Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE libyang Important Buffer Overflow Advisory 2026-2381-1

Calendar White Jun 12, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE HPLIP Severe Code Execution Denial of Service 2026-2380-1

Calendar White Jun 12, 2026
Critical
Suse Large Esm H900
SuSE

openSUSE HPLIP Critical Escalation DoS Advisory SUSE-2026-2380-1

Calendar White Jun 12, 2026
Critical
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.2 python-Pygments Low Denial of Service CVE-2026-4539

Calendar White Jun 12, 2026
Low
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 LTS GStreamer Base Plugins Critical DoS CVE-2026-2921

Calendar White Jun 12, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 12 Linux Base Update Brings Important Security Fix DLA-4628-1

Calendar White Jun 12, 2026
Informational
Debianlts Large Esm H800
Debian LTS

Debian 12 Kernel-Wedge Update for Linux 6.12 DLA-4627-1

Calendar White Jun 12, 2026
Informational
Opensuse Large Esm H900
openSUSE

openSUSE NetworkManager-libreswan Important Security Update CVE-2024-9050

Calendar White Jun 12, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Rclone Critical Security Update CVE-2026-25680 CVE-2026-25681

Calendar White Jun 12, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorysecurity issuecritical

Debian 11: DLA-4028-1 critical: git-lfs credentials exposure

CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4028-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Andrej Shadura January 22, 2025 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : git-lfs Version : 2.13.2-1+deb11u1 CVE ID : CVE-2024-53263 Debian Bug : 1093048 CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command without checking for embedded line-ending control characters, and then sends any credentials it receives back from the Git credential helper to the remote host. By inserting URL-encoded control characters such as line feed (LF) or carriage return (CR) characters into the URL, an attacker may be able to retrieve a user's Git credentials. For Debian 11 bullseye, this problem has been fixed in version 2.13.2-1+deb11u1. We recommend that you upgrade your git-lfs packages. For the detailed security status of git-lfs please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/git-lfs Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu CVE Notice UCN-4096-2 tackles significant vulnerabilities in npm package management, ensuring safe installations.. git-lfs security, Debian LTS updates, credential leak, security advisories, critical vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 22, 2025 •Critical Debian LTS
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 40: Security Advisory FEDORA-2024-25f8e34407 for darkhttpd

Update to 1.16 fixes rhbz#2259096. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-25f8e34407 2024-07-27 01:45:37.014460 -------------------------------------------------------------------------------- Name : darkhttpd Product : Fedora 40 Version : 1.16 Release : 1.fc40 URL : https://github.com/emikulic/darkhttpd Summary : Secure, lightweight, fast, single-threaded HTTP/1.1 server Description : darkhttpd is a secure, lightweight, fast and single-threaded HTTP/1.1 server. Features: * Simple to set up: * Single binary, no other files. * Standalone, doesn't need inetd or ucspi-tcp. * No messing around with config files. * Written in C - efficient and portable. * Small memory footprint. * Event loop, single threaded - no fork() or pthreads. * Generates directory listings. * Supports HTTP GET and HEAD requests. * Supports Range / partial content. * Supports If-Modified-Since. * Supports Keep-Alive connections. * Can serve 301 redirects based on Host header. * Uses sendfile(). Security: * Can log accesses, including Referer and User-Agent. * Can chroot. * Can drop privileges. * Impervious to /../ sniffing. * Times out idle connections. * Drops overly long requests. Limitations: * This server only serves static content - *NO* CGI supported! -------------------------------------------------------------------------------- Update Information: Update to 1.16 fixes rhbz#2259096 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 18 2024 Filipe Rosset - 1.16-1 - Update to 1.16 fixes rhbz#2259096 * Wed Jul 17 2024 Fedora Release Engineering - 1.14-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2259096 - darkhttpd-1.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=2259096 [ 2 ] Bug #2259490 - CVE-2024-23770 darkhttpd: allows local users to discover credentials [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2259490 [ 3 ] Bug #2259491 - CVE-2024-23770 darkhttpd: allows local users to discover credentials [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2259491 [ 4 ] Bug #2259493 - CVE-2024-23771 darkhttpd: uses strcmp to verify authentication to bypass authentication via a timing side channel [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2259493 [ 5 ] Bug #2259494 - CVE-2024-23771 darkhttpd: uses strcmp to verify authentication to bypass authentication via a timing side channel [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2259494 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-25f8e34407' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 40 enhances darkhttpd 1.16 to fix local access problems and address authentication loopholevulnerabilities.. Fedora Security Advisory,darkhttpd Update,Authentication Bypass Fix,Local Credentials Discovery. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 27, 2024 •Important Fedora
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here