Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 18 articles for you...
197
security advisorydebianimportantDebian 11 LTS DLA-4472-1 Sudo Important Log Issue CVE-2023-28486
Sudo, a program designed to allow a sysadmin to give limited root privileges to users and log root activity, was affected by multiple vulnerabilities. CVE-2023-28486 Sudo did not escape control characters in log messages.. Debian LTS Advisory DLA-4472-1
Feb 06, 2026
•Important
Debian LTS
202
security advisorymoderatesecurity fixopenSUSE Leap 15.3: nginx Moderate Security Fix 2025:02542-1
An update that has one security fix can now be installed.. # Security update for nginx Announcement ID: SUSE-SU-2025:02542-1 Release Date: 2025-07-29T08:58:38Z Rating: moderate References: * bsc#1246090 Affected Products: * openSUSE Leap 15.3 An update that has one security fix can now be installed. ## Description: This update for nginx fixes the following issues: Security hardening: \- Drop root priviledges while running logrotatei. (bsc#1246090) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-2542=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * nginx-1.19.8-150300.3.15.1 * nginx-debugsource-1.19.8-150300.3.15.1 * nginx-debuginfo-1.19.8-150300.3.15.1 * openSUSE Leap 15.3 (noarch) * nginx-source-1.19.8-150300.3.15.1 * vim-plugin-nginx-1.19.8-150300.3.15.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1246090 . Enhancement notice for nginx concerning security fortification via reduction of root privileges on openSUSE Leap 15.3. Suggested update is now accessible.. openSUSE, nginx, security update, privilege drop, patch. . LinuxSecurity.com Team
Jul 29, 2025
OpenSUSE
172
security advisorysecurity issuecriticalUbuntu 16.04 ESM USN-5578-2 Critical: Open VM Tools Root Access Risk
open-vm-tools could be made to run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-5578-2 August 24, 2022 open-vm-tools vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM Summary: open-vm-tools could be made to run programs as an administrator. Software Description: - open-vm-tools: Open VMware Tools for virtual machines hosted on VMware Details: USN-5578-1 fixed a vulnerability in Open VM Tools. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Open VM Tools incorrectly handled certain requests. An attacker inside the guest could possibly use this issue to gain root privileges inside the virtual machine. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: open-vm-tools 2:10.2.0-3~ubuntu0.16.04.1+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5578-2 https://ubuntu.com/security/notices/USN-5578-1 CVE-2022-31676 . The Open VM Tools flaw identified in Ubuntu 16.04 ESM may permit unauthorized administrative privileges to attackers. It is recommended to apply updates promptly.. Open VM Tools, Ubuntu 16.04 ESM, administrative access, security update. . Severity: Critical. LinuxSecurity.com Team
Aug 24, 2022
•Critical
Ubuntu
202
security advisorysecurity updatebuffer overflowopenSUSE Leap 15.1: 2021:0169-1 Important: Sudo Buffer Overflow Issue
An update that solves three vulnerabilities and has one errata is now available. . openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0169-1 Rating: important References: #1180684 #1180685 #1180687 #1181090 Cross-References: CVE-2021-23239 CVE-2021-23240 CVE-2021-3156 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit` [bsc#1180684,CVE-2021-23239] - A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240] - It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-169=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): sudo-1.8.22-lp151.5.12.1 sudo-debuginfo-1.8.22-lp151.5.12.1 sudo-debugsource-1.8.22-lp151.5.12.1 sudo-devel-1.8.22-lp151.5.12.1 sudo-test-1.8.22-lp151.5.12.1 References: https://www.suse.com/security/cve/CVE-2021-23239.html https://www.suse.com/security/cve/CVE-2021-23240.html https://www.suse.com/security/cve/CVE-2021-3156.html https://bugzilla.suse.com/1180684 https://bugzilla.suse.com/1180685 https://bugzilla.suse.com/1180687 https://bugzilla.suse.com/1181090 . A vital security patch for sudo in openSUSE resolves significant buffer overflow and race condition vulnerabilities.. openSUSE,Sudo,Security Update,Root Access,Security Fix. . Severity: Important. LinuxSecurity.com Team
Jan 27, 2021
•Important
OpenSUSE
91
security advisoryhigh severitygentooGentoo: GLSA-202101-22 High: libvirt Local Escalation Threat
A vulnerability in libvirt may allow root privilege escalation.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202101-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: libvirt: Unintended access to /dev/mapper/control Date: January 26, 2021 Bugs: #739948 ID: 202101-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability in libvirt may allow root privilege escalation. Background ========= libvirt is a C toolkit for manipulating virtual machines. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-emulation/libvirt < 6.7.0 > = 6.7.0 Description ========== A file descriptor for /dev/mapper/control was insufficiently protected. Impact ===== A local attacker may be able to escalate to root privileges. Workaround ========= There is no known workaround at this time. Resolution ========= All libvirt users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-emulation/libvirt-6.7.0" References ========= [ 1 ] CVE-2020-14339 https://nvd.nist.gov/vuln/detail/CVE-2020-14339 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202101-22 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jan 25, 2021
Gentoo
172
security advisoryremote accesssoftware issueUbuntu 16.04 LTS: USN-3081-2 Critical: Tomcat Remote Access Flaw
The system could be made to run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-3081-2 October 27, 2020 tomcat6 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: The system could be made to run programs as an administrator. Software Description: - tomcat6: Servlet and JSP engine Details: Dawid Golunski discovered that the Tomcat init script incorrectly handled creating log files. A remote attacker could possibly use this issue to obtain root privileges. (CVE-2016-1240) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: libservlet2.5-java 6.0.45+dfsg-1ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3081-2 https://ubuntu.com/security/notices/USN-3081-1 CVE-2016-1240 Package Information: https://launchpad.net/ubuntu/+source/tomcat6/6.0.45+dfsg-1ubuntu0.2 . The Ubuntu Security Notice USN-3082-1 highlights a vulnerability in nginx that could permit unauthorized file access.. ubuntu security notice, tomcat6 advisory, remote access vulnerability, root privilege escalation. . Severity: Critical. LinuxSecurity.com Team
Oct 27, 2020
•Critical
Ubuntu
87
security advisoryroot privilegescommand injectionDebian DSA-4521-1: Critical Docker.io Security Advisory on Vulnerabilities
Three security vulnerabilities have been discovered in the Docker container runtime: Insecure loading of NSS libraries in "docker cp" could result in execution of code with root privileges, sensitive data could be logged in debug mode and there was a command injection . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4521-1
Sep 09, 2019
•Critical
Debian
87
security advisorybuffer overflowdebianDebian: DSA-4517-1 Critical: Exim4 Buffer Overflow Risk
"Zerons" and Qualys discovered that a buffer overflow triggerable in the TLS negotiation code of the Exim mail transport agent could result in the execution of arbitrary code with root privileges. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4517-1
Sep 06, 2019
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!