Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
100

SUSE Linux Enterprise Server 16.0 Cockpit Security Flaw in SSH 2026-21184-1

An update that solves one vulnerability can now be installed.. # Security update for cockpit Announcement ID: SUSE-SU-2026:21184-1 Release Date: 2026-04-13T14:07:43Z Rating: critical References: * bsc#1261829 Cross-References: * CVE-2026-4631 CVSS scores: * CVE-2026-4631 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4631 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-4631 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for cockpit fixes the following issues: Changes in cockpit: * CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-545=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-545=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * cockpit-ws-debuginfo-354-160000.3.1 * cockpit-ws-354-160000.3.1 * cockpit-ws-selinux-354-160000.3.1 * cockpit-devel-354-160000.3.1 * cockpit-debugsource-354-160000.3.1 * cockpit-354-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * cockpit-firewalld-354-160000.3.1 * cockpit-networkmanager-354-160000.3.1 * cockpit-kdump-354-160000.3.1 * cockpit-storaged-354-160000.3.1 * cockpit-doc-354-160000.3.1 * cockpit-bridge-354-160000.3.1 * cockpit-packagekit-354-160000.3.1 * cockpit-selinux-354-160000.3.1 * cockpit-system-354-160000.3.1 * SUSE LinuxEnterprise Server for SAP applications 16.0 (ppc64le x86_64) * cockpit-ws-debuginfo-354-160000.3.1 * cockpit-ws-354-160000.3.1 * cockpit-ws-selinux-354-160000.3.1 * cockpit-devel-354-160000.3.1 * cockpit-debugsource-354-160000.3.1 * cockpit-354-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * cockpit-firewalld-354-160000.3.1 * cockpit-networkmanager-354-160000.3.1 * cockpit-kdump-354-160000.3.1 * cockpit-storaged-354-160000.3.1 * cockpit-doc-354-160000.3.1 * cockpit-bridge-354-160000.3.1 * cockpit-packagekit-354-160000.3.1 * cockpit-selinux-354-160000.3.1 * cockpit-system-354-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-4631.html * https://bugzilla.suse.com/show_bug.cgi?id=1261829 . Update for SUSE addresses critical ssh command injection in cockpit software, mitigating remote risk effectively.. SUSE Cockpit SSH Injection Remote Execution Critical Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 21, 2026 Critical SuSE
217

Oracle Linux 9 Cockpit Critical SSH Injection Advisory ELSA-2026-7384

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-7384 http://linux.oracle.com/errata/ELSA-2026-7384.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: cockpit-344-2.0.1.el9_7.x86_64.rpm cockpit-bridge-344-2.0.1.el9_7.noarch.rpm cockpit-doc-344-2.0.1.el9_7.noarch.rpm cockpit-packagekit-344-2.0.1.el9_7.noarch.rpm cockpit-storaged-344-2.0.1.el9_7.noarch.rpm cockpit-system-344-2.0.1.el9_7.noarch.rpm cockpit-ws-344-2.0.1.el9_7.x86_64.rpm cockpit-ws-selinux-344-2.0.1.el9_7.x86_64.rpm aarch64: cockpit-344-2.0.1.el9_7.aarch64.rpm cockpit-bridge-344-2.0.1.el9_7.noarch.rpm cockpit-doc-344-2.0.1.el9_7.noarch.rpm cockpit-packagekit-344-2.0.1.el9_7.noarch.rpm cockpit-storaged-344-2.0.1.el9_7.noarch.rpm cockpit-system-344-2.0.1.el9_7.noarch.rpm cockpit-ws-344-2.0.1.el9_7.aarch64.rpm cockpit-ws-selinux-344-2.0.1.el9_7.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/cockpit-344-2.0.1.el9_7.src.rpm Related CVEs: CVE-2026-4631 Description of changes: [344-2.0.1] - Storage: Enable btrfs support [Orabug: 37464632] - Replaced upstream urls in documentation with oracle links [Orabug: 36528753] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 34030494] - Update documentation links [Orabug: 30271413], [Orabug: 32013095], [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273] - Update spec file for new release [344] - Remove recommends on subscription-manager-cockpit if applicable * Fri Mar 27 2026 Jelle van der Waa

Calendar 2 Apr 13, 2026 Critical Oracle
99

Slackware: 2017-223-03 Moderate: Mercurial Symlink and SSH Injection

New mercurial packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] mercurial (SSA:2017-223-03) New mercurial packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/mercurial-4.3.1-i586-1_slack14.2.txz: Upgraded. Fixes security issues: Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository. Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks on clients by specifying a hostname starting with -oProxyCommand. For more information, see: https://www.cve.org/CVERecord?id=CVE-2017-1000115 https://www.cve.org/CVERecord?id=CVE-2017-1000116 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/mercurial-4.3.1-i486-1_slack14.0.txz Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/mercurial-4.3.1-x86_64-1_slack14.0.txz Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/mercurial-4.3.1-i486-1_slack14.1.txz Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/mercurial-4.3.1-x86_64-1_slack14.1.txz Updated package for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/mercurial-4.3.1-i586-1_slack14.2.txz Updated package for Slackwarex86_64 14.2: ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/mercurial-4.3.1-x86_64-1_slack14.2.txz Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 14.0 package: 4d9a2a90109202aa2023ff758f8e2b88 mercurial-4.3.1-i486-1_slack14.0.txz Slackware x86_64 14.0 package: c949af25a3a61ba5b88780b2e10b02d5 mercurial-4.3.1-x86_64-1_slack14.0.txz Slackware 14.1 package: 9260d7fa714eea9a81fb9bc6d56708d4 mercurial-4.3.1-i486-1_slack14.1.txz Slackware x86_64 14.1 package: f0525de8c1497f154f280dbafcdcd25b mercurial-4.3.1-x86_64-1_slack14.1.txz Slackware 14.2 package: cf70802f8f9a1ec306ebde94eac246fc mercurial-4.3.1-i586-1_slack14.2.txz Slackware x86_64 14.2 package: c44f92967f03ac8724f898451d2b4f2f mercurial-4.3.1-x86_64-1_slack14.2.txz Slackware -current package: b81fe0b2ec0d3923ce12b5d374b21d7e d/mercurial-4.3.1-i586-1.txz Slackware x86_64 -current package: 84c3d7646ed899df599435fa32270c83 d/mercurial-4.3.1-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg mercurial-4.3.1-i586-1_slack14.2.txz +-----+ . Recent updates for Slackware address symlink vulnerabilities and SSH injection threats. All users are advised to upgrade promptly.. Mercurial Packages, Slackware Security, Package Update, Exploit Mitigation. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 11, 2017 Important Slackware
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here