Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian DLA-4693-1 Roundcube High Cross-Site Scripting Denial of Service

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -2 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderatesoftware update

SUSE Linux 12-SP5: SUSE-SU-2022:3208-1 Moderate: Local Code Execution

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libnl3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3208-1 Rating: moderate References: #1020123 Cross-References: CVE-2017-0386 CVSS scores: CVE-2017-0386 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-0386 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libnl3 fixes the following issues: - CVE-2017-0386: Fixed an issue that could enable a local malicious application to execute arbitrary code within the context of a different process. This only affects setups were libnl is passed untrusted arguments. (bsc#1020123) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-3208=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-3208=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): libnl3-debugsource-3.2.23-4.7.1 libnl3-devel-3.2.23-4.7.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libnl3-200-3.2.23-4.7.1 libnl3-200-debuginfo-3.2.23-4.7.1 libnl3-debugsource-3.2.23-4.7.1 - SUSE Linux EnterpriseServer 12-SP5 (s390x x86_64): libnl3-200-32bit-3.2.23-4.7.1 libnl3-200-debuginfo-32bit-3.2.23-4.7.1 - SUSE Linux Enterprise Server 12-SP5 (noarch): libnl-config-3.2.23-4.7.1 References: https://www.suse.com/security/cve/CVE-2017-0386.html https://bugzilla.suse.com/1020123 . SUSE Security Patch for libnl3 addresses a significant flaw allowing local code execution, improving overall system safety.. SUSE Security Update, libnl3 fix, local code execution threat, software patch. . LinuxSecurity.com Team

Calendar%202 Sep 08, 2022 SuSE
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorymoderateheap overflow

SciLinux SL7: SLSA-2017-2299-1 Moderate: NetworkManager Heap Overflow

An integer overflow leading to a heap-buffer overflow was found in the libnl library. An attacker could use this flaw to cause an application compiled with libnl to crash or possibly execute arbitrary code in the context of the user running such an application. (CVE-2017-0553) SL7 x86_64 NetworkManager-1.8.0-9.el7.x86_64.rpm NetworkManager-adsl-1.8.0-9.el7.x86_64.rpm NetworkMana [More...]. Synopsis: Moderate: NetworkManager and libnl3 security, bug fix Advisory ID: SLSA-2017:2299-1 Issue Date: 2017-08-01 CVE Numbers: CVE-2017-0553 -- The libnl3 packages contain a convenience library that simplifies using the Linux kernel's Netlink sockets interface for network manipulation. The following packages have been upgraded to a later upstream version: NetworkManager (1.8.0), network-manager-applet (1.8.0). Security Fix(es) in the libnl3 component: * An integer overflow leading to a heap-buffer overflow was found in the libnl library. An attacker could use this flaw to cause an application compiled with libnl to crash or possibly execute arbitrary code in the context of the user running such an application. (CVE-2017-0553) -- SL7 x86_64 NetworkManager-1.8.0-9.el7.x86_64.rpm NetworkManager-adsl-1.8.0-9.el7.x86_64.rpm NetworkManager-bluetooth-1.8.0-9.el7.x86_64.rpm NetworkManager-debuginfo-1.8.0-9.el7.i686.rpm NetworkManager-debuginfo-1.8.0-9.el7.x86_64.rpm NetworkManager-glib-1.8.0-9.el7.i686.rpm NetworkManager-glib-1.8.0-9.el7.x86_64.rpm NetworkManager-libnm-1.8.0-9.el7.i686.rpm NetworkManager-libnm-1.8.0-9.el7.x86_64.rpm NetworkManager-libreswan-1.2.4-2.el7.x86_64.rpm NetworkManager-libreswan-debuginfo-1.2.4-2.el7.x86_64.rpm NetworkManager-libreswan-gnome-1.2.4-2.el7.x86_64.rpm NetworkManager-ppp-1.8.0-9.el7.x86_64.rpm NetworkManager-team-1.8.0-9.el7.x86_64.rpm NetworkManager-tui-1.8.0-9.el7.x86_64.rpm NetworkManager-wifi-1.8.0-9.el7.x86_64.rpm NetworkManager-wwan-1.8.0-9.el7.x86_64.rpm libnl3-3.2.28-4.el7.i686.rpm libnl3-3.2.28-4.el7.x86_64.rpm libnl3-cli-3.2.28-4.el7.i686.rpm libnl3-cli-3.2.28-4.el7.x86_64.rpm libnl3-debuginfo-3.2.28-4.el7.i686.rpm libnl3-debuginfo-3.2.28-4.el7.x86_64.rpm libnm-gtk-1.8.0-3.el7.i686.rpm libnm-gtk-1.8.0-3.el7.x86_64.rpm libnma-1.8.0-3.el7.i686.rpm libnma-1.8.0-3.el7.x86_64.rpm network-manager-applet-debuginfo-1.8.0-3.el7.i686.rpm network-manager-applet-debuginfo-1.8.0-3.el7.x86_64.rpm nm-connection-editor-1.8.0-3.el7.x86_64.rpm NetworkManager-glib-devel-1.8.0-9.el7.i686.rpm NetworkManager-glib-devel-1.8.0-9.el7.x86_64.rpm NetworkManager-libnm-devel-1.8.0-9.el7.i686.rpm NetworkManager-libnm-devel-1.8.0-9.el7.x86_64.rpm libnl3-devel-3.2.28-4.el7.i686.rpm libnl3-devel-3.2.28-4.el7.x86_64.rpm libnl3-doc-3.2.28-4.el7.x86_64.rpm libnm-gtk-devel-1.8.0-3.el7.i686.rpm libnm-gtk-devel-1.8.0-3.el7.x86_64.rpm libnma-devel-1.8.0-3.el7.i686.rpm libnma-devel-1.8.0-3.el7.x86_64.rpm network-manager-applet-1.8.0-3.el7.x86_64.rpm noarch NetworkManager-config-server-1.8.0-9.el7.noarch.rpm NetworkManager-dispatcher-routing-rules-1.8.0-9.el7.noarch.rpm - Scientific Linux Development Team . A significant alert has been released concerning NetworkManager and libnl3 to address a severe buffer overflow vulnerability, necessitating prompt measures for resolution.. NetworkManager Update, libnl3 Security, SL7 Advisory, Buffer Overflow Fix. . LinuxSecurity.com Team

Calendar%202 Aug 21, 2017 Scientific Linux
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedorainteger overflow

Fedora 24: Security Update for Libnl3 Addressing Integer Overflow Issue

lib: check for integer overflow in nlmsg_reserve() (rh#1440788, rh#1440789, CVE-2017-0553). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-7a5363b41d 2017-05-04 13:28:25.130390 --------------------------------------------------------------------------------Name : libnl3 Product : Fedora 24 Version : 3.2.28 Release : 5.fc24 URL : http://www.infradead.org/~tgr/libnl/ Summary : Convenience library for kernel netlink sockets Description : This package contains a convenience library to simplify using the Linux kernel's netlink sockets interface for network manipulation --------------------------------------------------------------------------------Update Information: lib: check for integer overflow in nlmsg_reserve() (rh#1440788, rh#1440789, CVE-2017-0553) --------------------------------------------------------------------------------References: [ 1 ] Bug #1440789 - CVE-2017-0553 libnl3: libnl: Integer overflow in nlmsg_reserve() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1440789 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libnl3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . The recent patch for libnl3 in Fedora 24 fixes a buffer overflow issue in nlmsg_reserve, bolstering overall network safety.. libnl3, integer overflow, networkmanipulation, Fedora 24, security update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 04, 2017 •Critical Fedora
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorycriticaldebian

Debian Stretch: DLA-903-2 High: Libfoo Buffer Overflow Risk

It was discovered that there was an integer overflow in libnl3, a library for dealing with netlink sockets. A missing check in nlmsg_reserve() could have allowed a malicious application . Hash: SHA256 Package : libnl3 Version : 3.2.7-4+deb7u1 CVE ID : CVE-2017-0553 Debian Bug : #859948 It was discovered that there was an integer overflow in libnl3, a library for dealing with netlink sockets. A missing check in nlmsg_reserve() could have allowed a malicious application to execute arbitrary code within the context of the WiFi service. For Debian 7 "Wheezy", this issue has been fixed in libnl3 version 3.2.7-4+deb7u1. We recommend that you upgrade your libnl3 packages. Regards, - -- ,'`. : :' : Chris Lamb `. `'` This email address is being protected from spambots. You need JavaScript enabled to view it. / chris-lamb.co.uk `- . Buffer overflow identified in libnl3 on Debian Wheezy addressed in version 3.2.7-4+deb7u1. Update advised for protection.. libnl3 security, debian upgrade, integer overflow fix, network security update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 10, 2017 •Important Debian LTS
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysecurity updatecritical

Fedora: 2021-7162d8e5b6 Urgent: OpenSSL Buffer Overflow Patch

check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-1423c7b4b0 2017-01-22 21:10:28.834963 -------------------------------------------------------------------------------- Name : libnl3 Product : Fedora 24 Version : 3.2.28 Release : 4.fc24 URL : http://www.infradead.org/~tgr/libnl/ Summary : Convenience library for kernel netlink sockets Description : This package contains a convenience library to simplify using the Linux kernel's netlink sockets interface for network manipulation -------------------------------------------------------------------------------- Update Information: check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1414304 - CVE-2017-0386 libnl: Privilege escalation due to insufficient data checks in nla_reserve and nla_put https://bugzilla.redhat.com/show_bug.cgi?id=1414304 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libnl3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . The Fedora security notice 2017-1423c7b4b0 focuses on enhancing input validation within libnl3 to avert potential privilege escalation vulnerabilities.. FedoraSecurity Update, Libnl3 Input Validation, Privilege Escalation Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 23, 2017 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 25: libnl3 Moderate Update - Input Validation Issues and Crash Fix

Update with patches from upstream - check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386) - fix crash during SRIOV parsing - lazyly read psched settings - use O_CLOEXEC when creating file descriptors with fopen(). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-090a9c11db 2017-01-20 14:15:21.264545 -------------------------------------------------------------------------------- Name : libnl3 Product : Fedora 25 Version : 3.2.29 Release : 2.fc25 URL : http://www.infradead.org/~tgr/libnl/ Summary : Convenience library for kernel netlink sockets Description : This package contains a convenience library to simplify using the Linux kernel's netlink sockets interface for network manipulation -------------------------------------------------------------------------------- Update Information: Update with patches from upstream - check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386) - fix crash during SRIOV parsing - lazyly read psched settings - use O_CLOEXEC when creating file descriptorswith fopen() -------------------------------------------------------------------------------- References: [ 1 ] Bug #1414304 - CVE-2017-0386 libnl: Privilege escalation due to insufficient data checks in nla_reserve and nla_put https://bugzilla.redhat.com/show_bug.cgi?id=1414304 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libnl3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest libnl3 update for Fedora 25 resolves input validation concerns and addresses a critical crash problem. Key security enhancements are incorporated.. Fedora Security Update, libnl3 Patch, Privilege Escalation Fix. . LinuxSecurity.com Team

Calendar%202 Jan 20, 2017 Fedora
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderateFedora

Fedora 22: 2015-13945 Moderate - Wireshark Network Analyzer Security Update

- Enable libnl3 (see rhbz#1207386, rhbz#1247566) - Remove airpcap switch (doesn't have any effect on Linux) - Backport patch no. 11 - Fixed building with F24+ * Ver. 1.12.7. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-13945 2015-10-07 03:46:09.915520 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 22 Version : 1.12.7 Release : 2.fc22 URL : https://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package. -------------------------------------------------------------------------------- Update Information: - Enable libnl3 (see rhbz#1207386, rhbz#1247566) - Remove airpcap switch (doesn't have any effect on Linux) - Backport patch no. 11 - Fixed building with F24+ * Ver. 1.12.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1253361 - CVE-2015-6249 wireshark: WCCP dissector crash (wnpa-sec-2015-29) https://bugzilla.redhat.com/show_bug.cgi?id=1253361 [ 2 ] Bug #1253352 - CVE-2015-6241 wireshark: protocol tree crash (wnpa-sec-2015-21) https://bugzilla.redhat.com/show_bug.cgi?id=1253352 [ 3 ] Bug #1253353 - CVE-2015-6242 wireshark: memory manager crash (wnpa-sec-2015-22) https://bugzilla.redhat.com/show_bug.cgi?id=1253353 [ 4 ] Bug #1253354 - CVE-2015-6243 wireshark: Dissector table crash (wnpa-sec-2015-23) https://bugzilla.redhat.com/show_bug.cgi?id=1253354 [ 5 ] Bug #1253355 - CVE-2015-6244 wireshark: ZigBee dissector crash (wnpa-sec-2015-24) https://bugzilla.redhat.com/show_bug.cgi?id=1253355 [ 6 ] Bug#1253356 - CVE-2015-6245 wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25) https://bugzilla.redhat.com/show_bug.cgi?id=1253356 [ 7 ] Bug #1253357 - CVE-2015-6246 wireshark: WaveAgent dissector crash (wnpa-sec-2015-26) https://bugzilla.redhat.com/show_bug.cgi?id=1253357 [ 8 ] Bug #1253359 - CVE-2015-6247 wireshark: OpenFlow dissector infinite loop (wnpa-sec-2015-27) https://bugzilla.redhat.com/show_bug.cgi?id=1253359 [ 9 ] Bug #1253360 - CVE-2015-6248 wireshark: Ptvcursor crash (wnpa-sec-2015-28) https://bugzilla.redhat.com/show_bug.cgi?id=1253360 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update wireshark' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Enhancements in network packet inspection gained from Fedora 22's latest Wireshark version resolving various concerns, notably around libnl3.. Wireshark Update,Fedora Security,Network Analyzer,Bug Fixes,Libnl3 Features. . LinuxSecurity.com Team

Calendar%202 Oct 07, 2015 Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics