Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderatedenial of service

Red Hat: RHSA-2014:1785-01 Moderate: OpenStack Neutron DoS Risk

Updated openstack-neutron packages that fix one security issue, several bugs, and add multiple enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openstack-neutron security, bug fix, and enhancement update Advisory ID: RHSA-2014:1785-01 Product: Red Hat Enterprise Linux OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2014:1785.html Issue date: 2014-11-03 CVE Names: CVE-2014-6414 ==================================================================== 1. Summary: Updated openstack-neutron packages that fix one security issue, several bugs, and add multiple enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 6 - noarch 3. Description: OpenStack Networking (neutron) is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main function is to manage connectivity to and from virtual machines. As of Red Hat Enterprise Linux OpenStack Platform 4.0, 'neutron' replaces 'quantum' as the core component of OpenStack Networking. It was discovered that unprivileged users could in some cases reset admin-only network attributes to their default values. This could lead to unexpected behavior or in some cases result in a denial of service. (CVE-2014-6414) The openstack-neutron packages have been upgraded to upstream version 2014.1.3, which provides a number of bug fixes and enhancements over the previous version.(BZ#1149753) All openstack-neutron users are advised to upgrade to these updated packages, which correct these issues and add these enhancements. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1142012 - CVE-2014-6414 openstack-neutron: Admin-only network attributes may be reset to defaults by non-privileged users1144329 - Remove dnsmasq version warning for dhcp-agent on RHEL 1149753 - Rebase openstack-neutron to 2014.1.3 1151524 - [RFE][neutron]: Config option to control visibility of cisco-policy-profile resources for tenants 1151531 - [RFE][neutron]: Ability to assign cisco nw profile to multi-tenants in single request 1159076 - l3-agent error : Executable not found: conntrack (filter match = conntrack) 6. Package List: Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL6: Source: openstack-neutron-2014.1.3-8.el6ost.src.rpm python-neutronclient-2.3.4-3.el6ost.src.rpm noarch: openstack-neutron-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-bigswitch-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-brocade-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-cisco-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-embrane-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-hyperv-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-ibm-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-linuxbridge-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-mellanox-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-metaplugin-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-metering-agent-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-midonet-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-ml2-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-nec-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-nuage-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-ofagent-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-oneconvergence-nvsd-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-openvswitch-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-plumgrid-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-ryu-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-vmware-2014.1.3-8.el6ost.noarch.rpm openstack-neutron-vpn-agent-2014.1.3-8.el6ost.noarch.rpm python-neutron-2014.1.3-8.el6ost.noarch.rpm python-neutronclient-2.3.4-3.el6ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2014-6414 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. . Recent openstack-neutron updates address security vulnerabilities and improve features for Red Hat Enterprise Linux.. RedHat OpenStack Security Update, OpenStackNeutron Fix, Networking Platform Enhancements. . LinuxSecurity.com Team

Calendar%202 Nov 03, 2014 Red Hat
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryunauthorized accesssecurity issue

Ubuntu 13.10 USN-2194-1 Critical: OpenStack Neutron Access Issue

OpenStack Neutron would allow unintended access to other tenant networks.. =========================================================================Ubuntu Security Notice USN-2194-1 May 05, 2014 neutron vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 13.10 Summary: OpenStack Neutron would allow unintended access to other tenant networks. Software Description: - neutron: Openstack Virtual Network Service Details: Aaron Rosen discovered that OpenStack Neutron did not properly perform authorization checks when creating ports when using plugins relying on the l3-agent. A remote authenticated attacker could exploit this to access the network of other tenants. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 13.10: python-neutron 1:2013.2.3-0ubuntu1.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2194-1 CVE-2014-0056 Package Information: https://launchpad.net/ubuntu/+source/neutron/1:2013.2.3-0ubuntu1.1 . OpenStack Neutron exposes unauthorized network access; Ubuntu security advisory USN-2194-1 outlines the corrective measures taken.. OpenStack Neutron, Ubuntu Security Notices, Network Access Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 05, 2014 •Critical Ubuntu
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics