Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Chromium Important Use After Free Issues Fix 2026-21382-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 opam Important Security Update 2026-21380-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 ID 21374 Vim Important Code Execution Issues

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Python-Aiohttp Important Resource Issues Vuln 2026-21372-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed iscsiuio Moderate CVE-2026-44943 Advisory 2026-11317-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed libsoup Moderate CVE-2026-12478 Advisory 2026-11316-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE libgit2 Moderate Security Update for 5 Issues 2026-11315-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE acl Moderate Update CVE-2026-54369 CVE-2026-54370 CVE-2026-54371

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorydenial of serviceresource exhaustion

Mageia 9: MGASA-2025-0053 critical: python-waitress denial of service

Waitress has a request processing race condition in HTTP pipelining with an invalid first request. (CVE-2024-49768) Waitress has a denial of service leading to high CPU usage/resource exhaustion. (CVE-2024-49769) . MGASA-2025-0053 - Updated python-waitress packages fix security vulnerabilities Publication date: 12 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0053.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-49768, CVE-2024-49769 Waitress has a request processing race condition in HTTP pipelining with an invalid first request. (CVE-2024-49768) Waitress has a denial of service leading to high CPU usage/resource exhaustion. (CVE-2024-49769) References: - https://bugs.mageia.org/show_bug.cgi?id=33819 - https://lists.suse.com/pipermail/sle-security-updates/2024-November/019754.html - https://www.cve.org/CVERecord?id=CVE-2024-49768 - https://www.cve.org/CVERecord?id=CVE-2024-49769 SRPMS: - 9/core/python-waitress-2.1.2-1.1.mga9 . Improvements to python-waitress libraries combat security vulnerabilities in Mageia. Major corrections implemented on February 12, 2025.. Mageia Security Advisory, python-waitress, Denial of Service, CPU Utilization, Vulnerability Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 12, 2025 •Critical Mageia
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 40: FEDORA-2024-5abfdba2b7 critical: DoS in mingw-python-waitress

Backport fixes for CVE-2024-49768 and CVE-2024-49769.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-5abfdba2b7 2024-11-28 02:44:05.515273+00:00 -------------------------------------------------------------------------------- Name : mingw-python-waitress Product : Fedora 40 Version : 2.1.2 Release : 7.fc40 URL : https://github.com/Pylons/waitress Summary : MinGW Windows Python waitress library Description : MinGW Windows Python waitress library. -------------------------------------------------------------------------------- Update Information: Backport fixes for CVE-2024-49768 and CVE-2024-49769. -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 19 2024 Sandro Mani - 2.1.2-7 - Backport fixes for CVE-2024-49768 and CVE-2024-49769 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2322474 - CVE-2024-49769 mingw-python-waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2322474 [ 2 ] Bug #2322492 - CVE-2024-49768 mingw-python-waitress: request processing race condition in HTTP pipelining with invalid first request [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2322492 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-5abfdba2b7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 40 addresses an important update for mingw-python-waitress to resolve significant CPU resource depletion problems stemming from backported changes.. mingw-python-waitress update, Fedora 40 advisory, security update, CPU resource exhaustion. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 28, 2024 •Critical Fedora
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorydenial of serviceupdate

Fedora 41: Advisory FEDORA-2024-157678aad0 critical: python-waitress DoS

Update to version 3.0.1, which resolves CVE-2024-49768 and CVE-2024-49769.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-157678aad0 2024-11-16 02:13:46.131068 -------------------------------------------------------------------------------- Name : python-waitress Product : Fedora 41 Version : 3.0.1 Release : 1.fc41 URL : https://github.com/Pylons/waitress Summary : Waitress WSGI server Description : Waitress is a production-quality pure-Python WSGI server with very acceptable performance. It has no dependencies except ones which live in the Python standard library. -------------------------------------------------------------------------------- Update Information: Update to version 3.0.1, which resolves CVE-2024-49768 and CVE-2024-49769. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 7 2024 Carl George - 3.0.1-1 - Update to version 3.0.1 rhbz#2322297 - Resolves: CVE-2024-49768 - Resolves: CVE-2024-49769 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2322297 - python-waitress-3.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2322297 [ 2 ] Bug #2324285 - CVE-2024-49768 python-waitress: request processing race condition in HTTP pipelining with invalid first request [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2324285 [ 3 ] Bug #2324286 - CVE-2024-49769 python-waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2324286 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-157678aad0' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 41 announces an upgrade for python-waitress 3.0.1, addressing severe race conditions and optimizing performance, thereby boosting security.. Fedora Updates, Python Waitress, Security Issues, Production Quality Server. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 16, 2024 •Critical Fedora
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianapplication security

Debian DSA-3843-1 Critical: Tomcat8 Flaws Affecting Web Apps

Two vulnerabilities were discovered in tomcat8, a servlet and JSP engine. CVE-2017-5647 . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3843-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Sebastien Delafond May 03, 2017 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : tomcat8 CVE ID : CVE-2017-5647 CVE-2017-5648 Debian Bug : 860068 860069 Two vulnerabilities were discovered in tomcat8, a servlet and JSP engine. CVE-2017-5647 Pipelined requests were processed incorrectly, which could result in some responses appearing to be sent for the wrong request. CVE-2017-5648 Some application listeners calls were issued against the wrong objects, allowing untrusted applications running under a SecurityManager to bypass that protection mechanism and access or modify information associated with other web applications. For the stable distribution (jessie), these problems have been fixed in version 8.0.14-1+deb8u9. For the upcoming stable (stretch) and unstable (sid) distributions, these problems have been fixed in version 8.5.11-2. We recommend that you upgrade your tomcat8 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian has released an update for tomcat8, addressing two significant vulnerabilities that impact servlet outputs and the security of applications.. Tomcat Security, Debian Updates, Servlet Flaws, Application Security. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 03, 2017 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
99
Ls Advisories Slackware Esm H240
Price Tag%201security advisorybuffer overflowcritical

Slackware 14.1 SSA-2015-111-03 Critical: Httpd Buffer Overflow Fix

New httpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] httpd (SSA:2015-111-03) New httpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/httpd-2.4.12-i486-1_slack14.1.txz: Upgraded. This update fixes the following security issues: * CVE-2014-3583 mod_proxy_fcgi: Fix a potential crash due to buffer over-read, with response headers' size above 8K. * CVE-2014-3581 mod_cache: Avoid a crash when Content-Type has an empty value. PR 56924. * CVE-2014-8109 mod_lua: Fix handling of the Require line when a LuaAuthzProvider is used in multiple Require directives with different arguments. PR57204. * CVE-2013-5704 core: HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that examined or modified request headers earlier. Adds "MergeTrailers" directive to restore legacy behavior. For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-3583 https://www.cve.org/CVERecord?id=CVE-2014-3581 https://www.cve.org/CVERecord?id=CVE-2014-8109 https://www.cve.org/CVERecord?id=CVE-2013-5704 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 13.0: Updated package for Slackware x86_64 13.0: Updated package for Slackware 13.1: Updated package for Slackware x86_64 13.1: Updated package for Slackware 13.37: Updated package for Slackwarex86_64 13.37: Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 13.0 package: 511973e7033d924fe8f2dfac870cfc9d httpd-2.2.29-i486-1_slack13.0.txz Slackware x86_64 13.0 package: 5fb45ffc524b4afc2b6e3c322bd43ff2 httpd-2.2.29-x86_64-1_slack13.0.txz Slackware 13.1 package: 47ef44a58d821fe2462817bd308e4c88 httpd-2.2.29-i486-1_slack13.1.txz Slackware x86_64 13.1 package: 4e99389080c31b12a863d315f17e0897 httpd-2.2.29-x86_64-1_slack13.1.txz Slackware 13.37 package: 9ecaeefcc21871e101c4e41487879ba7 httpd-2.2.29-i486-1_slack13.37.txz Slackware x86_64 13.37 package: 4c4badc191f0c2337d0f05fe4f5f6701 httpd-2.2.29-x86_64-1_slack13.37.txz Slackware 14.0 package: 44ee311cec11c0b8b5361871f076060a httpd-2.4.12-i486-1_slack14.0.txz Slackware x86_64 14.0 package: d222d77977fea4f3d2583398070e70fe httpd-2.4.12-x86_64-1_slack14.0.txz Slackware 14.1 package: d65e3a24abd582fb54b6da0ba926106e httpd-2.4.12-i486-1_slack14.1.txz Slackware x86_64 14.1 package: e655bdd8f6f7e13da6ae2c70f9c9eea0 httpd-2.4.12-x86_64-1_slack14.1.txz Slackware -current package: bfd8439df17a91bf8b3351a9fdafbfc9 n/httpd-2.4.12-i486-1.txz Slackware x86_64 -current package: 3c68dceffdf6de2c67ac2b40fc3846dc n/httpd-2.4.12-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg httpd-2.4.12-i486-1_slack14.1.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+ . Updated httpd packages for Slackware address vulnerabilities. Upgrade immediately to safeguard your web services from possible risks.. httpd packages, slackware security, apache update, critical fixes, security updates. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 22, 2015 •Critical Slackware
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics