utils 2.6-3ubuntu2.1+esm1 Available with Ubuntu Pro Ubuntu 14.04 LTS liblcms2-2 2.5-0ubuntu4.2+esm1 Available with Ubuntu Pro liblcms2-dev 2.5-0ubuntu4.2+esm1 Available with Ubuntu Pro liblcms2-utils 2.5-0ubuntu4.2+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8209-2 https://ubuntu.com/security/notices/USN-8209-1 CVE-2026-41254 . Ensure your Ubuntu system is safe by applying the latest updates for Little CMS's denial of service vulnerability from advisory USN-8209-2.. Linux updates, Ubuntu security, lcms2 patch, Little CMS advisory, denial of service. . Severity: high. LinuxSecurity.com Team

Calendar%202 Jun 01, 2026 •high Ubuntu
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianimportant

Debian DSA-6262-1 lcms2 Important Integer Overflow Advisory

Two integer overflows were discovered in the LittleCMS 2 colour management library. For the oldstable distribution (bookworm), this problem has been fixed in version 2.14-2+deb12u1. For the stable distribution (trixie), this problem has been fixed in. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6262-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 10, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lcms2 CVE ID : CVE-2026-41254 CVE-2026-42798 Two integer overflows were discovered in the LittleCMS 2 colour management library. For the oldstable distribution (bookworm), this problem has been fixed in version 2.14-2+deb12u1. For the stable distribution (trixie), this problem has been fixed in version 2.16-2+deb13u2. We recommend that you upgrade your lcms2 packages. For the detailed security status of lcms2 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/lcms2 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Integer overflows fixed in lcms2 library for Debian distributions. Upgrade recommended for stability.. Debian DSA-6262-1 lcms2 integer overflow package update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 10, 2026 •Important Debian
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of servicecritical

Ubuntu 26.04 LTS USN 8250-1 lcms2 Critical Denial of Service

Little CMS could be made to crash if it opened a specially crafted ICC profile.. ========================================================================== Ubuntu Security Notice USN-8250-1 May 07, 2026 lcms2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 Summary: Little CMS could be made to crash if it opened a specially crafted ICC profile. Software Description: - lcms2: Little CMS color management library Details: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could possibly use this issue to cause Little CMS to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS liblcms2-2 2.17-1ubuntu0.2 Ubuntu 25.10 liblcms2-2 2.16-2ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8250-1 CVE-2026-42798 Package Information: https://launchpad.net/ubuntu/+source/lcms2/2.17-1ubuntu0.2 https://launchpad.net/ubuntu/+source/lcms2/2.16-2ubuntu0.2 . Little CMS crash vulnerability in Ubuntu 26.04 and 25.10 requires urgent updates to prevent denial of service.. Ubuntu lcms2 Denial of Service ICC profile crash. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 07, 2026 •Critical Ubuntu
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics