Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 23 articles for you...
217
security advisorybug fiximportantOracle Linux 9 ELSA-2026-30848 Important Kernel Bug Fix Advisory
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-30848 http://linux.oracle.com/errata/ELSA-2026-30848.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: kernel-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-abi-stablelists-5.14.0-687.19.1.el9_8.noarch.rpm kernel-core-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-cross-headers-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-debug-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-debug-core-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-debug-devel-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-debug-devel-matched-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-debug-modules-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-debug-modules-core-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-debug-modules-extra-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-debug-uki-virt-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-devel-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-devel-matched-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-doc-5.14.0-687.19.1.el9_8.noarch.rpm kernel-headers-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-modules-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-modules-core-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-modules-extra-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-tools-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-tools-libs-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-tools-libs-devel-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-uki-virt-5.14.0-687.19.1.el9_8.x86_64.rpm kernel-uki-virt-addons-5.14.0-687.19.1.el9_8.x86_64.rpm libperf-5.14.0-687.19.1.el9_8.x86_64.rpm perf-5.14.0-687.19.1.el9_8.x86_64.rpm python3-perf-5.14.0-687.19.1.el9_8.x86_64.rpm rtla-5.14.0-687.19.1.el9_8.x86_64.rpm rv-5.14.0-687.19.1.el9_8.x86_64.rpm aarch64: kernel-cross-headers-5.14.0-687.19.1.el9_8.aarch64.rpm kernel-headers-5.14.0-687.19.1.el9_8.aarch64.rpm kernel-tools-5.14.0-687.19.1.el9_8.aarch64.rpm kernel-tools-libs-5.14.0-687.19.1.el9_8.aarch64.rpm kernel-tools-libs-devel-5.14.0-687.19.1.el9_8.aarch64.rpm libperf-5.14.0-687.19.1.el9_8.aarch64.rpm perf-5.14.0-687.19.1.el9_8.aarch64.rpm python3-perf-5.14.0-687.19.1.el9_8.aarch64.rpm rtla-5.14.0-687.19.1.el9_8.aarch64.rpm rv-5.14.0-687.19.1.el9_8.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.19.1.el9_8.src.rpm RelatedCVEs: CVE-2026-31488 CVE-2026-43038 CVE-2026-43329 CVE-2026-45898 CVE-2026-46054 CVE-2026-46090 CVE-2026-46176 CVE-2026-46189 Description of changes: [5.14.0-687.19.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} _______________________________________________ El-errata mailing list
Jul 08, 2026
•Important
Oracle
202
security advisorymoderatethreat assessmentopenSUSE ansible-core Moderate CVE-2026-11332 Threat Advisory 2026-11064-1
An update that solves one vulnerability can now be installed.. # ansible-core-2.20-2.20.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11064-1 Rating: moderate Cross-References: * CVE-2026-11332 CVSS scores: * CVE-2026-11332 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the ansible-core-2.20-2.20.7-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * ansible-core-2.20 2.20.7-1.1 * ansible-test-2.20 2.20.7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11332.html . An openSUSE update resolves a security issue in ansible-core 2.20.7-1.1 rating moderate, affects your system.. openSUSE Ansibel security update, CVE-2026-11332, ansible-core vulnerability. . Severity: moderate. LinuxSecurity.com Team
Jun 20, 2026
•moderate
OpenSUSE
100
security advisorySuSEimportantSUSE 16.0 Cockpit Subscriptions Important ReDoS Vulnerability 2026-21191-1
