Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 8 articles for you...
172
security advisorycriticalremote code executionUbuntu 26.04 24.04 Socat Critical Remote Execution Local File Overwrite
Several security issues were fixed in socat.. ========================================================================== Ubuntu Security Notice USN-8511-1 July 06, 2026 socat vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS Summary: Several security issues were fixed in socat. Software Description: - socat: multipurpose relay for bidirectional data transfer Details: It was discovered that socat incorrectly handled the SOCKS5 proxy server reply parser. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2026-56123) It was discovered that socat incorrectly handled a sample script. A local attacker could possibly use this issue to overwrite arbitrary files. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-54661) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS socat 1.8.1.1-1ubuntu0.1 Ubuntu 24.04 LTS socat 1.8.0.0-4ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8511-1 CVE-2024-54661, CVE-2026-56123 Package Information: https://launchpad.net/ubuntu/+source/socat/1.8.1.1-1ubuntu0.1 https://launchpad.net/ubuntu/+source/socat/1.8.0.0-4ubuntu0.1 . Discover critical updates to socat on Ubuntu, addressing both remote code execution and local file overwrite issues. Act now!. Ubuntu socat security update, remote code execution, local file overwrite, socat vulnerabilities. . Severity: Critical. LinuxSecurity.com Team
Jul 06, 2026
•Critical
Ubuntu
202
security advisorymoderatevulnerabilityopenSUSE Tumbleweed socat Moderate Security Fix CVE-2026-56123
An update that solves one vulnerability can now be installed.. # socat-1.8.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11151-1 Rating: moderate Cross-References: * CVE-2026-56123 CVSS scores: * CVE-2026-56123 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the socat-1.8.1.3-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * socat 1.8.1.3-1.1 * socat-extra 1.8.1.3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56123.html . Security advisory for openSUSE Tumbleweed addressing a moderate issue in socat via CVE-2026-56123.. openSUSE security,socat update,security advisory,moderate risk,vulnerability fix. . Severity: moderate. LinuxSecurity.com Team
Jun 30, 2026
•moderate
OpenSUSE
89
security advisoryfedorabug fixFedora 42: socat CVE-2024-54661 Security Advisory FEDORA-2025-33885cfff8
Update to 1.8.0.3 (rhbz#2307725) Resolves: CVE-2024-54661 (rhbz#2330520) Resolves: non-working ipv6-join-group option (rhbz#2352860) Resolves: FTBFS in Fedora (rhbz#2385633). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-33885cfff8 2025-08-22 02:08:21.664091+00:00 -------------------------------------------------------------------------------- Name : socat Product : Fedora 42 Version : 1.8.0.3 Release : 1.fc42 URL : http://www.dest-unreach.org/socat/ Summary : Bidirectional data relay between two data channels ('netcat++') Description : Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device (serial line etc. or a pseudo terminal), a socket (UNIX, IP4, IP6 - raw, UDP, TCP), an SSL socket, proxy CONNECT connection, a file descriptor (stdin etc.), the GNU line editor (readline), a program, or a combination of two of these. -------------------------------------------------------------------------------- Update Information: Update to 1.8.0.3 (rhbz#2307725) Resolves: CVE-2024-54661 (rhbz#2330520) Resolves: non-working ipv6-join-group option (rhbz#2352860) Resolves: FTBFS in Fedora (rhbz#2385633) -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 6 2025 Martin Osvald - 1.8.0.3-1 - Update to 1.8.0.3 (rhbz#2307725) - Resolves: CVE-2024-54661 (rhbz#2330520) - Resolves: non-working ipv6-join-group option (rhbz#2352860) - Resolves: FTBFS in Fedora (rhbz#2385633) * Fri Jul 25 2025 Fedora Release Engineering - 1.8.0.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2307725 - socat-1.8.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2307725 [ 2 ] Bug #2330520 - CVE-2024-54661 socat:From CVEorg collector [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2330520 [ 3 ] Bug #2352860 - socat 1.8.0.0 Fedora 41/42 ipv6-join-group does nothing https://bugzilla.redhat.com/show_bug.cgi?id=2352860 [ 4 ] Bug #2385633 - socat: FTBFS in Fedora rawhide/f43 https://bugzilla.redhat.com/show_bug.cgi?id=2385633 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-33885cfff8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Aug 22, 2025
•Critical
Fedora
217
security advisorymoderatevulnerabilityOracle Linux 8 socat Moderate Vulnerability Advisory ELSA-2025-11042
