Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 6 articles for you...
100
security advisorySuSEimportantSUSE Dovecot22 Important Security Update Three Issues 2026-2645-1
An update that solves three vulnerabilities can now be installed.. # Security update for dovecot22 Announcement ID: SUSE-SU-2026:2645-1 Release Date: 2026-06-26T09:00:45Z Rating: important References: * bsc#1265147 * bsc#1265149 * bsc#1265150 Cross-References: * CVE-2026-33603 * CVE-2026-40020 * CVE-2026-42006 CVSS scores: * CVE-2026-33603 ( SUSE ): 7.6 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-33603 ( SUSE ): 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33603 ( NVD ): 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33603 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-40020 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-40020 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-40020 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-40020 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-42006 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-42006 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42006 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for dovecot22 fixes the following issues * CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147). * CVE-2026-40020: IMAP folders can be shared-spammed to everyone (bsc#1265149). * CVE-2026-42006: imap-login: uncontrolled memory usage with excessive bracing over IMAP (bsc#1265150). ## PatchInstructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-2645=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2645=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * dovecot22-backend-sqlite-2.2.31-19.37.2 * dovecot22-debuginfo-2.2.31-19.37.2 * dovecot22-devel-2.2.31-19.37.2 * dovecot22-2.2.31-19.37.2 * dovecot22-backend-pgsql-2.2.31-19.37.2 * dovecot22-backend-mysql-2.2.31-19.37.2 * dovecot22-backend-pgsql-debuginfo-2.2.31-19.37.2 * dovecot22-debugsource-2.2.31-19.37.2 * dovecot22-backend-sqlite-debuginfo-2.2.31-19.37.2 * dovecot22-backend-mysql-debuginfo-2.2.31-19.37.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * dovecot22-backend-sqlite-2.2.31-19.37.2 * dovecot22-debuginfo-2.2.31-19.37.2 * dovecot22-devel-2.2.31-19.37.2 * dovecot22-2.2.31-19.37.2 * dovecot22-backend-pgsql-2.2.31-19.37.2 * dovecot22-backend-mysql-2.2.31-19.37.2 * dovecot22-backend-pgsql-debuginfo-2.2.31-19.37.2 * dovecot22-debugsource-2.2.31-19.37.2 * dovecot22-backend-sqlite-debuginfo-2.2.31-19.37.2 * dovecot22-backend-mysql-debuginfo-2.2.31-19.37.2 ## References: * https://www.suse.com/security/cve/CVE-2026-33603.html * https://www.suse.com/security/cve/CVE-2026-40020.html * https://www.suse.com/security/cve/CVE-2026-42006.html * https://bugzilla.suse.com/show_bug.cgi?id=1265147 * https://bugzilla.suse.com/show_bug.cgi?id=1265149 * https://bugzilla.suse.com/show_bug.cgi?id=1265150 . An important SUSE update for dovecot22 fixes three security issues related to IMAP and memory usage. Upgrade recommended.. SUSE Dovecot Security UpdateImportant CVE. . Severity: Important. LinuxSecurity.com Team
Jun 26, 2026
•Important
SuSE
202
security advisorymoderateOpenSUSEopenSUSE Leap 16.0 python-PyPDF2 Moderate Memory Usage Fix 2026-20598-1
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for python-pypdf2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20598-1 Rating: moderate References: * bsc#1262284 Cross-References: * CVE-2026-40260 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for python-PyPDF2 fixes the following issues: Changes in python-PyPDF2: - CVE-2026-40260: crafted PDF can lead to large memory usage (bsc#1262284) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-208=1 Package List: - openSUSE Leap 16.0: python313-PyPDF2-2.11.1-bp160.6.1 References: * https://www.suse.com/security/cve/CVE-2026-40260.html . Update for python-PyPDF2 resolves a moderate memory usage issue on openSUSE Leap 16.0, enhancing system stability.. openSUSE security update, python PyPDF2 fix, CVE memory issue. . LinuxSecurity.com Team
Apr 22, 2026
OpenSUSE
89
security advisoryfedorasoftware updateFedora 43: rust-get-size2 Update 2025-312ac3e645 Fixes Memory Regression
Pydantic 2.12.4 This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-312ac3e645 2025-11-10 00:46:08.034331+00:00 -------------------------------------------------------------------------------- Name : rust-get-size2 Product : Fedora 43 Version : 0.7.1 Release : 1.fc43 URL : https://crates.io/crates/get-size2 Summary : Determine the size in bytes an object occupies inside RAM Description : Determine the size in bytes an object occupies inside RAM. -------------------------------------------------------------------------------- Update Information: Pydantic 2.12.4 This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types. This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any. https://github.com/pydantic/pydantic/releases/tag/v2.12.4 uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addresses potential sources of ZIP parsing differentials between uv and other Python packaging tooling. See GHSA-pqhf-p39g-3x64 for additional details. https://github.com/astral-sh/uv/releases/tag/0.9.6 ruff 0.14.3 https://github.com/astral-sh/ruff/releases/tag/0.14.3 Update rust-get-size2/rust-get-size-derive2 to 0.7.1 (implement GetSize for RefCell). Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1. Update rust-regex to 1.12.2 and rust-regex-automata to0.4.13. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 26 2025 Benjamin A. Beasley - 0.7.1-1 - Update to version 0.7.1; Fixes RHBZ#2406419 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2403244 - rust-regex-1.12.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2403244 [ 2 ] Bug #2403245 - rust-regex-automata-0.4.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=2403245 [ 3 ] Bug #2406419 - rust-get-size2-0.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2406419 [ 4 ] Bug #2406420 - rust-get-size-derive2-0.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2406420 [ 5 ] Bug #2411957 - python-cloudpickle-3.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411957 [ 6 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411978 [ 7 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411979 [ 8 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411980 [ 9 ] Bug #2411981 - rust-reqsign-0.18.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411981 [ 10 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411982 [ 11 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411983 [ 12 ] Bug #2412643 - python-pydantic-2.12.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2412643 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-312ac3e645' at the command line. For moreinformation, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 10, 2025
•Informational
Fedora
89
security advisorysecurity issuefedoraFedora 43: rust-regex Memory Improvement Advisory 2025-4154ea83d0
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydantic 2.12.3. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-4154ea83d0 2025-11-05 02:09:57.817569+00:00 -------------------------------------------------------------------------------- Name : rust-regex Product : Fedora 43 Version : 1.11.3 Release : 1.fc43 URL : https://crates.io/crates/regex Summary : Implementation of regular expressions for Rust Description : An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs. -------------------------------------------------------------------------------- Update Information: uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydantic 2.12.3 Blog post maturin 1.9.6 https://github.com/PyO3/maturin/blob/v1.9.6/Changelog.md python-typing-inspection 0.4.2 (2025-10-01) Add typing_objects.is_noextraitems() python-jiter 0.11.0 https://github.com/pydantic/jiter/releases/tag/v0.11.0 python-pydantic-extra-types 2.10.6 https://github.com/pydantic/pydantic-extra-types/releases/tag/v2.10.6 Typer 0.20.0 Features \u2728 Enable command suggestions on typo by default. Upgrades \u2b06\ufe0f Add (official) support for Python 3.14. Internal Assorted small enhancements. FastAPI 0.120.1 Upgrades \u2b06\ufe0f Bump Starlette to
Nov 05, 2025
•Important
Fedora
87
security advisorydenial of servicedebianDebian 12: DSA-5958-1 critical: jpeg-xl buffer overflow
Multiple vulnerabilities are discovered in jpeg-xl, the JPEG XL ("JXL") image coding library, including out of bounds read/write and stack based buffer overflow, which may cause excessive memory usage and denial of service attacks. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5958-1
Jul 04, 2025
•Critical
Debian
172
security advisorydenial of servicesoftware updateUbuntu 20.04 and 22.04: USN-7529-1 moderate: Apache Tika issues
Several security issues were fixed in Apache Tika.. ========================================================================== Ubuntu Security Notice USN-7529-1 May 23, 2025 tika vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in Apache Tika. Software Description: - tika: A content analysis toolkit Details: It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-1950, CVE-2020-1951) It was discovered that Apache Tika incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-30126, CVE-2022-30973, CVE-2022-33879) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS libtika-java 1.22-2ubuntu0.22.04.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS libtika-java 1.22-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7529-1 CVE-2020-1950, CVE-2020-1951, CVE-2022-30126, CVE-2022-30973, CVE-2022-33879 . Various vulnerabilities have been resolved in Apache Tika for Ubuntu 20.04 and 22.04 LTS. Below are the guidelines for updating your system.. Ubuntu security updates, Apache Tika vulnerabilities, Linux software patches. . Severity: Important. LinuxSecurity.com Team
May 26, 2025
•Important
Ubuntu
203
security advisorysecurity updatesecurity issueMageia 8: MGASA-2023-0207 Moderate: Docker Registry Memory DoS
Denail of service through excessive use of memory. (CVE-2023-2253) References: - https://bugs.mageia.org/show_bug.cgi?id=32017 - https://lists.debian.org/debian-security-announce/2023/msg00104.html . MGASA-2023-0207 - Updated docker-docker-registry packages fix security vulnerability Publication date: 28 Jun 2023 URL: https://advisories.mageia.org/MGASA-2023-0207.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-2253 Denail of service through excessive use of memory. (CVE-2023-2253) References: - https://bugs.mageia.org/show_bug.cgi?id=32017 - https://lists.debian.org/debian-security-announce/2023/msg00104.html - https://www.cve.org/CVERecord?id=CVE-2023-2253 SRPMS: - 8/core/docker-registry-2.8.2-1.mga8 . Recent upgrades to the docker-docker-registry packages in Mageia address a denial of service vulnerability related to memory consumption.. docker registry security,Mageia updates,denial of service,security vulnerabilities. . LinuxSecurity.com Team
Jun 28, 2023
Mageia
202
security advisorysoftware updatemoderate severityopenSUSE: 2022:0098-1 Moderate: Nextcloud Permissions And Memory Issues
An update that fixes three vulnerabilities is now available. . openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0098-1 Rating: moderate References: #1196905 #1196908 #1196952 Cross-References: CVE-2021-41239 CVE-2021-41241 CVE-2021-41741 CVSS scores: CVE-2021-41239 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-41239 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: nextcloud was updated to 21.0.9: - CVE-2021-41239 (CWE-200): user enumeration setting not obeyed in User Status API (boo#1196905) - CVE-2021-41241 (CWE-863): groupfolders advanced permissions is not obeyed for subfolders (boo#1196908) - CVE-2021-41741 (CWE-400): High memory usage for generating preview of broken image (boo#1196952) - For more changes see https://nextcloud.com/changelog/#21-0-9 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-98=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): nextcloud-21.0.9-bp153.2.12.1 nextcloud-apache-21.0.9-bp153.2.12.1 References: https://www.suse.com/security/cve/CVE-2021-41239.html https://www.suse.com/security/cve/CVE-2021-41241.html https://www.suse.com/security/cve/CVE-2021-41741.html https://bugzilla.suse.com/1196905 https://bugzilla.suse.com/1196908 https://bugzilla.suse.com/1196952 . The recent updates for Nextcloud tackle various challenges, such as excessive RAM consumption and improvements in user enumeration configurations.. Nextcloud Update, OpenSUSE Security, Memory Usage Fixes. . LinuxSecurity.com Team
Mar 31, 2022
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!