An update that solves one vulnerability can now be installed.. # Security update for cockpit-subscriptions Announcement ID: SUSE-SU-2026:21191-1 Release Date: 2026-04-14T12:10:22Z Rating: important References: * bsc#1258637 Cross-References: * CVE-2026-26996 CVSS scores: * CVE-2026-26996 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-26996 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-26996 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-26996 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for cockpit-subscriptions fixes the following issue: * CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-555=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-555=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (noarch) * cockpit-subscriptions-12.1-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * cockpit-subscriptions-12.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-26996.html *https://bugzilla.suse.com/show_bug.cgi?id=1258637 . Critical update for SUSE cockpit-subscriptions addresses important ReDoS issue. Ensure your system is secure and up to date promptly.. SUSE cockpit-subscriptions ReDoS update important security. . Severity: Important. LinuxSecurity.com Team
Apr 21, 2026
•Important
SuSE
202
security advisorymoderatesecurity issueopenSUSE Tumbleweed conftest Moderate CVE-2026-33747 Threat 2026-10472-1
An update that solves one vulnerability can now be installed.. # conftest-0.67.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10472-1 Rating: moderate Cross-References: * CVE-2026-33747 CVSS scores: * CVE-2026-33747 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-33747 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * conftest 0.67.1-2.1 * conftest-bash-completion 0.67.1-2.1 * conftest-fish-completion 0.67.1-2.1 * conftest-zsh-completion 0.67.1-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33747.html . Update for openSUSE Tumbleweed addresses moderate security issue in conftest package, ensuring enhanced system safety.. openSUSE security advisory, conftest update, moderate security issue, system safety. . LinuxSecurity.com Team
Apr 02, 2026
OpenSUSE
217
security advisoryimportantsystem updateOracle Linux 10 ELSA-2026-1842 Important Node.js 24 Security Update
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-1842 http://linux.oracle.com/errata/ELSA-2026-1842.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: nodejs24-24.13.0-1.0.1.el10_1.x86_64.rpm nodejs24-devel-24.13.0-1.0.1.el10_1.x86_64.rpm nodejs24-docs-24.13.0-1.0.1.el10_1.noarch.rpm nodejs24-full-i18n-24.13.0-1.0.1.el10_1.x86_64.rpm nodejs24-libs-24.13.0-1.0.1.el10_1.x86_64.rpm nodejs24-npm-11.6.2-1.24.13.0.1.0.1.el10_1.noarch.rpm aarch64: nodejs24-24.13.0-1.0.1.el10_1.aarch64.rpm nodejs24-devel-24.13.0-1.0.1.el10_1.aarch64.rpm nodejs24-docs-24.13.0-1.0.1.el10_1.noarch.rpm nodejs24-full-i18n-24.13.0-1.0.1.el10_1.aarch64.rpm nodejs24-libs-24.13.0-1.0.1.el10_1.aarch64.rpm nodejs24-npm-11.6.2-1.24.13.0.1.0.1.el10_1.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/nodejs24-24.13.0-1.0.1.el10_1.src.rpm Related CVEs: CVE-2025-55130 CVE-2025-55131 CVE-2025-55132 CVE-2025-59465 CVE-2025-59466 CVE-2026-21637 Description of changes: [1:24.13.0-1.0.1] - Update upstream references [1:24.13.0-1] - Update to 24.13.0 [1:24.11.1-2] - makefile: change package manager to RH one _______________________________________________ El-errata mailing list
Feb 05, 2026
•Important
Oracle
100
security advisorymoderatepatchopenSUSE: govulncheck-vulndb Moderate Update Advisory 2026:0142-1
An update that contains one feature can now be installed.. # Security update for govulncheck-vulndb Announcement ID: SUSE-SU-2026:0142-1 Release Date: 2026-01-17T07:33:52Z Rating: moderate References: * jsc#PED-11136 Affected Products: * openSUSE Leap 15.6 An update that contains one feature can now be installed. ## Description: This update for govulncheck-vulndb fixes the following issues: * Update to version 0.0.20260114T191543 2026-01-14T19:15:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4248 CVE-2025-62690 GHSA-q66g-q98c-q454 * GO-2025-4251 CVE-2025-63389 GHSA-f6mr-38g8-39rg * GO-2026-4273 CVE-2025-14987 GHSA-hmhp-gh8m-c8xp * Update to version 0.0.20260113T164240 2026-01-13T16:42:40Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4269 CVE-2025-15107 GHSA-43h9-hc38-qph5 * GO-2025-4272 CVE-2025-14986 GHSA-p2gr-hm8g-q772 * GO-2026-4274 CVE-2025-69413 GHSA-pc73-rj2c-wvf9 * GO-2026-4275 CVE-2025-14273 GHSA-qvmc-92vg-6r35 * GO-2026-4277 CVE-2026-21483 GHSA-jmr4-p576-v565 * GO-2026-4278 CVE-2024-6717 GHSA-5mqx-rpxv-mvxj * GO-2026-4279 GHSA-4c5f-9mj4-m247 * GO-2026-4280 GHSA-hjr9-wj7v-7hv8 * GO-2026-4281 CVE-2025-62877 GHSA-6g8q-hp2j-gvwv * GO-2026-4283 CVE-2025-68954 GHSA-8c39-xppg-479c * GO-2026-4284 CVE-2026-21859 GHSA-8v65-47jx-7mfr * GO-2026-4285 GHSA-gg4x-fgg2-h9w9 * GO-2026-4286 CVE-2026-0650 GHSA-rwp9-5g7q-73q3 * GO-2026-4287 CVE-2026-21885 GHSA-xwh2-742g-w3wp * GO-2026-4289 CVE-2025-68151 GHSA-527x-5wrf-22m2 * GO-2026-4290 CVE-2026-22253 GHSA-6jm8-x3g6-r33j * GO-2026-4292 CVE-2026-22688 GHSA-78h3-63c4-5fqc * GO-2026-4293 CVE-2026-22687 GHSA-pcwc-3fw3-8cqv * GO-2026-4295 CVE-2017-18895 GHSA-h742-xx59-r9pq * GO-2026-4296 CVE-2017-18893 GHSA-887v-xh2x-47cm * GO-2026-4297 CVE-2017-18894 GHSA-gg42-mwr6-p82c * GO-2026-4298 CVE-2017-18891 GHSA-vrh2-rprg-rgc6 * GO-2026-4299 CVE-2017-18896 GHSA-63wg-qmrv-7q66 * GO-2026-4300CVE-2017-18898 GHSA-9589-mq83-f749 * GO-2026-4301 CVE-2017-18897 GHSA-f7c3-7vp3-44p6 * GO-2026-4302 CVE-2017-18904 GHSA-8pff-p3gx-w4jf * GO-2026-4303 CVE-2017-18900 GHSA-8q4v-35v6-g8wr * GO-2026-4304 CVE-2017-18901 GHSA-c253-8hr4-r8v9 * GO-2026-4306 CVE-2017-18905 GHSA-g24c-fx4v-xg9w * GO-2026-4308 CVE-2025-60538 GHSA-mw8h-g64c-rxv4 * GO-2026-4309 CVE-2026-22703 GHSA-whqx-f9j3-ch6m ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-142=1 ## Package List: * openSUSE Leap 15.6 (noarch) * govulncheck-vulndb-0.0.20260114T191543-150000.1.137.1 ## References: * https://jira.suse.com/browse/PED-11136 . SUSE updates govulncheck-vulndb patch with moderate severity focusing on recent vulnerabilities and security enhancements.. SUSE Update, govulncheck-vulndb, openSUSE Patch, Moderate Severity. . LinuxSecurity.com Team
Jan 19, 2026
SuSE
89
security advisoryfedoraupdateFedora 42: qt5-qtcharts Update for Bugfix 2025-976ccd79ae - Critical Fix
Qt 5.15.18 bugfix release. Qt5 WebEngine update to 5.15.19.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-976ccd79ae 2025-11-06 02:22:59.541317+00:00 -------------------------------------------------------------------------------- Name : qt5-qtcharts Product : Fedora 42 Version : 5.15.18 Release : 1.fc42 URL : http://www.qt.io Summary : Qt5 - Charts component Description : Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGraphicsWidget, or QML types. Users can easily create impressive graphs by selecting one of the charts themes. -------------------------------------------------------------------------------- Update Information: Qt 5.15.18 bugfix release. Qt5 WebEngine update to 5.15.19. -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 4 2025 Jan Grulich - 5.15.18-1 - 5.15.18 * Fri Jul 25 2025 Fedora Release Engineering - 5.15.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-976ccd79ae' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 06, 2025
•Informational
Fedora
89
security advisorysecurity issuefedoraFedora 43: rust-attribute-derive Critical Update for 2025-4154ea83d0
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydantic 2.12.3. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-4154ea83d0 2025-11-05 02:09:57.817569+00:00 -------------------------------------------------------------------------------- Name : rust-attribute-derive Product : Fedora 43 Version : 0.10.5 Release : 1.fc43 URL : https://crates.io/crates/attribute-derive Summary : Clap like parsing for attributes in proc-macros Description : Clap like parsing for attributes in proc-macros. -------------------------------------------------------------------------------- Update Information: uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydantic 2.12.3 Blog post maturin 1.9.6 https://github.com/PyO3/maturin/blob/v1.9.6/Changelog.md python-typing-inspection 0.4.2 (2025-10-01) Add typing_objects.is_noextraitems() python-jiter 0.11.0 https://github.com/pydantic/jiter/releases/tag/v0.11.0 python-pydantic-extra-types 2.10.6 https://github.com/pydantic/pydantic-extra-types/releases/tag/v2.10.6 Typer 0.20.0 Features \u2728 Enable command suggestions on typo by default. Upgrades \u2b06\ufe0f Add (official) support for Python 3.14. Internal Assorted small enhancements. FastAPI 0.120.1 Upgrades \u2b06\ufe0f Bump Starlette to
Nov 05, 2025
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!