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-11042 http://linux.oracle.com/errata/ELSA-2025-11042.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: socat-1.7.4.1-2.el8_10.x86_64.rpm aarch64: socat-1.7.4.1-2.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/socat-1.7.4.1-2.el8_10.src.rpm Related CVEs: CVE-2024-54661 Description of changes: [1.7.4.1-2] - add fix for CVE-2024-54661 Resolves: RHEL-70095 - switch to autopatch, remove unused patches _______________________________________________ El-errata mailing list
Jul 16, 2025
Oracle
217
security advisorymoderatesecurity issueOracle Linux 9 ELSA-2025-10353 moderate: socat CVE-2024-54661 fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-10353 http://linux.oracle.com/errata/ELSA-2025-10353.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: socat-1.7.4.1-6.el9_6.1.x86_64.rpm aarch64: socat-1.7.4.1-6.el9_6.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/socat-1.7.4.1-6.el9_6.1.src.rpm Related CVEs: CVE-2024-54661 Description of changes: [1.7.4.1-6.1] - add fix for CVE-2024-54661 Resolves: RHEL-70096 - switch to autopatch, remove unused patches _______________________________________________ El-errata mailing list
Jul 08, 2025
Oracle
100
security advisorymoderatesecurity updateSUSE 12 SP5: 2025:0726-1 moderate: socat buffer overflow
* bsc#922903 Cross-References: * CVE-2015-1379 . # Security update for socat Announcement ID: SUSE-SU-2025:0726-1 Release Date: 2025-02-26T13:37:01Z Rating: moderate References: * bsc#922903 Cross-References: * CVE-2015-1379 CVSS scores: * CVE-2015-1379 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for socat fixes the following issues: * CVE-2015-1379: lack of async-signal-safe signal handlers can lead to crashes or freezing of socat processes (bsc#922903). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-726=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * socat-debuginfo-1.7.2.4-4.6.1 * socat-debugsource-1.7.2.4-4.6.1 * socat-1.7.2.4-4.6.1 ## References: * https://www.suse.com/security/cve/CVE-2015-1379.html * https://bugzilla.suse.com/show_bug.cgi?id=922903 . This notification outlines the security enhancement for socat in SUSE SE 12 SP5 addressing a medium-severity vulnerability recognized for inducing system failures.. socat security update, SUSE advisory, installation instructions, moderate advisory, fix instructions. . LinuxSecurity.com Team
Feb 26, 2025
SuSE
203
security advisorymoderatesecurity issueMageia 9 MGASA-2024-0390 moderate: socat arbitrary file overwrite
CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh References: - https://bugs.mageia.org/show_bug.cgi?id=33851 . MGASA-2024-0390 - Updated socat packages fix security vulnerability Publication date: 17 Dec 2024 URL: https://advisories.mageia.org/MGASA-2024-0390.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-54661 CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh References: - https://bugs.mageia.org/show_bug.cgi?id=33851 - https://lists.suse.com/pipermail/sle-security-updates/2024-December/019988.html - https://www.cve.org/CVERecord?id=CVE-2024-54661 SRPMS: - 9/core/socat-1.8.0.2-1.mga9 . Revised socat distributions address potential file overwrite flaw mentioned in Mageia 2024-0390 notice from December 2024.. socat security advisory, file overwrite fix, Mageia security updates, CVE-2024-54661, security vulnerabilities. . LinuxSecurity.com Team
Dec 17, 2024
Mageia
100
security advisoryfile overwritemoderate severitySUSE: 2024:4348-1 moderate: fix for socat file overwrite issue
* bsc#1225462 Cross-References: * CVE-2024-54661 . # Security update for socat Announcement ID: SUSE-SU-2024:4348-1 Release Date: 2024-12-17T08:36:49Z Rating: moderate References: * bsc#1225462 Cross-References: * CVE-2024-54661 CVSS scores: * CVE-2024-54661 ( SUSE ): 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2024-54661 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 An update that solves one vulnerability can now be installed. ## Description: This update for socat fixes the following issues: * CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory (bsc#1225462) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-4348=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-4348=1 ## Package List: * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * socat-1.7.3.2-150000.6.3.1 * socat-debuginfo-1.7.3.2-150000.6.3.1 * socat-debugsource-1.7.3.2-150000.6.3.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * socat-1.7.3.2-150000.6.3.1 * socat-debuginfo-1.7.3.2-150000.6.3.1 * socat-debugsource-1.7.3.2-150000.6.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-54661.html * https://bugzilla.suse.com/show_bug.cgi?id=1225462 . A recent update for socat addresses an issue that could lead to unintended file overwrites in SUSE systems. Guidance on how to implement the patch is provided.. socat security update, SUSE security advisory, file overwrite vulnerability, moderate security alert. . LinuxSecurity.com Team
Dec 17, 2024
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!