Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Chromedriver Moderate Security Issues Fixed 2026-10958-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed libmozjs Moderate Update CVE-2025-70103

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Perl HTML Parser Moderate CVE-2026-8829 Advisory

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed kernel-devel Moderate Security Issue 2026-10954-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Gleam Moderate Threat Fixed 2026-10953-1

Calendar White Jun 08, 2026
moderate
Ubuntu Large Esm H900
Ubuntu

Ubuntu 25.10 Systemd Critical Arbitrary Code Exec DNS Issues USN-8402-1

Calendar White Jun 08, 2026
Critical
Opensuse Large Esm H800
openSUSE

openSUSE Epiphany Important Password Handling Issue CVE-2023-26081

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS 8399-1 Pillow Denial of Service Risk CVE-2026-42308

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS Poppler Critical DoS Code Execution Vuln USN-8400-1

Calendar White Jun 08, 2026
Critical
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorymoderatecommand injection

Mageia 8: 2023-0115 Moderate: Flatpak Command Injection Threat

If a malicious Flatpak app is run on a Linux virtual console such as /dev/tty1, it can copy text from the virtual console and paste it back into the virtual console's input buffer, from which the command might be run by the user's shell after the Flatpak app has exited. This is similar to CVE-2017-5226, but using the TIOCLINUX ioctl command instead . MGASA-2023-0115 - Updated flatpak packages fix security vulnerability Publication date: 24 Mar 2023 URL: https://advisories.mageia.org/MGASA-2023-0115.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-28100, CVE-2023-28101 If a malicious Flatpak app is run on a Linux virtual console such as /dev/tty1, it can copy text from the virtual console and paste it back into the virtual console's input buffer, from which the command might be run by the user's shell after the Flatpak app has exited. This is similar to CVE-2017-5226, but using the TIOCLINUX ioctl command instead of TIOCSTI. (CVE-2023-28100) Flatpak app with elevated permissions mayhide those permissions from users of the 'flatpak(1)' command-line interface by setting other permissions to crafted values that contain non-printable control characters such as 'ESC'. (CVE-2023-28101) References: - https://bugs.mageia.org/show_bug.cgi?id=31688 - https://github.com/flatpak/flatpak/releases/tag/1.12.8 - https://www.openwall.com/lists/oss-security/2023/03/17/1 - https://www.openwall.com/lists/oss-security/2023/03/17/2 - https://www.cve.org/CVERecord?id=CVE-2023-28100 - https://www.cve.org/CVERecord?id=CVE-2023-28101 SRPMS: - 8/core/flatpak-1.12.8-1.mga8 . Revised flatpak updates address security flaws that permit text command injection through the virtual terminal. Discover additional details!. Flatpak Security, Mageia Release, Linux Vulnerability, Command Injection, Permissions Exploit. . LinuxSecurity.com Team

Calendar 2 Mar 24, 2023 Mageia
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryRed Hat Linuxcritical

Debian GNU/Linux: DSA-2021:1234-1 Important: LibX11 Security Vulnerability

Esound, the Gnome sound server, contains a race condition that a malicioususer could exploit to change permissions of any file owned by the esounduser.. ` --------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: esound contains a race condition Advisory ID: RHSA-2000:077-03 Issue date: 2000-10-06 Updated on: 2000-10-06 Product: Red Hat Linux Keywords: esound security esd socket Gnome Cross references: N/A --------------------------------------------------------------------- 1. Topic: Esound, the Gnome sound server, contains a race condition that a malicious user could exploit to change permissions of any file owned by the esound user. 2. Relevant releases/architectures: Red Hat Linux 6.0 - i386, alpha, sparc Red Hat Linux 6.1 - i386, alpha, sparc Red Hat Linux 6.2 - i386, alpha, sparc Red Hat Linux 6.2EE - i386, alpha, sparc Red Hat Linux 7.0 - i386 Red Hat Linux 7.0J - i386 3. Problem description: Esound, the sound daemon used for Gnome, creates a world-writable directory, /tmp/.esd. This directory is owned by the user running esound, and is used to store a socket which is used by programs connecting to the sound server. During startup, this socket's permissions are adjusted. An attacker on the system can theoretically create a symbolic link, and cause any file or directory owned by the user running esound to be made world writable. The new packages fixes this race condition. 4. Solution: For each RPM for your particular architecture, run: rpm -Fvh [filename] where filename is the name of the RPM. All active Gnome sessions should also be restarted after the upgrade is applied. 5. Bug IDs fixed ( for more info): N/A 6. RPMs required: Red Hat Linux 6.x: alpha: sparc: i386: sources: Red Hat Linux 7.0: i386: sources: 7. Verification: MD5 sum PackageName -------------------------------------------------------------------------- 4f7a81fe6b7f5a419272659b92d1dfc1 6.2/SRPMS/esound-0.2.20-0.src.rpm 648746086daa7bbc6bef00697e62bf51 6.2/alpha/esound-0.2.20-0.alpha.rpm 8a7dbf7dabbd7d9ca2861c1ecf2b2d5f 6.2/alpha/esound-devel-0.2.20-0.alpha.rpm 962fa1129804f2d8470e1767a352f77f 6.2/i386/esound-0.2.20-0.i386.rpm 784ec77026228d31d823e619c1de78d8 6.2/i386/esound-devel-0.2.20-0.i386.rpm 2127fdd7654b80506952dce08c3f5014 6.2/sparc/esound-0.2.20-0.sparc.rpm 0c191eee05a89dc0d12b3ca4981d2353 6.2/sparc/esound-devel-0.2.20-0.sparc.rpm 24f8e1b106500565e8426ad96150a001 7.0/SRPMS/esound-0.2.20-1.src.rpm a61209acb87ed7f4fa5b1d63d161c85d 7.0/i386/esound-0.2.20-1.i386.rpm 6b326c66d570ee59eda7c2daf0ab4721 7.0/i386/esound-devel-0.2.20-1.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: BugTraq ID: 1659 () Copyright(c) 2000 Red Hat, Inc. `. The weakness in Xsound enables unapproved users to alter file accessibility settings. Urgent patches are essential to maintain protection on Fedora systems.. Esound Exploit, Red Hat Linux, Permissions Management. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 06, 2000 •Important Red Hat
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here