Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian DLA-4693-1 Roundcube High Cross-Site Scripting Denial of Service

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 1 articles for you...
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianremote execution

Debian LXD Critical Command Execution Bypass Issues DSA-6373-1

Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in a bypass of security restrictions or the execution of arbitrary commands. For the stable distribution (trixie), these problems have been fixed in version 5.0.2+git20231211.1364ae4-9+deb13u7.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6373-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff June 28, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lxd CVE ID : CVE-2026-9639 CVE-2026-9640 CVE-2026-48749 CVE-2026-48750 CVE-2026-48751 CVE-2026-48752 CVE-2026-48755 CVE-2026-48769 CVE-2026-55621 CVE-2026-55622 Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in a bypass of security restrictions or the execution of arbitrary commands. For the stable distribution (trixie), these problems have been fixed in version 5.0.2+git20231211.1364ae4-9+deb13u7. We recommend that you upgrade your lxd packages. For the detailed security status of lxd please refer to its security tracker page at: https://security-tracker.debian.org/tracker/lxd Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Multiple security issues in LXD lead to potential bypass of restrictions and command execution. Upgrade immediately.. Debian LXD update command execution bypass security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 28, 2026 •Important Debian
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of servicecritical

Ubuntu 18.04 LXD Critical DoS Threat Advisory USN-8447-2

Several security issues were fixed in LXD.. ========================================================================== Ubuntu Security Notice USN-8447-2 June 18, 2026 lxd vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in LXD. Software Description: - lxd: Container hypervisor based on LXC Details: USN-8447-1 fixed vulnerabilities in Go Cryptography. This update provides the corresponding updates for Go Cryptography code embedded in LXD for CVE-2026-39830, CVE-2026-39833, CVE-2026-39834, and CVE-2026-42508. Original advisory details: It was discovered that Go Cryptography did not properly handle SSH global request responses. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-39830) It was discovered that Go Cryptography did not properly verify user presence when using FIDO/U2F security keys. An attacker could possibly use this issue to bypass user presence verification for hardware security keys. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-39831) It was discovered that Go Cryptography did not properly serialize SSH agent key constraint extensions. An attacker could possibly use this issue to bypass intended key usage restrictions. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-39832) It was discovered that Go Cryptography did not properly enforce the confirm-before-use constraint in the SSH agent keyring. An attacker could possibly use this issue to use SSH keys without the required user confirmation. (CVE-2026-39833) It was discovered that Go Cryptography had an integer overflow when handling large SSH channel writes. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-39834) It wasdiscovered that Go Cryptography did not properly check certificate authority key revocation. An attacker could possibly use this issue to bypass certificate authority revocation checks. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-42508) It was discovered that Go Cryptography did not properly enforce the source- address critical option for all SSH server callback types. An attacker could possibly use this issue to bypass source address authorization restrictions. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-46595) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS lxd 3.0.3-0ubuntu1~18.04.2+esm3 Available with Ubuntu Pro Ubuntu 16.04 LTS lxd 2.0.11-0ubuntu1~16.04.4+esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8447-2 https://ubuntu.com/security/notices/USN-8447-1 CVE-2026-39830, CVE-2026-39833, CVE-2026-39834, CVE-2026-42508 . Explore critical advisories for Ubuntu LXD that resolve multiple security issues, ensuring system integrity and safety.. Ubuntu LXD security critical updates remote exploits. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 18, 2026 •Critical Ubuntu
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of serviceupdate

Debian LXD Critical Issues Denial of Service CVE-2026-40197 DSA-6247-1

Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in denial of service. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u6. For the stable distribution (trixie), these problems have been fixed in. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6247-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 04, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lxd CVE ID : CVE-2026-40197 CVE-2026-40251 CVE-2026-41648 CVE-2026-41684 CVE-2026-41685 Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in denial of service. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u6. For the stable distribution (trixie), these problems have been fixed in version 5.0.2+git20231211.1364ae4-9+deb13u6. We recommend that you upgrade your lxd packages. For the detailed security status of lxd please refer to its security tracker page at: https://security-tracker.debian.org/tracker/lxd Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Critical issues in LXD for Debian lead to denial of service. Updates fix vulnerabilities in bookworm and trixie.. Debian DSA-6247-1, LXD security, system container manager, denial of service, security patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 04, 2026 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianprivilege escalation

