Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 Advisory 2026-21435-1 perl-XML-Bare Moderate Risk

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 transport Significant Security Update CVE-2026-39821

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Gh Important Security Threat CVE-2026-39821

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 net-tools Low Denial of Service CVE-2024-58251

Calendar White Jul 24, 2026
Low
Opensuse Large Esm H900
openSUSE

openSUSE ImageMagick Important Memory Leak Policy Bypass Vuln 2026-21426-1

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE jline3 Important Remote DoS Memory Exhaustion 2026-21423-1

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 perl-DBI Important File Access DoS Vuln 2026-21412-1

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Perl Important Heap Buffer Overflow Vuln 2026-21411-1

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Glib2 Important Out-of-Bounds Issues Fix 2026-21410-1

Calendar White Jul 24, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorycriticaldebian

Debian 11 node-tar Critical Memory Crash and Access Flaws DLA-4552-1

Multiple vulnerabilities have been discovered in node-tar, a Node.js module to read and write portable tar archives. CVE-2024-28863 Generating a large number of sub-folders can consume memory on the system and even crash the Node.js client within a few seconds using. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4552-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Daniel Leidert April 29, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : node-tar Version : 6.0.5+ds1+~cs11.3.9-1+deb11u3 CVE ID : CVE-2024-28863 CVE-2026-23745 CVE-2026-24842 CVE-2026-26960 CVE-2026-29786 CVE-2026-31802 Multiple vulnerabilities have been discovered in node-tar, a Node.js module to read and write portable tar archives. CVE-2024-28863 Generating a large number of sub-folders can consume memory on the system and even crash the Node.js client within a few seconds using a path with too many sub-folders inside. CVE-2026-23745 When preservePaths is false, the linkpath of Link (hardlink) and SymbolicLink entries fail to be sanitized, allowing malicious archives to bypass the extraction root restriction, leading to arbitrary file overwrites via hardlinks and symlink poisoning via absolute symlink targets. The fix for this issue introduces multiple of the following vulnerabilties. CVE-2026-24842 The security check for hardlink entries allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. CVE-2026-26960 An attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. CVE-2026-29786 Anattacker-controlled archive can create a hardlink that points outside the extraction directory by using a drive-relative link target. CVE-2026-31802 An attacker-controlled archive can create a hardlink that points outside the extraction directory by using a drive-relative link target. For Debian 11 bullseye, these problems have been fixed in version 6.0.5+ds1+~cs11.3.9-1+deb11u3. We recommend that you upgrade your node-tar packages. For the detailed security status of node-tar please refer to its security tracker page at: https://security-tracker.debian.org/tracker/node-tar Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Multiple critical vulnerabilities in node-tar fixed to prevent memory issues and unauthorized file access in Debian.. node-tar vulnerabilities, Debian LTS, security update, tar archive security. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 29, 2026 •Critical Debian LTS
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorysoftware updatecode execution

Debian DSA-3916-1: Critical Update for Atril Code Execution Risk

It was discovered that Atril, the MATE document viewer, made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3916-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso July 21, 2017 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : atril CVE ID : CVE-2017-1000083 Debian Bug : 868500 It was discovered that Atril, the MATE document viewer, made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely. For the oldstable distribution (jessie), this problem has been fixed in version 1.8.1+dfsg1-4+deb8u1. For the stable distribution (stretch), this problem has been fixed in version 1.16.1-2+deb9u1. We recommend that you upgrade your atril packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Advisory DSA-3921-1: evince update restricts PDF handling to enhance security.. Atril Document Viewer, Debian Update, Code Execution, Security Advisory, Tar Archives. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 21, 2017 •Critical Debian
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics