Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 490
Alerts This Week
Warning Icon 1 490

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H900
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H800
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 serd Important Security Bugfix Advisory 2026-0058

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e

Calendar White Jul 20, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorydenial of serviceimportant

Scientific Linux SL5: SLSA-2015:2658-1 Important: bind97 Denial of Service

Important: bind97 security update. Date: Wed, 16 Dec 2015 20:28:17 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: Security ERRATA Important: bind97 on SL5.x i386/x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Important: bind97 security update Advisory ID: SLSA-2015:2658-1 Issue Date: 2015-12-16 CVE Numbers: CVE-2015-8000 -- A denial of service flaw was found in the way BIND processed certain records with malformed class attributes. A remote attacker could use this flaw to send a query to request a cached record with a malformed class attribute that would cause named functioning as an authoritative or recursive server to crash. (CVE-2015-8000) Note: This issue affects authoritative servers as well as recursive servers, however authoritative servers are at limited risk if they perform authentication when making recursive queries to resolve addresses for servers listed in NS RRSETs. After installing the update, the BIND daemon (named) will be restarted automatically. -- SL5 x86_64 bind97-9.7.0-21.P2.el5_11.4.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.4.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.4.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.4.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.4.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.4.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.4.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.4.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.4.x86_64.rpm i386 bind97-9.7.0-21.P2.el5_11.4.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.4.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.4.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.4.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.4.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.4.i386.rpm - Scientific Linux Development Team . Critical patch alert: bind97 addresses a service disruption flaw in Scientific Linux 5.x. Take immediate action!. bind97, scientific linux, denial of service, security update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Dec 16, 2015 •Important Scientific Linux
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorysecurity issueimportant

Scientific Linux: 2014-0626-1 Critical OpenSSL Update for SL5 and SL6

Important: openssl097a and openssl098e security update. Date: Thu, 5 Jun 2014 14:47:39 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Important: openssl097a and openssl098e on SL5.x, SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Important: openssl097a and openssl098e security update Advisory ID: SLSA-2014:0626-1 Issue Date: 2014-06-05 CVE Numbers: CVE-2014-0224 -- It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server. (CVE-2014-0224) Note: In order to exploit this flaw, both the server and the client must be using a vulnerable version of OpenSSL; the server must be using OpenSSL version 1.0.1 and above, and the client must be using any version of OpenSSL. For more information about this flaw, refer to: For the update to take effect, all services linked to the OpenSSL library (such as httpd and other SSL-enabled services) must be restarted or the system rebooted. -- SL5 x86_64 openssl097a-0.9.7a-12.el5_10.1.i386.rpm openssl097a-0.9.7a-12.el5_10.1.x86_64.rpm openssl097a-debuginfo-0.9.7a-12.el5_10.1.i386.rpm openssl097a-debuginfo-0.9.7a-12.el5_10.1.x86_64.rpm i386 openssl097a-0.9.7a-12.el5_10.1.i386.rpm openssl097a-debuginfo-0.9.7a-12.el5_10.1.i386.rpm SL6 x86_64 openssl098e-0.9.8e-18.el6_5.2.i686.rpm openssl098e-0.9.8e-18.el6_5.2.x86_64.rpm openssl098e-debuginfo-0.9.8e-18.el6_5.2.i686.rpm openssl098e-debuginfo-0.9.8e-18.el6_5.2.x86_64.rpm i386 openssl098e-0.9.8e-18.el6_5.2.i686.rpm openssl098e-debuginfo-0.9.8e-18.el6_5.2.i686.rpm - Scientific Linux Development Team . Crucial OpenSSL patch for Scientific Linux released to rectify a significant encryption vulnerability. Safeguard your server's integrity by following this important announcement.. openssl update, security advisory, Scientific Linux,important issues. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 05, 2014 •Critical Scientific Linux
Banner 4 1028x280 1708121825 1771600306
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisoryimportantthreat mitigation

SciLinux: Important Update for OpenJDK to Address Security Issues

Important: java-1.6.0-openjdk security update. Date: Tue, 4 Sep 2012 10:18:25 -0500 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Important: java-1.6.0-openjdk on SL5.x i386/x86_64 MIME-Version: 1.0 Synopsis: Important: java-1.6.0-openjdk security update Issue Date: 2012-09-03 CVE Numbers: CVE-2012-1682 CVE-2012-0547 These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that the Beans component in OpenJDK did not perform permission checks properly. An untrusted Java application or applet could use this flaw to use classes from restricted packages, allowing it to bypass Java sandbox restrictions. (CVE-2012-1682) A hardening fix was applied to the AWT component in OpenJDK, removing functionality from the restricted SunToolkit class that was used in combination with other flaws to bypass Java sandbox restrictions. (CVE-2012-0547) This erratum also upgrades the OpenJDK package to IcedTea6 1.10.9. All users of java-1.6.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect. SL5 x86_64 java-1.6.0-openjdk-1.6.0.0-1.28.1.10.9.el5_8.x86_64.rpm java-1.6.0-openjdk-demo-1.6.0.0-1.28.1.10.9.el5_8.x86_64.rpm java-1.6.0-openjdk-devel-1.6.0.0-1.28.1.10.9.el5_8.x86_64.rpm java-1.6.0-openjdk-javadoc-1.6.0.0-1.28.1.10.9.el5_8.x86_64.rpm java-1.6.0-openjdk-src-1.6.0.0-1.28.1.10.9.el5_8.x86_64.rpm i386 java-1.6.0-openjdk-1.6.0.0-1.28.1.10.9.el5_8.i386.rpm java-1.6.0-openjdk-demo-1.6.0.0-1.28.1.10.9.el5_8.i386.rpm java-1.6.0-openjdk-devel-1.6.0.0-1.28.1.10.9.el5_8.i386.rpm java-1.6.0-openjdk-javadoc-1.6.0.0-1.28.1.10.9.el5_8.i386.rpm java-1.6.0-openjdk-src-1.6.0.0-1.28.1.10.9.el5_8.i386.rpm - ScientificLinux Development Team . Essential patch for Scientific Linux addresses vulnerabilities in OpenJDK impacting both i386 and x86_64 architectures.. java update, scientific linux, openjdk security, system upgrade. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 04, 2012 •Important Scientific Linux
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorymoderateupdate

Scientific Linux SL5.x: CVE-2008-2079 Moderate MySQL Security Fix

Moderate: mysql security and bug fix update. Date: Thu, 17 Sep 2009 13:28:35 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Moderate: mysql on SL5.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Moderate: mysql security and bug fix update Issue date: 2009-09-02 CVE Names: CVE-2008-2079 CVE-2008-3963 CVE-2008-4456 CVE-2009-2446 CVE-2008-2079 mysql: privilege escalation via DATA/INDEX DIRECTORY directives CVE-2008-3963 MySQL: Using an empty binary value leads to server crash CVE-2008-4456 mysql: mysql command line client XSS flaw CVE-2008-3963 MySQL: Using an empty binary value leads to server crash CVE-2009-2446 MySQL: Format string vulnerability by manipulation with database instances (crash) MySQL did not correctly check directories used as arguments for the DATA DIRECTORY and INDEX DIRECTORY directives. Using this flaw, an authenticated attacker could elevate their access privileges to tables created by other database users. Note: This attack does not work on existing tables. An attacker can only elevate their access to another user's tables as the tables are created. As well, the names of these created tables need to be predicted correctly for this attack to succeed. (CVE-2008-2079) A flaw was found in the way MySQL handles an empty bit-string literal. A remote, authenticated attacker could crash the MySQL server daemon (mysqld) if they used an empty bit-string literal in an SQL statement. This issue only caused a temporary denial of service, as the MySQL daemon was automatically restarted after the crash. (CVE-2008-3963) An insufficient HTML entities quoting flaw was found in the mysql command line client's HTML output mode. If an attacker was able to inject arbitrary HTML tags into data stored in a MySQL database, which was later retrieved using the mysql command line client and its HTML output mode, they could perform a cross-site scripting (XSS) attack against victims viewing the HTML output ina web browser. (CVE-2008-4456) Multiple format string flaws were found in the way the MySQL server logs user commands when creating and deleting databases. A remote, authenticated attacker with permissions to CREATE and DROP databases could use these flaws to formulate a specifically-crafted SQL command that would cause a temporary denial of service (open connections to mysqld are terminated). (CVE-2009-2446) Note: To exploit the CVE-2009-2446 flaws, the general query log (the mysqld "--log" command line option or the "log" option in "/etc/my.cnf") must be enabled. This logging is not enabled by default. After installing this update, the MySQL server daemon (mysqld) will be restarted automatically. SL 5.x SRPMS: mysql-5.0.77-3.el5.src.rpm i386: mysql-5.0.77-3.el5.i386.rpm mysql-bench-5.0.77-3.el5.i386.rpm mysql-connector-odbc-3.51.26r1127-1.el5.i386.rpm mysql-devel-5.0.77-3.el5.i386.rpm mysql-server-5.0.77-3.el5.i386.rpm mysql-test-5.0.77-3.el5.i386.rpm x86_64: mysql-5.0.77-3.el5.i386.rpm mysql-5.0.77-3.el5.x86_64.rpm mysql-bench-5.0.77-3.el5.x86_64.rpm mysql-connector-odbc-3.51.26r1127-1.el5.x86_64.rpm mysql-devel-5.0.77-3.el5.i386.rpm mysql-devel-5.0.77-3.el5.x86_64.rpm mysql-server-5.0.77-3.el5.x86_64.rpm mysql-test-5.0.77-3.el5.x86_64.rpm -Connie Sieh -Troy Dawson . MySQL security patch for Scientific Linux SL5.x addressing various threats and improvements.. mysql update, scientific linux, security patch, privilege escalation, cross site scripting. . LinuxSecurity.com Team

Calendar%202 Sep 17, 2009 Scientific Linux
Banner 4 1028x280 1708121825 1771600306
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorycriticalapplication crash

SciLinux: SL5.x poppler Critical Security Update for PDF Issues

Important: poppler security update. Date: Tue, 13 Nov 2007 17:00:23 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for poppler on SL5.x i386/x86_64 Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. Synopsis: Important: poppler security update Issue date: 2007-11-07 CVE Names: CVE-2007-4352 CVE-2007-5392 CVE-2007-5393 Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause an application linked with poppler to crash, or potentially execute arbitrary code when opened. (CVE-2007-4352, CVE-2007-5392, CVE-2007-5393) SL 5.x SRPMS: poppler-0.5.4-4.3.el5_1.src.rpm i386: poppler-0.5.4-4.3.el5.i386.rpm poppler-devel-0.5.4-4.3.el5.i386.rpm poppler-utils-0.5.4-4.3.el5.i386.rpm x86_64: poppler-0.5.4-4.3.el5.i386.rpm poppler-0.5.4-4.3.el5.x86_64.rpm poppler-devel-0.5.4-4.3.el5.i386.rpm poppler-devel-0.5.4-4.3.el5.x86_64.rpm poppler-utils-0.5.4-4.3.el5.x86_64.rpm -Connie Sieh -Troy Dawson . Crucial poppler security patch released to fix severe PDF vulnerabilities in the Scientific Linux platform.. poppler security update, scientific linux, pdf security flaws, application crash, security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 13, 2007 •Critical Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics