Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 74 articles for you...
202

Ubuntu Cloudberry Notable Risk CVE-2024-6790 Notification 2024-38976-2

An update that solves one vulnerability can now be installed.. # lemon-3.51.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10171-1 Rating: moderate Cross-References: * CVE-2025-7709 CVSS scores: * CVE-2025-7709 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2025-7709 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the lemon-3.51.2-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * lemon 3.51.2-1.1 * libsqlite3-0 3.51.2-1.1 * libsqlite3-0-32bit 3.51.2-1.1 * libsqlite3-0-x86-64-v3 3.51.2-1.1 * sqlite3 3.51.2-1.1 * sqlite3-devel 3.51.2-1.1 * sqlite3-doc 3.51.2-1.1 * sqlite3-tcl 3.51.2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-7709.html . An openSUSE update resolves a moderate vulnerability in the Lemon application. Install the latest updates to enhance security.. openSUSE update, Lemon application, security fix, moderate severity. . LinuxSecurity.com Team

Calendar%202 Feb 11, 2026 OpenSUSE
217

Oracle Linux 9: sqlite Important CVE-2025-6965 Advisory ELSA-2025-20936

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-20936 http://linux.oracle.com/errata/ELSA-2025-20936.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: sqlite-3.34.1-9.el9_7.i686.rpm sqlite-3.34.1-9.el9_7.x86_64.rpm sqlite-devel-3.34.1-9.el9_7.i686.rpm sqlite-devel-3.34.1-9.el9_7.x86_64.rpm sqlite-libs-3.34.1-9.el9_7.i686.rpm sqlite-libs-3.34.1-9.el9_7.x86_64.rpm aarch64: sqlite-3.34.1-9.el9_7.aarch64.rpm sqlite-devel-3.34.1-9.el9_7.aarch64.rpm sqlite-libs-3.34.1-9.el9_7.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/sqlite-3.34.1-9.el9_7.src.rpm Related CVEs: CVE-2025-6965 Description of changes: [3.34.1-9] - Fixes CVE-2025-6965 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 9 advisory on sqlite update addressing CVE-2025-6965 with important security implications.. Oracle Linux 9, sqlite update, important security, CVE-2025-6965, security patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 27, 2025 Important Oracle
89

Fedora 41: sqlite Critical Integer Overflow CVE Fix FEDORA-2025-39461417a6

cve fixes. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-39461417a6 2025-10-03 01:16:27.010931+00:00 -------------------------------------------------------------------------------- Name : sqlite Product : Fedora 41 Version : 3.46.1 Release : 5.fc41 URL : http://www.sqlite.org/ Summary : Library that implements an embeddable SQL database engine Description : SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Version 2 and version 3 binaries are named to permit each to be installed on a single host SQLite is built with some non-default settings: - Additional APIs for table's and query's metadata are enabled (SQLITE_ENABLE_COLUMN_METADATA) - Directory syncs are disabled (SQLITE_DISABLE_DIRSYNC) - `secure_delete` defaults to 'on', so deleted content is overwritten with zeros (SQLITE_SECURE_DELETE) - `sqlite3_unlock_notify()` is enabled - this feature allows to register a callback that's invoked when lock is removed (SQLITE_ENABLE_UNLOCK_NOTIFY) - `dbstat` virtual table with disk space usage is enabled - `dbpage` virtual table providing direct access to underlying database file is enabled (SQLITE_ENABLE_DBPAGE_VTAB) - Threadsafe mode is set to 1 - Serialized, so it is safe to use in a multithreaded environment (SQLITE_THREADSAFE=1) - FTS3, FTS4 and FTS5 are enabled so versions 3 to 5 of the full-text search engine are available (SQLITE_ENABLE_FTS3, SQLITE_ENABLE_FTS4, SQLITE_ENABLE_FTS5) - Pattern parser in FTS3 extension supports nested parenthesis and operators `AND`, `OR` (SQLITE_ENABLE_FTS3_PARENTHESIS) - R*Tree index extension isenabled (SQLITE_ENABLE_RTREE) - Extension loading is enabled - Sessions (sqlite-session feature) is enabled - Preupdate hook is enabled It is also important to note that shell has some extensions as its dependencies, so some extensions are enabled by default in SQLite shell, but not in the system libraries. Only the aforementioned extensions are available in the libraries: FTS3, FTS4, FTS5, R*Tree -------------------------------------------------------------------------------- Update Information: cve fixes -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 26 2025 Ales Nezbeda - 3.45.1-5 - Rebuild * Fri Sep 26 2025 Ales Nezbeda - 3.45.1-4 - Fix for CVE-2025-6965 - Resolves: BZ#2380236 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2359648 - CVE-2025-3277 sqlite: integer overflow in SQLite [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2359648 [ 2 ] Bug #2380236 - CVE-2025-6965 sqlite: Integer Truncation in SQLite [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2380236 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-39461417a6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Critical update for Fedora 41 sqlite to address CVE-2025-6965 and integer overflow issues, securing the database engine.. Fedora Update, Sqlite Security, CVE Fix, Database Engine, Integer Overflow. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 03, 2025 Critical Fedora
217

Oracle Linux 8 mingw-sqlite Important Advisory ELSA-2025-14101

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-14101 http://linux.oracle.com/errata/ELSA-2025-14101.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: mingw32-sqlite-3.26.0.0-2.el8_10.noarch.rpm mingw32-sqlite-static-3.26.0.0-2.el8_10.noarch.rpm mingw64-sqlite-3.26.0.0-2.el8_10.noarch.rpm mingw64-sqlite-static-3.26.0.0-2.el8_10.noarch.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/mingw-sqlite-3.26.0.0-2.el8_10.src.rpm Related CVEs: CVE-2025-6965 Description of changes: [3.26.0.0-2] - Fix CVE-2019-5827 CVE-2019-13750 CVE-2019-13751 - Fix CVE-2019-19603 CVE-2020-13435 CVE-2020-35527 - Fix CVE-2020-35525 CVE-2022-35737 CVE-2020-24736 - Fix CVE-2023-7104 - Fix CVE-2025-6965 Resolves: RHEL-103830 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . New RPM packages for Oracle Linux 8 have been released, resolving critical vulnerabilities in SQLite. Please refer to the advisory for comprehensive information.. Oracle Linux Security, Important Advisory, SQLite Update, Software Fix, Linux RPMs. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 21, 2025 Important Oracle
217

Oracle Linux 7 ELSA-2025-12349 sqlite Important Buffer Overflow Fix

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-12349 http://linux.oracle.com/errata/ELSA-2025-12349.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: lemon-3.7.17-8.0.1.el7_9.1.x86_64.rpm sqlite-3.7.17-8.0.1.el7_9.1.i686.rpm sqlite-3.7.17-8.0.1.el7_9.1.x86_64.rpm sqlite-devel-3.7.17-8.0.1.el7_9.1.i686.rpm sqlite-devel-3.7.17-8.0.1.el7_9.1.x86_64.rpm sqlite-doc-3.7.17-8.0.1.el7_9.1.noarch.rpm sqlite-tcl-3.7.17-8.0.1.el7_9.1.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/sqlite-3.7.17-8.0.1.el7_9.1.src.rpm Related CVEs: CVE-2025-6965 Description of changes: [3.7.17-8.0.1.1] - Fix for CVE-2025-6965 [Orabug: 38260859] _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Significant Oracle Linux 8 patch addresses a vital sqlite vulnerability outlined in ELSA-2025-12350. Oracle Linux 7, sqlite security, important advisory, database security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 06, 2025 Important Oracle
217

Oracle Linux 10 ELSA-2025-11933 sqlite Important Threat Fixed

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-11933 http://linux.oracle.com/errata/ELSA-2025-11933.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: sqlite-3.46.1-5.el10_0.x86_64.rpm sqlite-devel-3.46.1-5.el10_0.x86_64.rpm sqlite-libs-3.46.1-5.el10_0.x86_64.rpm aarch64: sqlite-3.46.1-5.el10_0.aarch64.rpm sqlite-devel-3.46.1-5.el10_0.aarch64.rpm sqlite-libs-3.46.1-5.el10_0.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/sqlite-3.46.1-5.el10_0.src.rpm Related CVEs: CVE-2025-6965 Description of changes: [3.46.1-5] - Fix CVE-2025-6965 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Revised security notice for Oracle Linux 10 tackling critical sqlite vulnerabilities with an advised resolution. Discover further details!. Oracle Linux 10, sqlite security, important update, Linux vulnerability. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 30, 2025 Important Oracle
217

Oracle Linux 8: sqlite Important Update for ELSA-2025-12010

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-12010 http://linux.oracle.com/errata/ELSA-2025-12010.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: lemon-3.26.0-20.el8_10.x86_64.rpm sqlite-3.26.0-20.el8_10.i686.rpm sqlite-3.26.0-20.el8_10.x86_64.rpm sqlite-devel-3.26.0-20.el8_10.i686.rpm sqlite-devel-3.26.0-20.el8_10.x86_64.rpm sqlite-doc-3.26.0-20.el8_10.noarch.rpm sqlite-libs-3.26.0-20.el8_10.i686.rpm sqlite-libs-3.26.0-20.el8_10.x86_64.rpm aarch64: lemon-3.26.0-20.el8_10.aarch64.rpm sqlite-3.26.0-20.el8_10.aarch64.rpm sqlite-devel-3.26.0-20.el8_10.aarch64.rpm sqlite-doc-3.26.0-20.el8_10.noarch.rpm sqlite-libs-3.26.0-20.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/sqlite-3.26.0-20.el8_10.src.rpm Related CVEs: CVE-2025-6965 Description of changes: [3.26.0-20] - Fixes CVE-2025-6965 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Enhancements for Oracle Linux 8 encompass critical patches for libxml2 to mitigate potential vulnerabilities.. Oracle Linux, sqlite update, important security advisory, Linux vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 30, 2025 Important Oracle
217

Oracle Linux 10: ELSA-2025-7517 important: sqlite security update

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-7517 http://linux.oracle.com/errata/ELSA-2025-7517.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: sqlite-3.46.1-4.el10_0.x86_64.rpm sqlite-devel-3.46.1-4.el10_0.x86_64.rpm sqlite-libs-3.46.1-4.el10_0.x86_64.rpm aarch64: sqlite-3.46.1-4.el10_0.aarch64.rpm sqlite-devel-3.46.1-4.el10_0.aarch64.rpm sqlite-libs-3.46.1-4.el10_0.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/sqlite-3.46.1-4.el10_0.src.rpm Related CVEs: CVE-2025-3277 Description of changes: [3.46.1-4] - Fix for CVE-2025-3277 - Resolves: RHEL-87295 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Ubuntu Linux 22 improvements are now available, emphasizing important postgresql patches. Explore the recent updates and CVE fixes today!. Oracle Linux Update, sqlite Security Fix, ELSA-2025-7517. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 27, 2025 Important Oracle
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200