Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 598
Alerts This Week
Warning Icon 1 598

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Python311 Important Memory Error Command Injection Fix 2026-3132-1

Calendar White Jul 20, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE gstreamer-plugins-bad Important Buffer Overflow Risk 2026-3133-1

Calendar White Jul 20, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE 389-ds Important Heap Overflow DoS Issues Vuln 2026-3136-1

Calendar White Jul 20, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE 389-ds Important Heap Overflow DoS Fix 2026-3137-1

Calendar White Jul 20, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 8573-1 Libde265 Critical Denial of Service Vulnerabilities

Calendar White Jul 20, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 Wget Important Server-Side Request Forgery Vuln USN-8572-1

Calendar White Jul 20, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu Apache2 Important DoS HTTP Response Issues USN-8571-1

Calendar White Jul 20, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux javapackages-tools Important Directory Traversal CVE-2025-67030

Calendar White Jul 20, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux nodejs Important Denial of Service Update RLSA-2026-41947

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorycriticalsoftware update

Debian 10 Buster DLA-3644-1 Critical: Phppgadmin Remote Code Execution

It was discovered there was a potential remote code execution vulnerability in phppgadmin, a web-based administration tool for the PostgreSQL database server. This issue concerned the deserialisation of untrusted data which may have led to remote code execution because . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3644-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Chris Lamb November 03, 2023 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : phppgadmin Version : 5.1+ds-4+deb10u1 CVE ID : CVE-2023-40619 Debian Bug : 1053004 It was discovered there was a potential remote code execution vulnerability in phppgadmin, a web-based administration tool for the PostgreSQL database server. This issue concerned the deserialisation of untrusted data which may have led to remote code execution because user-controlled data was being passed directly to the PHP 'unserialize()' function. For Debian 10 buster, this problem has been fixed in version 5.1+ds-4+deb10u1. We recommend that you upgrade your phppgadmin packages. For the detailed security status of phppgadmin please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/phppgadmin Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Upgrade phpPgAdmin on Debian 10 and secure it against remote execution vulnerabilities by following these essential steps for a safe update.. phppgadmin security, remote execution risk, Debian update, code execution fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 03, 2023 •Critical Debian LTS
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorysecurity issuecritical

Mageia 7: MGASA-2021-0074 Critical: phppgadmin CSRF Threat

phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, database.php does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute arbitrary system commands on the . MGASA-2021-0074 - Updated phppgadmin package fixes a security vulnerability Publication date: 08 Feb 2021 URL: https://advisories.mageia.org/MGASA-2021-0074.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-10784 phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, database.php does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute arbitrary system commands on the server (CVE-2019-10784). References: - https://bugs.mageia.org/show_bug.cgi?id=27912 - https://www.cve.org/CVERecord?id=CVE-2019-10784 SRPMS: - 7/core/phppgadmin-7.13.0-1.mga7 . MGASA-2021-0075 addresses a vital security vulnerability in phpMyAdmin enabling potential XSS exploits from external actors.. phppgadmin, CSRF, Mageia 7, security update, remote exploit. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 08, 2021 •Critical Mageia
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticalremote

Debian 3.1 DSA 759-1 Critical: Phppgadmin Directory Traversal

A vulnerability has been discovered in phppgadmin, a set of PHP scripts to administrate PostgreSQL over the WWW, that can lead to disclose sensitive information. Successful exploitation requires that "magic_quotes_gpc" is disabled.. - --------------------------------------------------------------------------Debian Security Advisory DSA 759-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : phppgadmin Vulnerability : missing input sanitising Problem-Type : remote Debian-specific: no CVE ID : CAN-2005-2256 BugTraq ID : 14142 A vulnerability has been discovered in phppgadmin, a set of PHP scripts to administrate PostgreSQL over the WWW, that can lead to disclose sensitive information. Successful exploitation requires that "magic_quotes_gpc" is disabled. the old stable distribution (woody) is not affected by this problem. For the stable distribution (sarge) this problem has been fixed in version 3.5.2-5. For the unstable distribution (sid) this problem has been fixed in version 3.5.4. We recommend that you upgrade your phppgadmin package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: Size/MD5 checksum: 584 46f4509ee768781e441286d125afe0f5 Size/MD5 checksum: 100638f1d0323ae84979c21a409334c6e70db Size/MD5 checksum: 612995 9978c0a723a9e4572f2264478c0ba193 Architecture independent components: Size/MD5 checksum: 601022 b9e4117adf7ef565e6884fbde4daaf9f These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu Security Notice USN-4595-1 relates to vulnerabilities in phpMyAdmin that may permit unauthorized access to confidential information.. debian advisory, phppgadmin security, directory traversal issue, information disclosure, input sanitization. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 18, 2005 •Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics