Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 CUPS Critical Control Character Injection CVE-2026-34980

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579-1

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisoryupdateimportant

Rocky Linux 9 RLSA-2024:4165 Important: pki-core Authentication Fix

Important: pki-core security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:4165", "synopsis": "Important: pki-core security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for pki-core.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* dogtag ca: token authentication bypass vulnerability (CVE-2023-4727)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2232218", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2232218", "description": ""}], "cves": [{"name": "CVE-2023-4727", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2023-4727", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-07-03T21:27:28.324678Z", "rpms": {"Rocky Linux 9": {"nvras": ["idm-pki-acme-0:11.5.0-2.el9_4.noarch.rpm", "idm-pki-base-0:11.5.0-2.el9_4.noarch.rpm", "idm-pki-ca-0:11.5.0-2.el9_4.noarch.rpm", "idm-pki-est-0:11.5.0-2.el9_4.noarch.rpm", "idm-pki-java-0:11.5.0-2.el9_4.noarch.rpm", "idm-pki-kra-0:11.5.0-2.el9_4.noarch.rpm", "idm-pki-server-0:11.5.0-2.el9_4.noarch.rpm", "idm-pki-tools-0:11.5.0-2.el9_4.aarch64.rpm", "idm-pki-tools-0:11.5.0-2.el9_4.ppc64le.rpm", "idm-pki-tools-0:11.5.0-2.el9_4.s390x.rpm", "idm-pki-tools-0:11.5.0-2.el9_4.x86_64.rpm", "idm-pki-tools-debuginfo-0:11.5.0-2.el9_4.aarch64.rpm", "idm-pki-tools-debuginfo-0:11.5.0-2.el9_4.ppc64le.rpm", "idm-pki-tools-debuginfo-0:11.5.0-2.el9_4.s390x.rpm","idm-pki-tools-debuginfo-0:11.5.0-2.el9_4.x86_64.rpm", "pki-core-0:11.5.0-2.el9_4.src.rpm", "python3-idm-pki-0:11.5.0-2.el9_4.noarch.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. An essential pki-core security patch for Rocky Linux 9 resolves token verification vulnerabilities. Maintain your safety!. pki core update, Rocky Linux security, authentication bypass fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 03, 2024 •Important Rocky Linux
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderate severityRed Hat OpenStack

Red Hat OpenStack 3.0 - RHSA-2014:0368-01 Moderate Token Auth Issues

Updated openstack-keystone packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openstack-keystone security update Advisory ID: RHSA-2014:0368-01 Product: Red Hat OpenStack Advisory URL: https://access.redhat.com/errata/RHSA-2014:0368.html Issue date: 2014-04-03 CVE Names: CVE-2013-6391 CVE-2014-2237 ==================================================================== 1. Summary: Updated openstack-keystone packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: OpenStack 3 - noarch 3. Description: The OpenStack Identity service (keystone) authenticates and authorizes OpenStack users by keeping track of users and their permitted activities. The Identity service supports multiple forms of authentication including user name and password credentials, token-based systems, and AWS-style logins. It was found that the ec2token API in keystone, which is used to generate EC2-style (Amazon Elastic Compute Cloud) credentials, could generate a token not scoped to a particular trust when creating a token from a received trust-scoped token. A remote attacker could use this flaw to retrieve a token that elevated their privileges to all of the trustor's roles. Note that only OpenStack Identity setups that have EC2-style authentication enabledwere affected. (CVE-2013-6391) It was found that the the memcache token back end of OpenStack Identity did not correctly invalidate a revoked trust token, allowing users with revoked tokens to retain access to services they should no longer be able to access. Note that only OpenStack Identity setups using the memcache back end for tokens were affected. (CVE-2014-2237) Red Hat would like to thank Jeremy Stanley of the OpenStack Project for reporting CVE-2013-6391. Upstream acknowledges Steven Hardy of Red Hat as the original reporter of CVE-2013-6391. All openstack-keystone users are advised to upgrade to these updated packages, which correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1039164 - CVE-2013-6391 OpenStack Keystone: trust circumvention through EC2-style tokens 1071434 - CVE-2014-2237 openstack-keystone: trustee token revocation does not work with memcache backend 6. Package List: OpenStack 3: Source: noarch: openstack-keystone-2013.1.5-2.el6ost.noarch.rpm openstack-keystone-doc-2013.1.5-2.el6ost.noarch.rpm python-keystone-2013.1.5-2.el6ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2013-6391 https://access.redhat.com/security/cve/CVE-2014-2237 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4(GNU/Linux) iD8DBQFTPdC4XlSAg2UNWIIRArlaAJ9QJlDuPVc3nf9v874hh/P2s42HdgCdGvuX Z3gRPxMSRKgmgOwDD77R8WU=C52Y -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Important update released for Red Hat OpenStack nova addressing two vulnerabilities that impact cloud management functionalities.. openstack keystone update, security advisory Red Hat, token privilege management. . LinuxSecurity.com Team

Calendar%202 Apr 03, 2014 Red Hat
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics