Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Kernel Important Security Fix for net/can 2026-f1fc7772c3

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Nuclei Important Cross-site Scripting DoS Threat 2026-d36ca2dd19

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 perl-Crypt-OpenSSL-X509 Important Fix CVE-2026-58101

Calendar White Jul 21, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 rust-syslog Critical Path Traversal DoS Vuln 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Rust RPKI Critical Path Traversal Issues Fix 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Routinator Important Security Fixes CVE-2026-49232 to 49235

Calendar White Jul 21, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 rust-fern Important Path Traversal Fix Advisory 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Kernel Important Net CAN Issue Fix Advisory 2026-2dd8b600bb

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 btrbk Critical Update Snapshot Tool Fix CVE-2026-62943

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorysecurity issuered hat

Red Hat: RHSA-2022-4745-01 Important: Varnish HTTP Smuggling Issue

An update for rh-varnish6-varnish is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: rh-varnish6-varnish security update Advisory ID: RHSA-2022:4745-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2022:4745 Issue date: 2022-05-25 CVE Names: CVE-2022-23959 ==================================================================== 1. Summary: An update for rh-varnish6-varnish is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: HTTP/1 request smuggling vulnerability (CVE-2022-23959) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2045031 - CVE-2022-23959 varnish: HTTP/1 request smuggling vulnerability 6. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7): Source: rh-varnish6-varnish-6.0.8-2.el7.1.src.rpm ppc64le: rh-varnish6-varnish-6.0.8-2.el7.1.ppc64le.rpm rh-varnish6-varnish-devel-6.0.8-2.el7.1.ppc64le.rpm rh-varnish6-varnish-docs-6.0.8-2.el7.1.ppc64le.rpm rh-varnish6-varnish-libs-6.0.8-2.el7.1.ppc64le.rpm s390x: rh-varnish6-varnish-6.0.8-2.el7.1.s390x.rpm rh-varnish6-varnish-devel-6.0.8-2.el7.1.s390x.rpm rh-varnish6-varnish-docs-6.0.8-2.el7.1.s390x.rpm rh-varnish6-varnish-libs-6.0.8-2.el7.1.s390x.rpm x86_64: rh-varnish6-varnish-6.0.8-2.el7.1.x86_64.rpm rh-varnish6-varnish-devel-6.0.8-2.el7.1.x86_64.rpm rh-varnish6-varnish-docs-6.0.8-2.el7.1.x86_64.rpm rh-varnish6-varnish-libs-6.0.8-2.el7.1.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7): Source: rh-varnish6-varnish-6.0.8-2.el7.1.src.rpm x86_64: rh-varnish6-varnish-6.0.8-2.el7.1.x86_64.rpm rh-varnish6-varnish-devel-6.0.8-2.el7.1.x86_64.rpm rh-varnish6-varnish-docs-6.0.8-2.el7.1.x86_64.rpm rh-varnish6-varnish-libs-6.0.8-2.el7.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-23959 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYo7QeNzjgjWX9erEAQhlvg/9FUwNZOAsATUaQu49llx7kMLDRoSU/lrG VaH99njJraKTe70ZVVjery3kSr9vlGF2bqLwKbRJDbdOa/eK7+Y6Hi9eGAusnCoT FHtpm0XPY1wHwBuezQokyAhrx13YHFfYad2KLMQt7pOKvHHiQrA7OvT1ervREGtX tZqBTdF8Ol/X3bYzUON6qq4lJzmbUCDAI2YiT96pL5aAt9jzSYuygKivQhMt7/KM JXbIlPgnBxZS6+jlTi/D/bD5FtKyhLam4KdGX7jOHayRF+KyTV5ZboK33q+mn8LM ewshLhYc+eciK+1Rnf8wPhvIoCsu/svy9koFwaScSR9pugZ3vH4lJoCmavXX81z1 vIlbUzvnw8qrxHELgTZQkK8dkpDrD0GF3++9t8Dr9HXxW1kADgCFzUq0T1/lr1eQ fCArc1xJZ4514moq1fB+dqzHUX9fnSJ+0hXfaDwQqMirIKnRWILf2/0BGQYz3oRw 53DwjdJoIvkJyxF0VVdLesTW9Tg47YWiSqWW8TTdkgEe5oEHg/eycBZ/Y1m8v7KV 2aosVPKw1qIva1kJ9djIxXfJb8VXmIdcunodJY34ehUJ/bvIobfC/BFtK0Ffxwum PyW+2FQYlXGksIfS4CczrkgieC6ztzfp9ZaIoII2wzRGkveJnb8uB9VlXTmHMAUH 5TJj/3p0uxQ=stSi -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Red Hat has released a crucial update for rh-varnish6 to fix a critical HTTP smuggling vulnerability, urging users to apply the patch promptly for security. HTTP Smuggling, Red Hat Security Update, Varnish Cache, Important Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 25, 2022 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorysecurity issuebug fix

Red Hat: RHSA-2020-2265-01 Moderate: rh-haproxy18-haproxy Security Issue

An update for rh-haproxy18-haproxy is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-haproxy18-haproxy security, bug fix, and enhancement update Advisory ID: RHSA-2020:2265-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2020:2265 Issue date: 2020-05-26 CVE Names: CVE-2019-18277 CVE-2019-19330 ==================================================================== 1. Summary: An update for rh-haproxy18-haproxy is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. The following packages have been upgraded to a later upstream version: rh-haproxy18-haproxy (1.8.24). (BZ#1774747) Security Fix(es): * haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value (CVE-2019-18277) * haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330) For more detailsabout the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Software Collections 3.5 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1759697 - CVE-2019-18277 haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value 1774747 - Rebase rhscl/haproxy to latest upstream for RHSCL 3.5 1777584 - CVE-2019-19330 haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks 6. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7): Source: rh-haproxy18-haproxy-1.8.24-2.el7.src.rpm x86_64: rh-haproxy18-haproxy-1.8.24-2.el7.x86_64.rpm rh-haproxy18-haproxy-debuginfo-1.8.24-2.el7.x86_64.rpm rh-haproxy18-haproxy-syspaths-1.8.24-2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6): Source: rh-haproxy18-haproxy-1.8.24-2.el7.src.rpm x86_64: rh-haproxy18-haproxy-1.8.24-2.el7.x86_64.rpm rh-haproxy18-haproxy-debuginfo-1.8.24-2.el7.x86_64.rpm rh-haproxy18-haproxy-syspaths-1.8.24-2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7): Source: rh-haproxy18-haproxy-1.8.24-2.el7.src.rpm x86_64: rh-haproxy18-haproxy-1.8.24-2.el7.x86_64.rpm rh-haproxy18-haproxy-debuginfo-1.8.24-2.el7.x86_64.rpm rh-haproxy18-haproxy-syspaths-1.8.24-2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7): Source: rh-haproxy18-haproxy-1.8.24-2.el7.src.rpm x86_64: rh-haproxy18-haproxy-1.8.24-2.el7.x86_64.rpm rh-haproxy18-haproxy-debuginfo-1.8.24-2.el7.x86_64.rpm rh-haproxy18-haproxy-syspaths-1.8.24-2.el7.x86_64.rpm Thesepackages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-18277 https://access.redhat.com/security/cve/CVE-2019-19330 https://access.redhat.com/security/updates/classification/#moderate https://docs.redhat.com/en/documentation/red_hat_software_collections/3/html/3.5_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXszG49zjgjWX9erEAQigaxAAj6HXBsWFK9Yk6JfuJMPUUdxVq0e4spZS GscUoW8SRvEwBjoSb+ZFEJJ4kdkTUA9+0W5Oh0FYKhue0OUYDYP5XQiuxVBdLoKE mpcxudma3FVAnoDwVW1ooxB80zgND6q3prWrJMDI/djBDsblkfZCRrkWybc15i6n B74pnOSkvbwUcgZmeBRhmpMsT7NRYyQM/9JvKE4DxymEZ7REDJ+PVpEeMETmIbl+ jooJ6iEJitxtyVi7QKgIrrlNJf91aqpb9yvISkSX3E6x/zknJ/+FTPiYxoqbCrN2 PrYCUhCqI1OUHjLqPVB9crbW50qb7lXn2r/jjY34nPY+sQNjZzw3haHwoNFC6YRI f6ztjX3pcHnzLVPhtHb3Ma7TFXHiVOrGROeGfTGjWtby0+30ass1AF+v8sulUHOD hMuh15TIvuii0oDwe+YYs0bzmnZfTGRftO6f/NvoakXtnmwEFUn5WgP438BDqE/f GJUoMS0Kqu6ddztQlh4yuyzWJS/l80eo5LLlDxSpInKEQGll1h5cBktahp4ZOBCC I4RYaqwNuBOf+j5mKxbRD92DgCCqRseikwwn8hEjqGZf+tJQiraUScjXz8P3FvEg jhwgThbEXozyAq+1ryaund5sZ4DLo+rjfDX8mATkkPWQ69J5WuHPuJvDyc2b3zin cbAzdDyvKM0=S7eI -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Explore Red Hat's Security Advisory RHSA-2021:1234-01 regarding rh-haproxy18-haproxy, which tackles various identified vulnerabilities.. Red Hat Advisory, rh-haproxy, security update, vulnerability report, bug fixes. . LinuxSecurity.com Team

Calendar%202 May 26, 2020 Red Hat
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics