Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 Important Kernel Security Advisory ELSA-2026-21706

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 httpd Important Denial of Service Vuln ELSA-2026-22140

Calendar White Jun 02, 2026
Important
Oracle Large Esm H800
Oracle

Oracle Linux 8 ELSA-2026-22315 compat-openssl10 Moderate DoS Fix

Calendar White Jun 02, 2026
moderate
Oracle Large Esm H900
Oracle

Oracle Linux 8 gnutls Important Buffer Overflow Auth Bypass ELSA-2026-20611

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS nginx Security Advisory for Critical DoS Vulnerabilities

Calendar White Jun 03, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 LTS MySQL Important Security Issues USN-8363-2

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS GStreamer Base Significant DoS Attack Vulnerability Alert

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS python-pip Moderate DoS Regression Fix USN-8344-3

Calendar White Jun 03, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
198
Ls Advisories Archlinux Esm H240
Price Tag 1security advisorymedium severityarbitrary code execution

Arch Linux: ASA-202003-3 Medium: ppp Arbitrary Code Execution

The package ppp before version 2.4.7-7 is vulnerable to arbitrary code execution. . Arch Linux Security Advisory ASA-202003-3 ======================================== Severity: Medium Date : 2020-03-07 CVE-ID : CVE-2020-8597 Package : ppp Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1101 Summary ====== The package ppp before version 2.4.7-7 is vulnerable to arbitrary code execution. Resolution ========= Upgrade to 2.4.7-7. # pacman -Syu "ppp> =2.4.7-7" The problem has been fixed upstream but no release is available yet. Workaround ========= None. Description ========== A buffer overflow flaw was found in the ppp package in versions 2.4.2 through 2.4.8. The bounds check for the rhostname was improperly constructed in the EAP request and response functions which could allow a buffer overflow to occur. Data confidentiality and integrity, as well as system availability, are all at risk with this vulnerability. Impact ===== A remote unauthenticated user can crash or possibly execute code on the host by sending malicious authentication data. References ========= https://lists.debian.org/debian-lts-announce/2020/02/msg00005.html https://github.com/ppp-project/ppp/commit/8d7970b8f3db727fe798b65f3377fe6787575426 https://seclists.org/fulldisclosure/2020/Mar/6 https://security.archlinux.org/CVE-2020-8597 . Arch Linux Security Advisory ASA-202003-4 highlights a moderate severity vulnerability in libcurl that may lead to potential data exposure.. Arch Linux, ppp package, security advisory, code execution, vulnerability. . Severity: Medium. LinuxSecurity.com Team

Calendar 2 Mar 12, 2020 •Medium ArchLinux
87
Ls Advisories Debian Esm H240
Price Tag 1security advisorycriticaldebian

Debian 3.1 DSA 1106-1 Critical: Local Threat in PPP Package

Marcus Meissner discovered that the winbind plugin in pppd does not check whether a setuid() call has been successful when trying to drop privileges, which may fail with some PAM configurations. . - --------------------------------------------------------------------------Debian Security Advisory DSA 1106-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze July 10th, 2006 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : ppp Vulnerability : programming error Problem type : local Debian-specific: no CVE ID : CVE-2006-2194 Marcus Meissner discovered that the winbind plugin in pppd does not check whether a setuid() call has been successful when trying to drop privileges, which may fail with some PAM configurations. The old stable distribution (woody) is not affected by this problem. For the stable distribution (sarge) this problem has been fixed in version 2.4.3-20050321+2sarge1. For the unstable distribution (sid) this problem has been fixed in version 2.4.4rel-1. We recommend that you upgrade your ppp package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given at the end of this advisory: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: Size/MD5 checksum: 633 1b8f1f8da7cf7b56c2c6e13e2072167d Size/MD5 checksum: 83359 1fd6996f800c3d323b159ca5ab587712 Size/MD5 checksum: 697459 0537b03fb51cbb847290abdbb765cb93 Architecture independent components: Size/MD5 checksum: 32072 77bab82e596987e60908f19c27bceeb6 Alpha architecture: Size/MD5 checksum: 393308 5f90be499af49912e7074c26979037db AMD64 architecture: Size/MD5 checksum: 346172 ae546c9f5f4f0bc2fdebab8858c93731 ARM architecture: Size/MD5 checksum: 326134 aab781148123790027eb4bf114cc8df9 Intel IA-32 architecture: Size/MD5 checksum: 324274 759537119b8680ed4e27ae09a52a65aa Intel IA-64 architecture: Size/MD5 checksum: 437432 8a0acb4779046622af9c27a6307fa305 HP Precision architecture: Size/MD5 checksum: 357572 5c415d1e9a6e31fdb01b2eb7f8f1065f Motorola 680x0 architecture: Size/MD5 checksum: 305432 4e7f194f247899a3d20280eca53e41ba Big endian MIPS architecture: Size/MD5 checksum: 348852 aca3c70a1be8c013a48e6d939ebe036a Little endian MIPS architecture: Size/MD5 checksum: 351084 7cd743087a4155ff0d9e8085cbee7dbf PowerPC architecture: Size/MD5 checksum: 351188 60f69689787965812f891df34371600a IBM S/390 architecture: Size/MD5 checksum: 343302 65648a90f1ab9abb71121ceeb9bb98a5 Sun Sparc architecture: Size/MD5 checksum: 329684 1df0e5a6621da5344bdb91a1fd4eef3e These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian security announcement DSA 1106-1 alerts users to a ppp package vulnerability that enables local privilege escalation and offers safe upgrade instructions. Debian Security, PPP Package, Privilege Escalation. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 10, 2006 •Critical Debian
Banner 4 1028x280 1708121825 1771600306
99
Ls Advisories Slackware Esm H240
Price Tag 1security advisorycritical threatslackware

Slackware: Local /tmp Bug in ppp-off Program Critical Threat

A local /tmp bug in the /usr/sbin/ppp-off program was found.. A local /tmp bug in the /usr/sbin/ppp-off program was found. This bug could allow a local user to corrupt system files. A fix has been made and an updated package is now available in the -current branch. The package described below will work for users of Slackware 7.0, 7.1, and -current. ================================= ppp package updated - (n1/ppp.tgz) ================================= A local /tmp bug in the /usr/sbin/ppp-off program has been found and fixed. The new ppp.tgz package is available from: For verification purposes, we provide the following checksums: 16-bit "sum" checksum: 60573 191 n1/ppp.tgz 128-bit MD5 message digest: c879dd34413a5d9cf367640206492852 n1/ppp.tgz INSTALLATION INSTRUCTIONS FOR THE ppp.tgz PACKAGE: -------------------------------------------------- Disable any running pppd processes: # killall pppd Then issue this command: # upgradepkg ppp.tgz Remember, it's also a good idea to backup configuration files before upgrading packages. - Slackware Linux Security Team The Slackware Linux Project . A local /tmp bug in the /usr/sbin/ppp-off program was found. This bug could allow a local user to co. local, /usr/sbin/ppp-off, program, found, /usr/sbin/ppp-o. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 25, 2000 •Critical Slackware
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here