Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE 16.0 GO1.25 Moderate Input Issues Fix 2026-22155-1

An update that solves three vulnerabilities and has three fixes can now be installed.. # Security update for go1.25 Announcement ID: SUSE-SU-2026:22155-1 Release Date: 2026-06-17T08:37:37Z Rating: moderate References: * bsc#1244485 * bsc#1245878 * bsc#1264394 * bsc#1267442 * bsc#1267444 * bsc#1267450 Cross-References: * CVE-2026-27145 * CVE-2026-42504 * CVE-2026-42507 CVSS scores: * CVE-2026-27145 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-27145 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-27145 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-42504 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-42504 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-42504 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42507 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-42507 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-42507 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities and has three fixes can now be installed. ## Description: This update for go1.25 fixes the following issues Update to go1.25.11 (bsc#1244485): * CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). * CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). * CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444). Changes: * go#79229 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader * go#79425 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input areincluded in errors without any escaping * go#79700 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once * go#79190 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation * go#79698 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-942=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-942=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.25-doc-1.25.11-160000.1.1 * go1.25-1.25.11-160000.1.1 * go1.25-race-1.25.11-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * go1.25-libstd-1.25.11-160000.1.1 * go1.25-debuginfo-1.25.11-160000.1.1 * go1.25-libstd-debuginfo-1.25.11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.25-doc-1.25.11-160000.1.1 * go1.25-1.25.11-160000.1.1 * go1.25-race-1.25.11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * go1.25-libstd-1.25.11-160000.1.1 * go1.25-debuginfo-1.25.11-160000.1.1 * go1.25-libstd-debuginfo-1.25.11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-27145.html * https://www.suse.com/security/cve/CVE-2026-42504.html * https://www.suse.com/security/cve/CVE-2026-42507.html * https://bugzilla.suse.com/show_bug.cgi?id=1244485 * https://bugzilla.suse.com/show_bug.cgi?id=1245878 * https://bugzilla.suse.com/show_bug.cgi?id=1264394 * https://bugzilla.suse.com/show_bug.cgi?id=1267442 * https://bugzilla.suse.com/show_bug.cgi?id=1267444 * https://bugzilla.suse.com/show_bug.cgi?id=1267450 .Update for go1.25 fixes multiple issues with moderate security impact, addressing specific vulnerabilities. Install now.. SUSE Security Update, go1.25 Patch, Linux Security Update. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 23, 2026 •moderate SuSE
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorydenial of servicefedora

Fedora 43: python3.13 Critical Quadratic Complexity DoS ID 2025-6407a7ee7e

This is the eleventh maintenance release of Python 3.13. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-6407a7ee7e 2025-12-16 00:46:10.314061+00:00 -------------------------------------------------------------------------------- Name : python3.13 Product : Fedora 43 Version : 3.13.11 Release : 1.fc43 URL : https://www.python.org/ Summary : Version 3.13 of the Python interpreter Description : Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.13-libs package, which should be installed automatically along with python3.13. The remaining parts of the Python standard library are broken out into the python3.13-tkinter and python3.13-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.13-docs package. Packages containing additional libraries for Python are generally named with the "python3.13-" prefix. -------------------------------------------------------------------------------- Update Information: This is the eleventh maintenance release of Python 3.13 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 5 2025 Miro Hron\u010dok - 3.13.11-1 - Update to 3.13.11 * Wed Dec 3 2025 Tom\u0161 Hrn\u010diar - 3.13.10-1 - Update to 3.13.10 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2413057 - CVE-2025-6075 python3.13: Quadratic complexity in os.path.expandvars() with user-controlled template [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2413057 [ 2 ] Bug#2421628 - CVE-2025-12084 python3.13: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2421628 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6407a7ee7e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . An important update for Python 3.13 in Fedora 43 addressing critical issues and providing key enhancements. . Fedora 43 Python Update, Critical Software Release, Python Security Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Dec 16, 2025 •Critical Fedora
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorydenial of servicefedora

Fedora 43: python3.14 Critical Update Addresses Quadratic Complexity Bug

This is the second maintenance release of Python 3.14. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-e235793f10 2025-12-10 01:33:03.602028+00:00 -------------------------------------------------------------------------------- Name : python3.14 Product : Fedora 43 Version : 3.14.2 Release : 1.fc43 URL : https://www.python.org/ Summary : Version 3.14 of the Python interpreter Description : Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. -------------------------------------------------------------------------------- Update Information: This is the second maintenance release of Python 3.14 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 5 2025 Miro Hron\u010dok - 3.14.2-1 - Update to Python 3.14.2 * Wed Dec 3 2025 Karolina Surma - 3.14.1-1 - Update to Python 3.14.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2393850 - kicad crashes during python runtime initialization https://bugzilla.redhat.com/show_bug.cgi?id=2393850 [ 2 ] Bug #2413058 - CVE-2025-6075 python3.14: Quadratic complexity in os.path.expandvars() with user-controlled template [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2413058 [ 3 ] Bug #2414940 - argparse colorize fails if a tty is not available, like in mod_wsgi https://bugzilla.redhat.com/show_bug.cgi?id=2414940 [ 4 ] Bug #2416523 - Python 3.14 Stack overflow check very very broken https://bugzilla.redhat.com/show_bug.cgi?id=2416523 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-e235793f10' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 43 addresses security issues in Python 3.14 with critical updates and bug fixes.. Python Security, Fedora Update, System Integrity, Code Readability, Programming Language. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Dec 10, 2025 •Important Fedora
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderatedenial of service

SUSE: python3 Moderate Denial of Service Issues Fix 2025:02802-1

* bsc#1244401 * bsc#1244705 * bsc#1247249 Cross-References: . # Security update for python3 Announcement ID: SUSE-SU-2025:02802-1 Release Date: 2025-08-14T15:10:00Z Rating: moderate References: * bsc#1244401 * bsc#1244705 * bsc#1247249 Cross-References: * CVE-2024-11168 * CVE-2025-6069 * CVE-2025-8194 CVSS scores: * CVE-2024-11168 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X * CVE-2024-11168 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-11168 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X * CVE-2024-11168 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-6069 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H * CVE-2025-6069 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2025-6069 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-8194 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-8194 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-8194 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for python3 fixes the following issues: * CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705) * CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249) Other fixes: \- Limitbuffer size for IPv6 address parsing (bsc#1244401). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2802=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python3-3.4.10-25.158.1 * python3-devel-3.4.10-25.158.1 * python3-base-debuginfo-3.4.10-25.158.1 * python3-debugsource-3.4.10-25.158.1 * python3-tk-3.4.10-25.158.1 * python3-devel-debuginfo-3.4.10-25.158.1 * python3-base-debuginfo-32bit-3.4.10-25.158.1 * libpython3_4m1_0-3.4.10-25.158.1 * python3-base-debugsource-3.4.10-25.158.1 * python3-base-3.4.10-25.158.1 * python3-tk-debuginfo-3.4.10-25.158.1 * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.158.1 * python3-curses-debuginfo-3.4.10-25.158.1 * python3-debuginfo-3.4.10-25.158.1 * libpython3_4m1_0-debuginfo-3.4.10-25.158.1 * python3-curses-3.4.10-25.158.1 * libpython3_4m1_0-32bit-3.4.10-25.158.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11168.html * https://www.suse.com/security/cve/CVE-2025-6069.html * https://www.suse.com/security/cve/CVE-2025-8194.html * https://bugzilla.suse.com/show_bug.cgi?id=1244401 * https://bugzilla.suse.com/show_bug.cgi?id=1244705 * https://bugzilla.suse.com/show_bug.cgi?id=1247249 . A resolution for critical vulnerabilities in Python 3 on SUSE Linux Enterprise Server has been implemented, targeting service disruption and data handling inconsistencies.. SUSE python3 security update denial of service vulnerabilities. . LinuxSecurity.com Team

Calendar%202 Aug 14, 2025 SuSE
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics