Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedoraremote execution

Fedora 28: FEDORA-2019-f0add5eed0 critical: OpenOCD Remote Code Execution

fix for CVE-2018-5704 (RHBZ 1534844). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-f0add5eed0 2019-03-02 01:20:05.967617 --------------------------------------------------------------------------------Name : openocd Product : Fedora 28 Version : 0.10.0 Release : 11.fc28 URL : https://sourceforge.net/projects/openocd/ Summary : Debugging, in-system programming and boundary-scan testing for embedded devices Description : The Open On-Chip Debugger (OpenOCD) provides debugging, in-system programming and boundary-scan testing for embedded devices. Various different boards, targets, and interfaces are supported to ease development time. Install OpenOCD if you are looking for an open source solution for hardware debugging. --------------------------------------------------------------------------------Update Information: fix for CVE-2018-5704 (RHBZ 1534844) --------------------------------------------------------------------------------ChangeLog: * Thu Feb 21 2019 Jiri Kastner - 0.10.0-11 - fix for CVE-2018-5704 (RHBZ 1534844) * Fri Feb 1 2019 Fedora Release Engineering - 0.10.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Oct 22 2018 Jiri Kastner - 0.10.0-9 - fix openocd rules (RHBZ 1571599) * Sat Sep 22 2018 Lubomir Rintel - 0.10.0-8 - rebuild for jimtcl soname bump * Fri Jul 13 2018 Fedora Release Engineering - 0.10.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Feb 8 2018 Fedora Release Engineering - 0.10.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1534843 - openocd: Cross protocol scripting vulnerability in telnet interface allows for remote command execution https://bugzilla.redhat.com/show_bug.cgi?id=1534843 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-f0add5eed0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The latest release of OpenOCD in Fedora 28 tackles a severe vulnerability allowing unauthorized remote command execution, significantly boosting the overall security for embedded systems.. OpenOCD Update,Fedora Security Fix,Embedded Debugging,Remote Command Execution,Security Notification. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 02, 2019 •Critical Fedora
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryfile overwritelocal attack

Ubuntu 13.04 USN-1927-1 Moderate: libimobiledevice Local Attack

libimobiledevice could be made to overwrite files as the administrator, or access device keys.. =========================================================================Ubuntu Security Notice USN-1927-1 August 14, 2013 libimobiledevice vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 13.04 - Ubuntu 12.10 Summary: libimobiledevice could be made to overwrite files as the administrator, or access device keys. Software Description: - libimobiledevice: Library for communicating with iPhone and iPod Touch devices Details: Paul Collins discovered that libimobiledevice incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files and access device keys. In the default Ubuntu installation, this issue should be mitigated by the Yama link restrictions. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 13.04: libimobiledevice3 1.1.4-1ubuntu6.2 Ubuntu 12.10: libimobiledevice3 1.1.4-1ubuntu3.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1927-1 CVE-2013-2142 Package Information: https://launchpad.net/ubuntu/+source/libimobiledevice/1.1.4-1ubuntu6.2 https://launchpad.net/ubuntu/+source/libimobiledevice/1.1.4-1ubuntu3.2 . A serious alert about libimobiledevice highlights vulnerabilities that may allow unauthorized file overwrites and sensitive key exposure. Update your software now to mitigate risks. libimobiledevice, Ubuntu update, local attack, file access, security notice. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 14, 2013 •Important Ubuntu
Banner 3 1028x280 1708121785 1771599793
91
Ls Advisories Gentoo Esm H240
Price Tag%201security advisorygentooremote exploit

Gentoo: 200306-15 Severe: phpBB SQL Injection Remote Threat

QL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.. - - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200306-15 - - - --------------------------------------------------------------------- PACKAGE : phpbb SUMMARY : sql injection DATE : 2003-06-28 20:22 UTC EXPLOIT : remote VERSIONS AFFECTED : =phpbb-2.0.5 CVE : CAN-2003-0486 - - - --------------------------------------------------------------------- quote from cve: "SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter." SOLUTION It is recommended that all Gentoo Linux users who are running net-www/phpbb upgrade to phpbb-2.0.5 as follows emerge sync emerge phpbb emerge clean - - - --------------------------------------------------------------------- This email address is being protected from spambots. You need JavaScript enabled to view it. - GnuPG key is available at This email address is being protected from spambots. You need JavaScript enabled to view it. - - - --------------------------------------------------------------------- . A new Gentoo security advisory reveals a critical phpBB vulnerability, enabling remote attackers to extract password hashes via SQL injection. Quick updates are recommended.. phpbb Security, SQL Injection Risk, Gentoo Safety, Remote Exploitation. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 01, 2003 •Critical Gentoo
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics