Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H900
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H800
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraimportant

Fedora 44 postgresql-jdbc Important Ongres Scram Auth Fix 2026-3f51edec7b

Ongres Scram update and security fix.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-3f51edec7b 2026-06-20 00:50:40.883482+00:00 -------------------------------------------------------------------------------- Name : postgresql-jdbc Product : Fedora 44 Version : 42.7.8 Release : 6.fc44 URL : https://jdbc.postgresql.org/ Summary : JDBC driver for PostgreSQL Description : PostgreSQL is an advanced Object-Relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. -------------------------------------------------------------------------------- Update Information: Ongres Scram update and security fix. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 10 2026 Marian Koncek - 42.7.8-6 - Switch tests to using matrix tests * Wed Jun 10 2026 Marian Koncek - 42.7.8-5 - Rebuild with newer ongres dependencies -------------------------------------------------------------------------------- References: [ 1 ] Bug #2487526 - Silent channel-binding authentication downgrade via unsupported certificate algorithms https://bugzilla.redhat.com/show_bug.cgi?id=2487526 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3f51edec7b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announcemailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update to Fedora 44 addresses security fix in postgresql-jdbc. Ensure proper authentication with Ongres Scram.. Ongres Scram,Fedora 44,PostgreSQL JDBC,Security Update,Authentication Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 19, 2026 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraimportant

Fedora 43 Ongres Scram Major Java Authentication Fix for 2026-3fd14ce272

Ongres Scram update and security fix.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-3fd14ce272 2026-06-19 01:08:57.989172+00:00 -------------------------------------------------------------------------------- Name : ongres-scram Product : Fedora 43 Version : 3.3 Release : 1.fc43 URL : https://github.com/ongres/scram Summary : Salted Challenge Response Authentication Mechanism (SCRAM) - Java Implementation Description : This is a Java implementation of SCRAM (Salted Challenge Response Authentication Mechanism) which is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. It is described as part of RFC 5802 and RFC7677. -------------------------------------------------------------------------------- Update Information: Ongres Scram update and security fix. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 10 2026 Marian Koncek - 3.3-1 - Update to upstream version 3.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2487527 - Silent channel-binding authentication downgrade via unsupported certificate algorithms https://bugzilla.redhat.com/show_bug.cgi?id=2487527 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3fd14ce272' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Ongres Scram update enhances authentication security for Fedora 43 users while fixing known vulnerabilities.. Ongres Scram, Fedora update, authentication mechanism, security fix, Java SCRAM. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 18, 2026 •Important Fedora
Banner 3 1028x280 1708121785 1771599793
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

SUSE: ongres-scram Important Timing Attack Fix CVE-2025-59432 2025:21016-1

* bsc#1250399 Cross-References: * CVE-2025-59432 . # Security update for ongres-scram Announcement ID: SUSE-SU-2025:21016-1 Release Date: 2025-11-19T10:14:36Z Rating: important References: * bsc#1250399 Cross-References: * CVE-2025-59432 CVSS scores: * CVE-2025-59432 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-59432 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-59432 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP Applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for ongres-scram fixes the following issues: * CVE-2025-59432: Fixed timing attack vulnerability in SCRAM Authentication (bsc#1250399) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-33=1 * SUSE Linux Enterprise Server for SAP Applications 16.0 zypper in -t patch SUSE-SLES-16.0-33=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (noarch) * ongres-scram-javadoc-3.1-160000.3.1 * ongres-scram-3.1-160000.3.1 * ongres-scram-client-3.1-160000.3.1 * SUSE Linux Enterprise Server for SAP Applications 16.0 (noarch) * ongres-scram-javadoc-3.1-160000.3.1 * ongres-scram-3.1-160000.3.1 * ongres-scram-client-3.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-59432.html * https://bugzilla.suse.com/show_bug.cgi?id=1250399 . Critical update for SUSE's ongres-scram fixes timing attack vulnerability. Immediate action recommended for affectedsystems.. SUSE Linux, ongres-scram, security update, timing attack, SCRAM authentication. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 26, 2025 •Important SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderateupdate

openSUSE Leap 15.4: SUSE-SU-2025:4054-1 Addresses CVE-2025-59432 Risk

An update that solves one vulnerability can now be installed.. # Security update for ongres-scram Announcement ID: SUSE-SU-2025:4054-1 Release Date: 2025-11-11T14:04:45Z Rating: moderate References: * bsc#1250399 Cross-References: * CVE-2025-59432 CVSS scores: * CVE-2025-59432 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-59432 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-59432 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for ongres-scram fixes the following issues: * CVE-2025-59432: Fixed timing attack vulnerability in SCRAM Authentication (bsc#1250399) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-4054=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4054=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-4054=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2025-4054=1 ## Package List: * openSUSE Leap 15.4 (noarch) * ongres-scram-client-2.1-150400.8.5.1 *ongres-scram-parent-2.1-150400.8.5.1 * ongres-scram-2.1-150400.8.5.1 * ongres-scram-javadoc-2.1-150400.8.5.1 * openSUSE Leap 15.6 (noarch) * ongres-scram-client-2.1-150400.8.5.1 * ongres-scram-parent-2.1-150400.8.5.1 * ongres-scram-2.1-150400.8.5.1 * ongres-scram-javadoc-2.1-150400.8.5.1 * Server Applications Module 15-SP6 (noarch) * ongres-scram-client-2.1-150400.8.5.1 * ongres-scram-2.1-150400.8.5.1 * Server Applications Module 15-SP7 (noarch) * ongres-scram-client-2.1-150400.8.5.1 * ongres-scram-2.1-150400.8.5.1 ## References: * https://www.suse.com/security/cve/CVE-2025-59432.html * https://bugzilla.suse.com/show_bug.cgi?id=1250399 . An update for ongres-scram addresses a moderate timing attack vulnerability. Patch installations are recommended for users.. ongres-scram, security patch, timing attack, openSUSE security, moderate threat. . LinuxSecurity.com Team

Calendar%202 Nov 11, 2025 OpenSUSE
Banner 3 1028x280 1708121785 1771599793
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE: ongres-scram Moderate Timing Attack Fix CVE-2025-59432 2025:4054-1

* bsc#1250399 Cross-References: * CVE-2025-59432 . # Security update for ongres-scram Announcement ID: SUSE-SU-2025:4054-1 Release Date: 2025-11-11T14:04:45Z Rating: moderate References: * bsc#1250399 Cross-References: * CVE-2025-59432 CVSS scores: * CVE-2025-59432 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-59432 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-59432 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for ongres-scram fixes the following issues: * CVE-2025-59432: Fixed timing attack vulnerability in SCRAM Authentication (bsc#1250399) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-4054=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4054=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-4054=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2025-4054=1 ## Package List: * openSUSE Leap 15.4 (noarch) * ongres-scram-client-2.1-150400.8.5.1 *ongres-scram-parent-2.1-150400.8.5.1 * ongres-scram-2.1-150400.8.5.1 * ongres-scram-javadoc-2.1-150400.8.5.1 * openSUSE Leap 15.6 (noarch) * ongres-scram-client-2.1-150400.8.5.1 * ongres-scram-parent-2.1-150400.8.5.1 * ongres-scram-2.1-150400.8.5.1 * ongres-scram-javadoc-2.1-150400.8.5.1 * Server Applications Module 15-SP6 (noarch) * ongres-scram-client-2.1-150400.8.5.1 * ongres-scram-2.1-150400.8.5.1 * Server Applications Module 15-SP7 (noarch) * ongres-scram-client-2.1-150400.8.5.1 * ongres-scram-2.1-150400.8.5.1 ## References: * https://www.suse.com/security/cve/CVE-2025-59432.html * https://bugzilla.suse.com/show_bug.cgi?id=1250399 . SUSE announces a moderate advisory for ongres-scram addressing CVE-2025-59432 to fix a timing attack vulnerability. Patch recommended.. SUSE ongres-scram security update, CVE-2025-59432, SCRAM authentication fix. . LinuxSecurity.com Team

Calendar%202 Nov 11, 2025 SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics