Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 722 articles for you...
217
security advisorylocal privilege escalationbug fixOracle Linux 9 ELSA-2026-39576 cifs-utils Important Bug Fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-39576 http://linux.oracle.com/errata/ELSA-2026-39576.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: cifs-utils-7.6-2.el9_8.x86_64.rpm cifs-utils-devel-7.6-2.el9_8.i686.rpm cifs-utils-devel-7.6-2.el9_8.x86_64.rpm pam_cifscreds-7.6-2.el9_8.x86_64.rpm aarch64: cifs-utils-7.6-2.el9_8.aarch64.rpm cifs-utils-devel-7.6-2.el9_8.aarch64.rpm pam_cifscreds-7.6-2.el9_8.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/cifs-utils-7.6-2.el9_8.src.rpm Related CVEs: CVE-2026-12505 Description of changes: [7.6-2] - resolves: RHEL-192982 - fix krb5 mount regression [7.6-1] - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego _______________________________________________ El-errata mailing list
Jul 17, 2026
•Important
Oracle
89
security advisorymoderatefedoraFedora 44 Ansible Collection Ansible Posix Major Local Escalation Fix
Update to 2.2.1. Fixes rhbz#2479556. Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-0f941ecaa6 2026-07-17 00:51:59.635391+00:00 -------------------------------------------------------------------------------- Name : ansible-collection-ansible-posix Product : Fedora 44 Version : 2.2.1 Release : 1.fc44 URL : https://galaxy.ansible.com/ui/repo/published/ansible/posix Summary : Ansible Collection targeting POSIX and POSIX-ish platforms Description : Ansible Collection targeting POSIX and POSIX-ish platforms. -------------------------------------------------------------------------------- Update Information: Update to 2.2.1. Fixes rhbz#2479556. Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432) -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 8 2026 Maxwell G - 2.2.1-1 - Update to 2.2.1. Fixes rhbz#2479556. - Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2479556 - ansible-collection-ansible-posix-2.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2479556 [ 2 ] Bug #2487430 - CVE-2026-11837 ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2487430 [ 3 ] Bug #2487431 - CVE-2026-11837 ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown [fedora-44] https://bugzilla.redhat.com/show_bug.cgi?id=2487431 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2026-0f941ecaa6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 16, 2026
•moderate
Fedora
219
security advisorylocal privilege escalationbug fixRocky Linux 9 cifs-utils Important Local Escalation Fix RLSA-2026-39576
Important: cifs-utils security, bug fix, and enhancement update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:39576", "synopsis": "Important: cifs-utils security, bug fix, and enhancement update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for cifs-utils.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.\n\nSecurity Fix(es):\n\n* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)\n\nBug Fix(es) and Enhancement(s):\n\n* cifs-utils: regression with kerberos mount [rhel-9.8.z] (JIRA:Rocky Linux-192982)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2489805", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805", "description": ""}], "cves": [{"name": "CVE-2026-12505", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12505", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "7.8", "cwe": "CWE-250"}], "references": [], "publishedAt": "2026-07-15T12:03:43.176942Z", "rpms": {"Rocky Linux 9": {"nvras": ["cifs-utils-0:7.6-2.el9_8.aarch64.rpm", "cifs-utils-0:7.6-2.el9_8.ppc64le.rpm", "cifs-utils-0:7.6-2.el9_8.s390x.rpm", "cifs-utils-0:7.6-2.el9_8.src.rpm","cifs-utils-0:7.6-2.el9_8.x86_64.rpm", "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64.rpm", "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le.rpm", "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x.rpm", "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64.rpm", "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64.rpm", "cifs-utils-debugsource-0:7.6-2.el9_8.i686.rpm", "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le.rpm", "cifs-utils-debugsource-0:7.6-2.el9_8.s390x.rpm", "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64.rpm", "cifs-utils-devel-0:7.6-2.el9_8.aarch64.rpm", "cifs-utils-devel-0:7.6-2.el9_8.i686.rpm", "cifs-utils-devel-0:7.6-2.el9_8.ppc64le.rpm", "cifs-utils-devel-0:7.6-2.el9_8.s390x.rpm", "cifs-utils-devel-0:7.6-2.el9_8.x86_64.rpm", "pam_cifscreds-0:7.6-2.el9_8.aarch64.rpm", "pam_cifscreds-0:7.6-2.el9_8.ppc64le.rpm", "pam_cifscreds-0:7.6-2.el9_8.s390x.rpm", "pam_cifscreds-0:7.6-2.el9_8.x86_64.rpm", "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64.rpm", "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le.rpm", "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x.rpm", "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. An important update for cifs-utils addresses local privilege escalation and includes bug fixes for Rocky Linux.. cifs-utils update, Rocky Linux advisory, local escalation, SMB security fix. . Severity: Important. LinuxSecurity.com Team
Jul 15, 2026
•Important
Rocky Linux
219
security advisorylocal privilege escalationimportantRocky Linux cifs-utils Major Local Privilege Escalation RLSA-2026-32990
Important: cifs-utils security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:32990", "synopsis": "Important: cifs-utils security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for cifs-utils.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.\n\nSecurity Fix(es):\n\n* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2489805", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805", "description": ""}], "cves": [{"name": "CVE-2026-12505", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12505", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "7.8", "cwe": "CWE-250"}], "references": [], "publishedAt": "2026-07-05T12:05:09.130757Z", "rpms": {"Rocky Linux 10": {"nvras": ["cifs-utils-debugsource-0:7.6-1.el10_2.s390x.rpm", "pam_cifscreds-0:7.6-1.el10_2.s390x.rpm", "cifs-utils-0:7.6-1.el10_2.x86_64.rpm", "pam_cifscreds-0:7.6-1.el10_2.x86_64.rpm", "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64.rpm", "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64.rpm","cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le.rpm", "cifs-utils-0:7.6-1.el10_2.s390x.rpm", "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64.rpm", "cifs-utils-0:7.6-1.el10_2.aarch64.rpm", "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64.rpm", "cifs-utils-0:7.6-1.el10_2.src.rpm", "cifs-utils-devel-0:7.6-1.el10_2.ppc64le.rpm", "pam_cifscreds-0:7.6-1.el10_2.ppc64le.rpm", "cifs-utils-devel-0:7.6-1.el10_2.aarch64.rpm", "cifs-utils-devel-0:7.6-1.el10_2.x86_64.rpm", "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x.rpm", "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x.rpm", "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64.rpm", "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64.rpm", "pam_cifscreds-0:7.6-1.el10_2.aarch64.rpm", "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le.rpm", "cifs-utils-0:7.6-1.el10_2.ppc64le.rpm", "cifs-utils-devel-0:7.6-1.el10_2.s390x.rpm", "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for cifs-utils on Rocky Linux 10 to fix local privilege escalation issue.. cifs-utils update, Rocky Linux security, local privilege escalation, cifs-utils security, SMB protocol fix. . Severity: Important. LinuxSecurity.com Team
Jul 05, 2026
•Important
Rocky Linux
219
security advisorymoderatebuffer overflowRocky Linux RRDTool Medium Risk Local Privilege Elevation RLSA-2026-34156
Moderate: rrdtool security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:34156", "synopsis": "Moderate: rrdtool security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for rrdtool.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create applications using its Perl, Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data density.\n\nSecurity Fix(es):\n\n* rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation via unbounded DS/RRA arguments (CVE-2026-43958)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2460932", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2460932", "description": ""}], "cves": [{"name": "CVE-2026-43958", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43958", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "7.8", "cwe": "CWE-121"}], "references": [], "publishedAt": "2026-07-05T12:03:16.627983Z", "rpms": {"Rocky Linux 9": {"nvras": ["rrdtool-lua-debuginfo-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-debugsource-0:1.7.2-22.el9_8.aarch64.rpm","rrdtool-debugsource-0:1.7.2-22.el9_8.i686.rpm", "rrdtool-lua-debuginfo-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-debugsource-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-debugsource-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-lua-debuginfo-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-debugsource-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-devel-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-devel-0:1.7.2-22.el9_8.i686.rpm", "rrdtool-devel-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-devel-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-devel-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-doc-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-doc-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-doc-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-doc-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-lua-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-lua-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-lua-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-debuginfo-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-debuginfo-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-debuginfo-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-lua-0:1.7.2-22.el9_8.x86_64.rpm", "python3-rrdtool-0:1.7.2-22.el9_8.aarch64.rpm", "python3-rrdtool-0:1.7.2-22.el9_8.ppc64le.rpm", "python3-rrdtool-0:1.7.2-22.el9_8.s390x.rpm", "python3-rrdtool-0:1.7.2-22.el9_8.x86_64.rpm", "python3-rrdtool-debuginfo-0:1.7.2-22.el9_8.aarch64.rpm", "python3-rrdtool-debuginfo-0:1.7.2-22.el9_8.ppc64le.rpm", "python3-rrdtool-debuginfo-0:1.7.2-22.el9_8.s390x.rpm", "python3-rrdtool-debuginfo-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-0:1.7.2-22.el9_8.i686.rpm", "rrdtool-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-0:1.7.2-22.el9_8.src.rpm", "rrdtool-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-debuginfo-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-debuginfo-0:1.7.2-22.el9_8.i686.rpm", "rrdtool-lua-debuginfo-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-perl-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-perl-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-perl-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-perl-0:1.7.2-22.el9_8.x86_64.rpm","rrdtool-perl-debuginfo-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-perl-debuginfo-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-perl-debuginfo-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-perl-debuginfo-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-ruby-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-ruby-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-ruby-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-ruby-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-ruby-debuginfo-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-ruby-debuginfo-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-ruby-debuginfo-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-ruby-debuginfo-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-tcl-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-tcl-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-tcl-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-tcl-0:1.7.2-22.el9_8.x86_64.rpm", "rrdtool-tcl-debuginfo-0:1.7.2-22.el9_8.aarch64.rpm", "rrdtool-tcl-debuginfo-0:1.7.2-22.el9_8.ppc64le.rpm", "rrdtool-tcl-debuginfo-0:1.7.2-22.el9_8.s390x.rpm", "rrdtool-tcl-debuginfo-0:1.7.2-22.el9_8.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Moderate rrdtool security update for Rocky Linux 9 mitigates local privilege escalation risks from stack overflow issues.. rrdtool security, Rocky Linux update, privilege escalation, moderate security, buffer overflow. . Severity: moderate. LinuxSecurity.com Team
Jul 05, 2026
•moderate
Rocky Linux
219
security advisorymoderatelocal privilege escalationRocky Linux Rrdtool Vulnerability RLSA-2026-34155 Stack Buffer Overflow
Moderate: rrdtool security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:34155", "synopsis": "Moderate: rrdtool security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for rrdtool.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create applications using its Perl, Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data density.\n\nSecurity Fix(es):\n\n* rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation via unbounded DS/RRA arguments (CVE-2026-43958)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2460932", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2460932", "description": ""}], "cves": [{"name": "CVE-2026-43958", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43958", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "7.8", "cwe": "CWE-121"}], "references": [], "publishedAt": "2026-07-04T06:00:26.778042Z", "rpms": {"Rocky Linux 8": {"nvras": ["rrdtool-tcl-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-tcl-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-tcl-debuginfo-0:1.7.0-17.el8_10.aarch64.rpm","rrdtool-tcl-debuginfo-0:1.7.0-17.el8_10.x86_64.rpm", "python3-rrdtool-0:1.7.0-17.el8_10.aarch64.rpm", "python3-rrdtool-0:1.7.0-17.el8_10.x86_64.rpm", "python3-rrdtool-debuginfo-0:1.7.0-17.el8_10.aarch64.rpm", "python3-rrdtool-debuginfo-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-0:1.7.0-17.el8_10.i686.rpm", "rrdtool-0:1.7.0-17.el8_10.src.rpm", "rrdtool-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-debuginfo-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-debuginfo-0:1.7.0-17.el8_10.i686.rpm", "rrdtool-debuginfo-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-debugsource-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-debugsource-0:1.7.0-17.el8_10.i686.rpm", "rrdtool-debugsource-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-devel-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-devel-0:1.7.0-17.el8_10.i686.rpm", "rrdtool-devel-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-doc-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-doc-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-lua-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-lua-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-lua-debuginfo-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-lua-debuginfo-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-perl-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-perl-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-perl-debuginfo-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-perl-debuginfo-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-ruby-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-ruby-0:1.7.0-17.el8_10.x86_64.rpm", "rrdtool-ruby-debuginfo-0:1.7.0-17.el8_10.aarch64.rpm", "rrdtool-ruby-debuginfo-0:1.7.0-17.el8_10.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. A security update for rrdtool on Rocky Linux addresses a stack buffer overflow issue with moderate severity and potential local access risks.. rrdtool security update, local privilege escalation, moderate severity vulnerability. . Severity: moderate. LinuxSecurity.com Team
Jul 04, 2026
•moderate
Rocky Linux
100
security advisorymoderatelocal privilege escalationSUSE Firewalld-Legacy Moderate Local Access Management Patch 2026-2745-1
An update that solves one vulnerability can now be installed.. # Security update for firewalld-legacy Announcement ID: SUSE-SU-2026:2745-1 Release Date: 2026-07-03T11:34:34Z Rating: moderate References: * bsc#1260903 Cross-References: * CVE-2026-4948 CVSS scores: * CVE-2026-4948 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-4948 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-4948 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for firewalld-legacy fixes the following issue * CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2745=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-2745=1 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-2745=1 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-2745=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2745=1 ## Package List: * openSUSE Leap 15.6 (noarch) * firewall-applet-1.3.4-150600.13.6.1 * firewalld-1.3.4-150600.13.6.1 *firewalld-lang-1.3.4-150600.13.6.1 * firewall-macros-1.3.4-150600.13.6.1 * python311-firewall-1.3.4-150600.13.6.1 * firewall-config-1.3.4-150600.13.6.1 * firewalld-test-1.3.4-150600.13.6.1 * python3-firewall-1.3.4-150600.13.6.1 * firewalld-zsh-completion-1.3.4-150600.13.6.1 * firewalld-bash-completion-1.3.4-150600.13.6.1 * Basesystem Module 15-SP7 (noarch) * firewalld-1.3.4-150600.13.6.1 * firewalld-lang-1.3.4-150600.13.6.1 * python3-firewall-1.3.4-150600.13.6.1 * firewalld-zsh-completion-1.3.4-150600.13.6.1 * firewalld-bash-completion-1.3.4-150600.13.6.1 * Desktop Applications Module 15-SP7 (noarch) * firewall-applet-1.3.4-150600.13.6.1 * firewall-config-1.3.4-150600.13.6.1 * Python 3 Module 15-SP7 (noarch) * python311-firewall-1.3.4-150600.13.6.1 * Development Tools Module 15-SP7 (noarch) * firewall-macros-1.3.4-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-4948.html * https://bugzilla.suse.com/show_bug.cgi?id=1260903 . SUSE security update fixes a moderate issue in firewalld-legacy affecting local user access control.. SUSE firewalld security update, access control issue, local privilege escalation, security patch, SUSE advisories. . Severity: moderate. LinuxSecurity.com Team
Jul 03, 2026
•moderate
SuSE
100
security advisorysecurity updatelocal privilege escalationSUSE cifs-utils Important Local Privilege Escalation Vuln 2026-2699-1
An update that solves one vulnerability can now be installed.. # Security update for cifs-utils Announcement ID: SUSE-SU-2026:2699-1 Release Date: 2026-06-30T09:21:47Z Rating: important References: * bsc#1267389 Cross-References: * CVE-2026-12505 CVSS scores: * CVE-2026-12505 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-12505 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-12505 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue * CVE-2026-12505: cifs.upcall local privilege escalation via request_key- controlled namespaceswitch and NSS loading (bsc#1267389). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2699=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2699=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2699=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2699=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2699=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2699=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2699=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2699=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2699=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2699=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2699=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2699=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2699=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2699=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2699=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patchSUSE-SLE-Product-SLES_SAP-15-SP6-2026-2699=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2699=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * pam_cifscreds-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * pam_cifscreds-debuginfo-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) *cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64ppc64le s390x x86_64) * cifs-utils-6.15-150400.3.21.1 * cifs-utils-debuginfo-6.15-150400.3.21.1 * cifs-utils-debugsource-6.15-150400.3.21.1 * cifs-utils-devel-6.15-150400.3.21.1 ## References: * https://www.suse.com/security/cve/CVE-2026-12505.html * https://bugzilla.suse.com/show_bug.cgi?id=1267389 . A critical security update for cifs-utils addressing local escalation risks in SUSE systems is available now.. cifs-utils security update,suse local privilege escalation,linux vulnerability mitigation. . Severity: Important. LinuxSecurity.com Team
Jun 30, 2026
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!