Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -3 articles for you...
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorymoderateinteger overflow

Oracle Linux 9 Corosync Moderate Security Advisory ELSA-2026-13673

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-13673 http://linux.oracle.com/errata/ELSA-2026-13673.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: corosync-vqsim-3.1.9-2.el9_7.1.x86_64.rpm corosynclib-3.1.9-2.el9_7.1.i686.rpm corosynclib-3.1.9-2.el9_7.1.x86_64.rpm aarch64: corosync-vqsim-3.1.9-2.el9_7.1.aarch64.rpm corosynclib-3.1.9-2.el9_7.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/corosync-3.1.9-2.el9_7.1.src.rpm Related CVEs: CVE-2026-35091 CVE-2026-35092 Description of changes: [3.1.9-2.1] - Resolves: RHEL-163815 - Resolves: RHEL-163836 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated Corosync rpms for Oracle Linux 9 address moderate security issues and include fixes for known vulnerabilities.. Oracle Linux, Corosync, Security Advisory, RPM Updates, Integer Overflow. . LinuxSecurity.com Team

Calendar%202 May 08, 2026 Oracle
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysoftware updateFedora

Fedora 40: 2024-ff6a72d8e9 Moderate: Biosig4c++ Security Update

2.6.0 - Security Update BrainVisionMarker fixes CVE-2024-23305 BrainVision: proved parser and sanity checks fixes CVE-2024-22097, CVE-2024-23809. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-ff6a72d8e9 2024-04-02 14:16:20.580149 -------------------------------------------------------------------------------- Name : biosig4c++ Product : Fedora 40 Version : 2.6.0 Release : 3.fc40 URL : https://sourceforge.net/projects/biosig/ Summary : A software library for processing of biomedical signals Description : BioSig is a software library for processing of biomedical signals (EEG, ECG, etc.) with Matlab, Octave, C/C++ and Python. A standalone signal viewer supporting more than 30 different data formats is also provided. -------------------------------------------------------------------------------- Update Information: 2.6.0 - Security Update BrainVisionMarker fixes CVE-2024-23305 BrainVision: proved parser and sanity checks fixes CVE-2024-22097, CVE-2024-23809 EGI fixes CVE-2024-21795 FAMOS: disabled, support can be enabled by setting BIOSIG_FAMOS_TRUST_INPUT=1 mitigate vulnerabilities CVE-2024-21812, CVE-2024-23313, CVE-2024-23310, CVE-2024-23606 -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 22 2024 Sandro - 2.6.0-3 - Drop i686 support (leaf package) * Fri Mar 22 2024 Sandro - 2.6.0-2 - Migrate to SPDX license * Fri Mar 22 2024 Sandro - 2.6.0-1 - Update to 2.6.0 (RHBZ#2264832) - Use macros consistently -------------------------------------------------------------------------------- References: [ 1 ] Bug #2264832 - biosig4c++-2.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2264832 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2024-ff6a72d8e9' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora Software Advisory for biosig4c++ version 2.6.0, emphasizing crucial security patches addressing vulnerabilities in BrainVisionMarker and associated components.. biosig4c++, Fedora 40, BioSig library, security update, sensor data processing. . LinuxSecurity.com Team

Calendar%202 Apr 02, 2024 Fedora
Banner 2 1028x280 1708121730 1 1771599631
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorybuffer overflowimportant

openSUSE Leap 15.1: 2019:2345-1 Important: libpcap Security Issues

An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for libpcap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2345-1 Rating: important References: #1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2345=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpcap-debugsource-1.8.1-lp151.4.3.1 libpcap-devel-1.8.1-lp151.4.3.1 libpcap-devel-static-1.8.1-lp151.4.3.1 libpcap1-1.8.1-lp151.4.3.1 libpcap1-debuginfo-1.8.1-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libpcap-devel-32bit-1.8.1-lp151.4.3.1 libpcap1-32bit-1.8.1-lp151.4.3.1 libpcap1-32bit-debuginfo-1.8.1-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2019-15165.html https://bugzilla.suse.com/1153332 -- . Several security flaws addressed in libpcap through the openSUSE Security Update to enhance reliability and safeguard against potential threats.. openSUSE Security Update, libpcap Fixes, Patch Installation, Vulnerability Resolution, Buffer Overflow. . Severity: Important.LinuxSecurity.com Team

Calendar%202 Oct 20, 2019 •Important OpenSUSE
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 29: FEDORA-2018-7d138cfd7b Moderate: Zchunk Sanity Check

This update does sanity checking when an application passes in a checksum to verify. Before this release, applications could pass in non-hex values for the checksum, which could cause zchunk to crash. Now non-hex values will be rejected.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-7d138cfd7b 2018-11-07 02:39:18.191860 --------------------------------------------------------------------------------Name : zchunk Product : Fedora 29 Version : 0.9.14 Release : 1.fc29 URL : https://github.com/zchunk/zchunk Summary : Compressed file format that allows easy deltas Description : zchunk is a compressed file format that splits the file into independent chunks. This allows you to only download the differences when downloading a new version of the file, and also makes zchunk files efficient over rsync. zchunk files are protected with strong checksums to verify that the file you downloaded is in fact the file you wanted. --------------------------------------------------------------------------------Update Information: This update does sanity checking when an application passes in a checksum to verify. Before this release, applications could pass in non-hex values for the checksum, which could cause zchunk to crash. Now non-hex values will be rejected. --------------------------------------------------------------------------------ChangeLog: * Thu Nov 1 2018 Jonathan Dieter - 0.9.14-1 - Sanity check hex hashes passed in as an option * Mon Oct 8 2018 Jonathan Dieter - 0.9.13-1 - Add read support for zchunk files with optional flags - Fix tests for zstd-1.3.6 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-7d138cfd7b' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Enhanced zchunk integrity verification in Fedora 29 to avert failures caused by non-hexadecimal characters during security patching.. Fedora 29,zchunk update,checksum security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 07, 2018 •Important Fedora
Banner 2 1028x280 1708121730 1 1771599631
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryDoSUbuntu

Ubuntu 15.10: USN-2851-1 moderate: Kernel DoS and Security Flaws

Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-2851-1 December 19, 2015 linux vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.10 Summary: Several security issues were fixed in the kernel. Software Description: - linux: Linux kernel Details: Felix Wilhelm discovered a race condition in the Xen paravirtualized drivers which can cause double fetch vulnerabilities. An attacker in the paravirtualized guest could exploit this flaw to cause a denial of service (crash the host) or potentially execute arbitrary code on the host. (CVE-2015-8550) Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform sanity checks on the device's state. An attacker could exploit this flaw to cause a denial of service (NULL dereference) on the host. (CVE-2015-8551) Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform sanity checks on the device's state. An attacker could exploit this flaw to cause a denial of service by flooding the logging system with WARN() messages causing the initial domain to exhaust disk space. (CVE-2015-8552) Jann Horn discovered a ptrace issue with user namespaces in the Linux kernel. The namespace owner could potentially exploit this flaw by ptracing a root owned process entering the user namespace to elevate its privileges and potentially gain access outside of the namespace. (https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1527374) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: linux-image-4.2.0-22-generic 4.2.0-22.27 linux-image-4.2.0-22-generic-lpae 4.2.0-22.27 linux-image-4.2.0-22-lowlatency 4.2.0-22.27 linux-image-4.2.0-22-powerpc-e500mc 4.2.0-22.27 linux-image-4.2.0-22-powerpc-smp 4.2.0-22.27 linux-image-4.2.0-22-powerpc64-emb 4.2.0-22.27 linux-image-4.2.0-22-powerpc64-smp 4.2.0-22.27 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-2851-1 CVE-2015-8550, CVE-2015-8551, CVE-2015-8552, https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1527374 Package Information: https://launchpad.net/ubuntu/+source/linux/4.2.0-22.27 . The Ubuntu Security Announcement USN-2852-1 addresses critical vulnerabilities within the operating system kernel, bolstering defense mechanisms and mitigating potential threats.. Ubuntu Kernel Issues,Linux Security Updates,Denial Of Service Exploit. . LinuxSecurity.com Team

Calendar%202 Dec 20, 2015 Ubuntu
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian DSA 1170-1 Critical: Fastjar Directory Traversal Warning

J. - --------------------------------------------------------------------------Debian Security Advisory DSA 1170-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze September 6th, 2006 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : gcc-3.4 Vulnerability : missing sanity check Problem type : local (remote) Debian-specific: no CVE ID : CVE-2006-3619 BugTraq ID : 15669 Debian Bug : 368397 J. Promptly review and apply necessary security updates for the fastjar package as outlined in Debian Security Advisory DSA 1170-1 to mitigate risks. Debian Security Advisory, Fastjar Directory Traversal, DSA 1170-1. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 06, 2006 •Critical Debian
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics