Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Chromium Important Use After Free Issues Fix 2026-21382-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 opam Important Security Update 2026-21380-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 ID 21374 Vim Important Code Execution Issues

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Python-Aiohttp Important Resource Issues Vuln 2026-21372-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed iscsiuio Moderate CVE-2026-44943 Advisory 2026-11317-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed libsoup Moderate CVE-2026-12478 Advisory 2026-11316-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE libgit2 Moderate Security Update for 5 Issues 2026-11315-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE acl Moderate Update CVE-2026-54369 CVE-2026-54370 CVE-2026-54371

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Advisory 2025:20538-1 for Moderate RSA Timing Attack CVE-2024-2236

* bsc#1221107 Cross-References: * CVE-2024-2236 . # Security update for libgcrypt Announcement ID: SUSE-SU-2025:20538-1 Release Date: 2025-07-31T12:00:30Z Rating: moderate References: * bsc#1221107 Cross-References: * CVE-2024-2236 CVSS scores: * CVE-2024-2236 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-2236 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for libgcrypt fixes the following issues: * CVE-2024-2236: Fixed timing based side-channel in RSA implementation (bsc#1221107) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-196=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libgcrypt20-1.10.3-slfo.1.1_2.1 * libgcrypt20-debuginfo-1.10.3-slfo.1.1_2.1 * libgcrypt-debugsource-1.10.3-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2236.html * https://bugzilla.suse.com/show_bug.cgi?id=1221107 . A SUSE security patch has been released to mitigate a timing vulnerability found in libgcrypt, classified as moderate severity and recognized as CVE-2024-2236.. libgcrypt security,SUSE Micro 6.1 update,timing attack RSA fix. . LinuxSecurity.com Team

Calendar%202 Aug 05, 2025 SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatetiming attack

openSUSE 15.6: libgcrypt Moderate Fix for Timing Attack CVE-2024-2236

An update that solves one vulnerability can now be installed.. # Security update for libgcrypt Announcement ID: SUSE-SU-2025:02447-1 Release Date: 2025-07-21T14:45:30Z Rating: moderate References: * bsc#1221107 Cross-References: * CVE-2024-2236 CVSS scores: * CVE-2024-2236 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-2236 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for libgcrypt fixes the following issues: * CVE-2024-2236: Fixed timing based side-channel in RSA implementation. (bsc#1221107) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-2447=1 openSUSE-SLE-15.6-2025-2447=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2447=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libgcrypt20-debuginfo-1.10.3-150600.3.9.1 * libgcrypt-devel-1.10.3-150600.3.9.1 * libgcrypt-debugsource-1.10.3-150600.3.9.1 * libgcrypt20-1.10.3-150600.3.9.1 * libgcrypt-devel-debuginfo-1.10.3-150600.3.9.1 * openSUSE Leap 15.6 (x86_64) * libgcrypt-devel-32bit-1.10.3-150600.3.9.1 * libgcrypt20-32bit-1.10.3-150600.3.9.1 * libgcrypt-devel-32bit-debuginfo-1.10.3-150600.3.9.1 * libgcrypt20-32bit-debuginfo-1.10.3-150600.3.9.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libgcrypt20-64bit-debuginfo-1.10.3-150600.3.9.1 * libgcrypt20-64bit-1.10.3-150600.3.9.1 *libgcrypt-devel-64bit-debuginfo-1.10.3-150600.3.9.1 * libgcrypt-devel-64bit-1.10.3-150600.3.9.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgcrypt20-debuginfo-1.10.3-150600.3.9.1 * libgcrypt-devel-1.10.3-150600.3.9.1 * libgcrypt-debugsource-1.10.3-150600.3.9.1 * libgcrypt20-1.10.3-150600.3.9.1 * libgcrypt-devel-debuginfo-1.10.3-150600.3.9.1 * Basesystem Module 15-SP6 (x86_64) * libgcrypt20-32bit-debuginfo-1.10.3-150600.3.9.1 * libgcrypt20-32bit-1.10.3-150600.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2236.html * https://bugzilla.suse.com/show_bug.cgi?id=1221107 . The recent libgcrypt update on openSUSE mitigates a moderate timing attack vulnerability. Security patching is advised.. libgcrypt patch, openSUSE security, moderate vulnerabilities, timing attack fix. . LinuxSecurity.com Team

Calendar%202 Jul 21, 2025 OpenSUSE
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics