Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
172
security advisorycriticalUbuntuUbuntu 25.10: Security Advisory USN-7867-1 for rust-sudo-rs Critical Issues
Several security issues were fixed in sudo-rs.. ========================================================================== Ubuntu Security Notice USN-7867-1 November 10, 2025 rust-sudo-rs vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 Summary: Several security issues were fixed in sudo-rs. Software Description: - rust-sudo-rs: Rust-based sudo and su implementations Details: It was discovered that sudo-rs incorrectly handled passwords when timeouts occurred and the pwfeedback default was not set. This could result in a partially typed password being output to standard input, contrary to expectations. It was discovered that sudo-rs incorrectly handled the targetpw and rootpw default settings when creating timestamp files. A local attacker could possibly use this issue to bypass authentication in certain configurations. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 sudo-rs 0.2.8-1ubuntu5.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7867-1 https://bugs.launchpad.net/ubuntu/+source/rust-sudo-rs/+bug/2130623 Package Information: https://launchpad.net/ubuntu/+source/rust-sudo-rs/0.2.8-1ubuntu5.2 . Several security issues fixed in rust-sudo-rs for Ubuntu 25.10, ensuring improved password handling and authentication.. rust-sudo-rs security, Ubuntu authentication fix, sudo vulnerability, password handling issues. . Severity: Critical. LinuxSecurity.com Team
Nov 10, 2025
•Critical
Ubuntu
203
security advisorycriticalmageiaMageia 8: MGASA-2023-0127 Critical Samba Security Update
Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Cleartext password sending by AD DC admin tool (CVE-2023-0922) . MGASA-2023-0127 - Updated ldb/samba packages fix security vulnerability Publication date: 06 Apr 2023 URL: https://advisories.mageia.org/MGASA-2023-0127.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-0225 Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Cleartext password sending by AD DC admin tool (CVE-2023-0922) References: - https://bugs.mageia.org/show_bug.cgi?id=31735 - - - - https://lists.suse.com/pipermail/sle-security-updates/2023-March/014245.html - https://www.cve.org/CVERecord?id=CVE-2023-0225 SRPMS: - 8/core/ldb-2.5.3-1.mga8 - 8/core/samba-4.16.10-1.mga8 . The Mageia 2023-0127 update resolves vulnerabilities in ldb/samba concerning the management of attribute removal and the handling of passwords.. Mageia Security, Samba Update, ldb Security, Data Access Control, AD DC Issues. . Severity: Critical. LinuxSecurity.com Team
Apr 06, 2023
•Critical
Mageia
100
security advisorymoderatesecurity fixSUSE Linux Enterprise: 2022:4294-1 Moderate: Supportutils Security Fix
An update that contains security fixes can now be installed. . SUSE Security Update: Security update for supportutils ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4294-1 Rating: moderate References: #1203818 Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for supportutils fixes the following issues: Security issues fixed: - Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-4294=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-4294=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-4294=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-4294=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-4294=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-4294=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-4294=1 PackageList: - SUSE OpenStack Cloud Crowbar 9 (noarch): supportutils-3.0.10-95.51.1 - SUSE OpenStack Cloud 9 (noarch): supportutils-3.0.10-95.51.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (noarch): supportutils-3.0.10-95.51.1 - SUSE Linux Enterprise Server 12-SP5 (noarch): supportutils-3.0.10-95.51.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (noarch): supportutils-3.0.10-95.51.1 - SUSE Linux Enterprise Server 12-SP3-BCL (noarch): supportutils-3.0.10-95.51.1 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): supportutils-3.0.10-95.51.1 References: https://bugzilla.suse.com/1203818 . The latest enhancement for supportutils addresses vulnerabilities associated with password management in SUSE Linux environments.. SUSE Linux, Security Update, Supportutils Fixes, System Security. . LinuxSecurity.com Team
Nov 29, 2022
SuSE
203
security advisorycredential exposureansibleMageia 7: MGASA-2019-0309 Moderate: Ansible Credential Exposure
Updated ansible package fixes security vulnerabilities: ansible-playbook -k and ansible cli tools prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them . MGASA-2019-0309 - Updated ansible packages fix security vulnerabilities Publication date: 02 Nov 2019 URL: https://advisories.mageia.org/MGASA-2019-0309.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-10206, CVE-2019-14846, CVE-2019-14858 Updated ansible package fixes security vulnerabilities: ansible-playbook -k and ansible cli tools prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them (CVE-2019-10206). Ansible was logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process (CVE-2019-14846). When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task (CVE-2019-14858). References: - https://bugs.mageia.org/show_bug.cgi?id=25607 - https://access.redhat.com/errata/RHSA-2019:3203 - https://www.cve.org/CVERecord?id=CVE-2019-10206 - https://www.cve.org/CVERecord?id=CVE-2019-14846 - https://www.cve.org/CVERecord?id=CVE-2019-14858 SRPMS: - 7/core/ansible-2.7.14-1.mga7 . The latest ansible updates address security issues concerning password management and the risk of credential leaks in Mageia.. Ansible Security, Mageia, Security Update, Credential Management, Software Patch. . LinuxSecurity.com Team
Nov 02, 2019
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!