Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 61 articles for you...
172
security advisorycriticalDoSUbuntu LibVNCServer Severe DoS Vulnerability Information USN-8494-1
LibVNCServer could be made to crash or run programs if it received specially crafted network traffic.. ========================================================================== Ubuntu Security Notice USN-8494-1 July 02, 2026 libvncserver vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: LibVNCServer could be made to crash or run programs if it received specially crafted network traffic. Software Description: - libvncserver: vnc server library Details: It was discovered that LibVNCServer incorrectly handled the Tight decoder in libvncclient. A remote attacker could use this issue to cause LibVNCServer to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libvncclient1 0.9.15+dfsg-3ubuntu0.2 libvncserver1 0.9.15+dfsg-3ubuntu0.2 Ubuntu 25.10 libvncclient1 0.9.15+dfsg-1ubuntu0.2 libvncserver1 0.9.15+dfsg-1ubuntu0.2 Ubuntu 24.04 LTS libvncclient1 0.9.14+dfsg-1ubuntu0.2 libvncserver1 0.9.14+dfsg-1ubuntu0.2 Ubuntu 22.04 LTS libvncclient1 0.9.13+dfsg-3ubuntu0.2 libvncserver1 0.9.13+dfsg-3ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8494-1 CVE-2026-50538 Package Information: https://launchpad.net/ubuntu/+source/libvncserver/0.9.15+dfsg-3ubuntu0.2 https://launchpad.net/ubuntu/+source/libvncserver/0.9.15+dfsg-1ubuntu0.2 https://launchpad.net/ubuntu/+source/libvncserver/0.9.14+dfsg-1ubuntu0.2 https://launchpad.net/ubuntu/+source/libvncserver/0.9.13+dfsg-3ubuntu0.2 . Remote attackers could exploitLibVNCServer to crash or gain access. Critical updates needed for affected Ubuntu systems.. libvncserver updates, Ubuntu security, remote access issues. . Severity: Critical. LinuxSecurity.com Team
Jul 02, 2026
•Critical
Ubuntu
202
security advisoryimportantout-of-boundsopenSUSE LibVNCServer Important Out-Of-Bounds Fix 2026-21118-1
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for libvncserver ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21118-1 Rating: important References: * bsc#1266459 Cross-References: * CVE-2026-44988 CVSS scores: * CVE-2026-44988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-44988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for LibVNCServer fixes the following issue - CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write (bsc#1266459). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-983=1 Package List: - openSUSE Leap 16.0: LibVNCServer-devel-0.9.14-160000.5.1 libvncclient1-0.9.14-160000.5.1 libvncserver1-0.9.14-160000.5.1 References: * https://www.suse.com/security/cve/CVE-2026-44988.html . An important security update addresses a vulnerability in LibVNCServer for openSUSE Leap 16.0, ensuring system integrity.. LibVNCServer openSUSE security update important CVE-2026-44988. . Severity: Important. LinuxSecurity.com Team
Jun 30, 2026
•Important
OpenSUSE
100
security advisorybuffer overflowSuSESUSE LibVNCServer Important Rectangle Validation Issue Vuln 2026-22190-1
An update that solves one vulnerability can now be installed.. # Security update for LibVNCServer Announcement ID: SUSE-SU-2026:22190-1 Release Date: 2026-06-20T06:50:30Z Rating: important References: * bsc#1266459 Cross-References: * CVE-2026-44988 CVSS scores: * CVE-2026-44988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-44988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-44988 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for LibVNCServer fixes the following issue * CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write (bsc#1266459). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-983=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-983=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libvncclient1-debuginfo-0.9.14-160000.5.1 * libvncserver1-0.9.14-160000.5.1 * libvncserver1-debuginfo-0.9.14-160000.5.1 * libvncclient1-0.9.14-160000.5.1 * LibVNCServer-debugsource-0.9.14-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libvncclient1-debuginfo-0.9.14-160000.5.1 * libvncserver1-0.9.14-160000.5.1 * libvncserver1-debuginfo-0.9.14-160000.5.1 * libvncclient1-0.9.14-160000.5.1 * LibVNCServer-debugsource-0.9.14-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44988.html *https://bugzilla.suse.com/show_bug.cgi?id=1266459 . Critical LibVNCServer update addresses vulnerability CVE-2026-44988 for SUSE Linux Enterprise with important fixes.. Linux Server Security Update, SUSE LibVNCServer Patch, Important Security Fix, Remote Access Vulnerability, CVE-2026-44988. . Severity: Important. LinuxSecurity.com Team
Jun 23, 2026
•Important
SuSE
172
security advisorydenial of serviceremote code executionUbuntu LibVNCServer Important Denial Of Service Vulnerabilities USN-8463-1
Several security issues were fixed in LibVNCServer.. ========================================================================== Ubuntu Security Notice USN-8463-1 June 23, 2026 libvncserver vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in LibVNCServer. Software Description: - libvncserver: vnc server library Details: It was discovered that LibVNCServer had a memory leak in the client cleanup function. An attacker could possibly use this issue to cause LibVNCServer to consume memory, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2020-29260) It was discovered that LibVNCServer did not properly validate bounds when handling UltraZip encoding subrectangles. A remote attacker could possibly use this issue to obtain sensitive information or cause a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.04. (CVE-2026-32853) It was discovered that LibVNCServer did not properly validate return values in the HTTP proxy handlers. A remote attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.04. (CVE-2026-32854) It was discovered that LibVNCServer did not properly handle Tight encoding gradient filter rectangles. A remote attacker could use this issue to cause LibVNCServer to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-44988) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libvncclient1 0.9.15+dfsg-3ubuntu0.1 libvncserver1 0.9.15+dfsg-3ubuntu0.1 Ubuntu 25.10 libvncclient1 0.9.15+dfsg-1ubuntu0.1 libvncserver1 0.9.15+dfsg-1ubuntu0.1 Ubuntu 24.04 LTS libvncclient1 0.9.14+dfsg-1ubuntu0.1 libvncserver1 0.9.14+dfsg-1ubuntu0.1 Ubuntu 22.04 LTS libvncclient1 0.9.13+dfsg-3ubuntu0.1 libvncserver1 0.9.13+dfsg-3ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8463-1 CVE-2020-29260, CVE-2026-32853, CVE-2026-32854, CVE-2026-44988 Package Information: https://launchpad.net/ubuntu/+source/libvncserver/0.9.15+dfsg-3ubuntu0.1 https://launchpad.net/ubuntu/+source/libvncserver/0.9.15+dfsg-1ubuntu0.1 https://launchpad.net/ubuntu/+source/libvncserver/0.9.14+dfsg-1ubuntu0.1 https://launchpad.net/ubuntu/+source/libvncserver/0.9.13+dfsg-3ubuntu0.1 . Ubuntu's security notice addresses vulnerabilities in LibVNCServer affecting multiple versions with significant risks.. Ubuntu security, LibVNCServer update, memory leak, denial of service, security issues. . Severity: Important. LinuxSecurity.com Team
Jun 23, 2026
•Important
Ubuntu
202
security advisorybuffer overflowimportantopenSUSE LibVNCServer Important Buffer Overflow Fix SUSE-SU-2026-2427-1
An update that solves one vulnerability can now be installed.. # Security update for LibVNCServer Announcement ID: SUSE-SU-2026:2427-1 Release Date: 2026-06-17T09:50:23Z Rating: important References: * bsc#1266459 Cross-References: * CVE-2026-44988 CVSS scores: * CVE-2026-44988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-44988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-44988 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for LibVNCServer fixes the following issues: * CVE-2026-44988: Fixed missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write (bsc#1266459). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2427=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2427=1 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-2427=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * LibVNCServer-devel-0.9.14-150600.3.9.1 * libvncserver1-debuginfo-0.9.14-150600.3.9.1 * libvncclient1-0.9.14-150600.3.9.1 * libvncserver1-0.9.14-150600.3.9.1 * libvncclient1-debuginfo-0.9.14-150600.3.9.1 * LibVNCServer-debugsource-0.9.14-150600.3.9.1 * SUSEPackage Hub 15 15-SP7 (aarch64 ppc64le s390x) * LibVNCServer-devel-0.9.14-150600.3.9.1 * libvncserver1-debuginfo-0.9.14-150600.3.9.1 * libvncclient1-0.9.14-150600.3.9.1 * libvncserver1-0.9.14-150600.3.9.1 * libvncclient1-debuginfo-0.9.14-150600.3.9.1 * LibVNCServer-debugsource-0.9.14-150600.3.9.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * libvncserver1-debuginfo-0.9.14-150600.3.9.1 * libvncclient1-0.9.14-150600.3.9.1 * libvncserver1-0.9.14-150600.3.9.1 * libvncclient1-debuginfo-0.9.14-150600.3.9.1 * LibVNCServer-debugsource-0.9.14-150600.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44988.html * https://bugzilla.suse.com/show_bug.cgi?id=1266459 . Important update for openSUSE addresses CVE-2026-44988 in LibVNCServer to prevent potential server-triggered issues.. openSUSE update, LibVNCServer patch, important security fix. . Severity: Important. LinuxSecurity.com Team