Debian DSA-6188-1 LXD Important Privilege Escalation Risk Fix

Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in privilege escalation or the execution of arbitrary commands. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u4.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6188-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff March 31, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lxd CVE ID : CVE-2026-28384 CVE-2026-33542 CVE-2026-33897 Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in privilege escalation or the execution of arbitrary commands. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u4. For the stable distribution (trixie), these problems have been fixed in version 5.0.2+git20231211.1364ae4-9+deb13u4. We recommend that you upgrade your lxd packages. For the detailed security status of lxd please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lxd Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Multiple security issues in LXD fixed in Debian updates can prevent privilege escalation and command execution risks.. Debian, LXD, privilege escalation, security update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 31, 2026 •Important Debian
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianarbitrary command execution

Debian Bookworm LXD Important Arbitrary Command Execution DSA-6153-1

Two security issues were discovered in LXD, a system container and virtual machine manager, which could result the in execution of arbitrary commands via malformed images. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u3.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6153-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff March 01, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lxd CVE ID : CVE-2026-23953 CVE-2026-23954 Two security issues were discovered in LXD, a system container and virtual machine manager, which could result the in execution of arbitrary commands via malformed images. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u3. For the stable distribution (trixie), these problems have been fixed in version 5.0.2+git20231211.1364ae4-9+deb13u3. We recommend that you upgrade your lxd packages. For the detailed security status of lxd please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lxd Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Two security issues in LXD allow arbitrary command execution via malicious images. Upgrade recommended.. LXD security issues, Debian updates, command execution risk, LXD advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 01, 2026 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorylocal privilege escalationdebian

Debian DSA-6057-1 LXD Important Local Privilege Escalation CVE-2025-64507

It was discovered that LXD, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability if unprivileged users are allowed to access LXD through lxd-user. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-6057-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso November 13, 2025 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lxd CVE ID : CVE-2025-64507 It was discovered that LXD, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability if unprivileged users are allowed to access LXD through lxd-user. For the oldstable distribution (bookworm), this problem has been fixed in version 5.0.2-5+deb12u2. We recommend that you upgrade your lxd packages. For the detailed security status of lxd please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lxd Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . LXD contains a security flaw allowing local privilege escalation for unprivileged users; upgrade recommended.. local privilege escalation, lxd upgrade, debian security, system container vulnerability, DSA-6057-1. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 13, 2025 •Important Debian
Banner 1 1028x280 1708121660 1771599717
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatesecurity update

openSUSE Tumbleweed Security Advisory: 2024:14564-1 for lxd-5.21.1-2.1

An update that solves one vulnerability can now be installed.. # lxd-5.21.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14564-1 Rating: moderate Cross-References: * CVE-2023-46565 CVSS scores: * CVE-2023-46565 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the lxd-5.21.1-2.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * lxd 5.21.1-2.1 * lxd-bash-completion 5.21.1-2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46565.html . OpenSUSE Notification for lxd-5.21.1-2.1 concerning a significant security vulnerability and essential update information.. openSUSE, lxd-5, moderate severity, security update, advisory. . LinuxSecurity.com Team

Calendar%202 Dec 10, 2024 OpenSUSE
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryremote attackubuntu

Ubuntu 18.04 & 16.04 USN-6738-1 Moderate: LXD Integrity Bypass

LXD could be made to bypass integrity checks if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-6738-1 April 22, 2024 lxd vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) Summary: LXD could be made to bypass integrity checks if it received specially crafted input. Software Description: - lxd: Container hypervisor based on LXC Details: Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that LXD incorrectly handled the handshake phase and the use of sequence numbers in SSH Binary Packet Protocol (BPP). If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to bypass integrity checks. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS (Available with Ubuntu Pro): lxd 3.0.3-0ubuntu1~18.04.2+esm1 lxd-client 3.0.3-0ubuntu1~18.04.2+esm1 lxd-tools 3.0.3-0ubuntu1~18.04.2+esm1 Ubuntu 16.04 LTS (Available with Ubuntu Pro): golang-github-lxc-lxd-dev 2.0.11-0ubuntu1~16.04.4+esm1 lxc2 2.0.11-0ubuntu1~16.04.4+esm1 lxd 2.0.11-0ubuntu1~16.04.4+esm1 lxd-client 2.0.11-0ubuntu1~16.04.4+esm1 lxd-tools 2.0.11-0ubuntu1~16.04.4+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6738-1 CVE-2023-48795 . Critical flaw detected in LXD affects Ubuntu 16.04 and 18.04 LTS; please prioritize your updates now.. LXD Security Advisory,Ubuntu Integrity Bypass, Remote Attack Patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 22, 2024 •Important Ubuntu
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics