Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
219
security advisoryimportantfile writeCentOS Stream 9 RLSB-2026-8537 Critical Security Update for Python Files
Important: golang security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:5942", "synopsis": "Important: golang security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for golang.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731)\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2434433", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2434433", "description": ""}, {"ticket": "2445356", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "description": ""}], "cves": [{"name": "CVE-2025-61731", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2025-61731", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cvss3BaseScore": "8.6", "cwe": "CWE-88"}, {"name": "CVE-2026-25679", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-25679", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-1286"}], "references": [], "publishedAt": "2026-04-07T12:03:55.701474Z", "rpms": {"Rocky Linux 9": {"nvras": ["golang-0:1.25.8-1.el9_7.aarch64.rpm", "golang-0:1.25.8-1.el9_7.ppc64le.rpm", "golang-0:1.25.8-1.el9_7.s390x.rpm", "golang-0:1.25.8-1.el9_7.src.rpm", "golang-0:1.25.8-1.el9_7.x86_64.rpm", "golang-bin-0:1.25.8-1.el9_7.aarch64.rpm","golang-bin-0:1.25.8-1.el9_7.ppc64le.rpm", "golang-bin-0:1.25.8-1.el9_7.s390x.rpm", "golang-bin-0:1.25.8-1.el9_7.x86_64.rpm", "golang-docs-0:1.25.8-1.el9_7.noarch.rpm", "golang-misc-0:1.25.8-1.el9_7.noarch.rpm", "golang-race-0:1.25.8-1.el9_7.aarch64.rpm", "golang-race-0:1.25.8-1.el9_7.ppc64le.rpm", "golang-race-0:1.25.8-1.el9_7.s390x.rpm", "golang-race-0:1.25.8-1.el9_7.x86_64.rpm", "golang-src-0:1.25.8-1.el9_7.noarch.rpm", "golang-tests-0:1.25.8-1.el9_7.noarch.rpm", "go-toolset-0:1.25.8-1.el9_7.aarch64.rpm", "go-toolset-0:1.25.8-1.el9_7.ppc64le.rpm", "go-toolset-0:1.25.8-1.el9_7.s390x.rpm", "go-toolset-0:1.25.8-1.el9_7.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important golang security update enhances stability and mitigates risk with fixes for significant vulnerabilities. . go programming language update, golang security fix, Rocky Linux advisory. . Severity: Important. LinuxSecurity.com Team
Apr 07, 2026
•Important
Rocky Linux
203
security advisoryfile accessdpkgMageia 8: MGASA-2022-0327 Moderate: Dpkg Malicious Package Threat
A malicious source package could write files outside the unpack directory. (CVE-2022-1664) References: - https://bugs.mageia.org/show_bug.cgi?id=30481 . MGASA-2022-0327 - Updated dpkg packages fix security vulnerability Publication date: 16 Sep 2022 URL: https://advisories.mageia.org/MGASA-2022-0327.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-1664 A malicious source package could write files outside the unpack directory. (CVE-2022-1664) References: - https://bugs.mageia.org/show_bug.cgi?id=30481 - https://lists.debian.org/debian-security-announce/2022/msg00115.html - https://ubuntu.com/security/notices/USN-5446-1 - https://www.cve.org/CVERecord?id=CVE-2022-1664 SRPMS: - 8/core/dpkg-1.20.10-3.mga8 . Mageia 2022-0328 addresses a vulnerability in apt that permitted a malicious package to execute scripts beyond its designated folder.. Mageia Security Update, Dpkg Package Fix, Malicious Access Issue. . LinuxSecurity.com Team
Sep 16, 2022
Mageia
172
security advisorydenial of serviceUbuntuUbuntu 16.04 ESM USN-5446-2 Moderate: dpkg File Access Threat
A malicious source package could write files outside the unpack directory.. =========================================================================Ubuntu Security Notice USN-5446-2 May 30, 2022 dpkg vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM Summary: A malicious source package could write files outside the unpack directory. Software Description: - dpkg: Debian package management system Details: USN-5446-1 fixed a vulnerability in dpkg. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: dpkg 1.18.4ubuntu1.7+esm1 libdpkg-perl 1.18.4ubuntu1.7+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5446-2 https://ubuntu.com/security/notices/USN-5446-1 CVE-2022-1664 . Mitigating dpkg security flaw in Ubuntu 16.04 ESM which enables adversarial packages to modify files beyond the designated unpack area.. Ubuntu Security, dpkg Vulnerability, System Update, Software Management. . LinuxSecurity.com Team
May 30, 2022
Ubuntu
172
security advisorydenial of servicecriticalUbuntu 22.04 LTS USN-5446-1 Critical Dpkg Malicious Package Threat
A malicious source package could write files outside the unpack directory.. =========================================================================Ubuntu Security Notice USN-5446-1 May 26, 2022 dpkg vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 21.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: A malicious source package could write files outside the unpack directory. Software Description: - dpkg: Debian package management system Details: Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: dpkg 1.21.1ubuntu2.1 libdpkg-perl 1.21.1ubuntu2.1 Ubuntu 21.10: dpkg 1.20.9ubuntu2.2 libdpkg-perl 1.20.9ubuntu2.2 Ubuntu 20.04 LTS: dpkg 1.19.7ubuntu3.2 libdpkg-perl 1.19.7ubuntu3.2 Ubuntu 18.04 LTS: dpkg 1.19.0.5ubuntu2.4 libdpkg-perl 1.19.0.5ubuntu2.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5446-1 CVE-2022-1664 Package Information: https://launchpad.net/ubuntu/+source/dpkg/1.21.1ubuntu2.1 https://launchpad.net/ubuntu/+source/dpkg/1.20.9ubuntu2.2 https://launchpad.net/ubuntu/+source/dpkg/1.19.7ubuntu3.2 https://launchpad.net/ubuntu/+source/dpkg/1.19.0.5ubuntu2.4 . Ubuntu Security Notice USN-5446-1 highlights adpkg vulnerability that permits harmful packages to modify files beyond their intended unpack location.. Ubuntu Security,Dpkg Threat,Malicious Package Access. . Severity: Critical. LinuxSecurity.com Team
May 26, 2022
•Critical
Ubuntu
172
security advisorydenial of serviceubuntuUbuntu 14.04 LTS USN-2183-2 Moderate: Dpkg Denial Of Service
A malicious source package could write files outside the unpack directory.. =========================================================================Ubuntu Security Notice USN-2183-2 May 01, 2014 dpkg vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS - Ubuntu 13.10 - Ubuntu 12.10 - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: A malicious source package could write files outside the unpack directory. Software Description: - dpkg: Debian package management system Details: USN-2183-1 fixed a vulnerability in dpkg. Javier Serrano Polo discovered that the fix introduced a vulnerability in releases with an older version of the patch utility. This update fixes the problem. Original advisory details: Jakub Wilk discovered that dpkg incorrectly certain paths and symlinks when unpacking source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: libdpkg-perl 1.17.5ubuntu5.2 Ubuntu 13.10: libdpkg-perl 1.16.12ubuntu1.2 Ubuntu 12.10: libdpkg-perl 1.16.7ubuntu6.2 Ubuntu 12.04 LTS: libdpkg-perl 1.16.1.2ubuntu7.4 Ubuntu 10.04 LTS: dpkg-dev 1.15.5.6ubuntu4.8 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2183-2 https://ubuntu.com/security/notices/USN-2183-1 CVE-2014-0471 Package Information: https://launchpad.net/ubuntu/+source/dpkg/1.17.5ubuntu5.2 https://launchpad.net/ubuntu/+source/dpkg/1.16.12ubuntu1.2 https://launchpad.net/ubuntu/+source/dpkg/1.16.7ubuntu6.2 https://launchpad.net/ubuntu/+source/dpkg/1.16.1.2ubuntu7.4 https://launchpad.net/ubuntu/+source/dpkg/1.15.5.6ubuntu4.8 . Urgent patch required for critical dpkg vulnerability in Ubuntu impacting various releases with possible system entry risks.. Ubuntu Dpkg Flaw, Ubuntu Security Update, Malicious Package Vulnerability. . LinuxSecurity.com Team
May 01, 2014
Ubuntu
172
security advisoryUbuntuman-in-the-middleUbuntu 11.04 USN-1169-1 Severe: APT Attack Package Alteration
An attacker could trick APT into installing altered packages.. =========================================================================Ubuntu Security Notice USN-1169-1 July 13, 2011 apt vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.04 Summary: An attacker could trick APT into installing altered packages. Software Description: - apt: Advanced front-end for dpkg Details: William Grant discovered that APT incorrectly validated inline GPG signatures. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.04: apt 0.8.13.2ubuntu4.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1169-1 CVE-2011-1829 Package Information: https://launchpad.net/ubuntu/+source/apt/0.8.13.2ubuntu4.1 . A malicious actor might take advantage of APT vulnerabilities to deploy modified software packages, jeopardizing Ubuntu 11.04 systems. Ensure your system is updated to maintain security.. APT Vulnerability, Ubuntu 11.04, Package Installation, Security Update. . Severity: Important. LinuxSecurity.com Team
Jul 13, 2011
•Important
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!