Jun 17, 2026
•Important
OpenSUSE
100
security advisorySuSEvulnerabilitySUSE LibVNCServer Important Out-of-Bounds Issue Fix Advisory 2026-2428-1
An update that solves one vulnerability can now be installed.. # Security update for LibVNCServer Announcement ID: SUSE-SU-2026:2428-1 Release Date: 2026-06-17T09:50:36Z Rating: important References: * bsc#1266459 Cross-References: * CVE-2026-44988 CVSS scores: * CVE-2026-44988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-44988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-44988 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for LibVNCServer fixes the following issues: * CVE-2026-44988: Fixed missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write (bsc#1266459). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-2428=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2428=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libvncclient0-0.9.9-17.47.1 * libvncserver0-debuginfo-0.9.9-17.47.1 * LibVNCServer-devel-0.9.9-17.47.1 * libvncclient0-debuginfo-0.9.9-17.47.1 * libvncserver0-0.9.9-17.47.1 * LibVNCServer-debugsource-0.9.9-17.47.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) *libvncclient0-0.9.9-17.47.1 * libvncserver0-debuginfo-0.9.9-17.47.1 * LibVNCServer-devel-0.9.9-17.47.1 * libvncclient0-debuginfo-0.9.9-17.47.1 * libvncserver0-0.9.9-17.47.1 * LibVNCServer-debugsource-0.9.9-17.47.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44988.html * https://bugzilla.suse.com/show_bug.cgi?id=1266459 . Update for LibVNCServer addresses a critical out-of-bounds vulnerability with important fixes. Ensure systems are patched.. SUSE security update, LibVNCServer patch, important vulnerability fix. . Severity: Important. LinuxSecurity.com Team
Jun 17, 2026
•Important
SuSE
100
security advisorySuSEimportantSUSE LibVNCServer Important Out-Of-Bounds Write Advisory 2026-2227-1
An update that solves one vulnerability can now be installed.. # Security update for LibVNCServer Announcement ID: SUSE-SU-2026:2227-1 Release Date: 2026-06-03T08:06:48Z Rating: important References: * bsc#1266459 Cross-References: * CVE-2026-44988 CVSS scores: * CVE-2026-44988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-44988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-44988 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for LibVNCServer fixes the following issues: * CVE-2026-44988: Fixed missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write (bsc#1266459). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2227=1 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * libvncserver0-debuginfo-0.9.10-150000.4.38.1 * LibVNCServer-debugsource-0.9.10-150000.4.38.1 * libvncserver0-0.9.10-150000.4.38.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44988.html * https://bugzilla.suse.com/show_bug.cgi?id=1266459 . Critical patch for LibVNCServer in SUSE addresses important out-of-bounds write issue. Update now to enhance security.. LibVNCServer Update, SUSE Patch Instructions, CVE-2026-44988, Important Security Alert. . Severity: Important. LinuxSecurity.com Team
Jun 04, 2026
•Important
SuSE
202
security advisorydenial of serviceimportantopenSUSE Leap 16.0 LibVNCServer Important Denial of Service 2026-20552-1
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.. openSUSE security update: security update for libvncserver ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20552-1 Rating: important References: * bsc#1260429 * bsc#1260431 Cross-References: * CVE-2026-32853 * CVE-2026-32854 CVSS scores: * CVE-2026-32853 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-32853 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32854 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32854 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed. Description: This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260429). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-575=1 Package List: - openSUSE Leap 16.0: LibVNCServer-devel-0.9.14-160000.4.1 libvncclient1-0.9.14-160000.4.1 libvncserver1-0.9.14-160000.4.1 References: * https://www.suse.com/security/cve/CVE-2026-32853.html * https://www.suse.com/security/cve/CVE-2026-32854.html . An important security advisory for openSUSE fixes vulnerabilities in LibVNCServer impacting confidentiality and availability.. openSUSE LibVNCServer security update important denial of service. . Severity: Important. LinuxSecurity.com Team
Apr 21, 2026
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!