Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 20: 2015-8577 Moderate: Bugfix for Torque Service Issues

Bugfix - #1215207 create/install service files for these. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-8577 2015-05-20 14:44:09 -------------------------------------------------------------------------------- Name : torque Product : Fedora 20 Version : 4.2.10 Release : 3.fc20 URL : Summary : Tera-scale Open-source Resource and QUEue manager Description : TORQUE (Tera-scale Open-source Resource and QUEue manager) is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U.S. Dept of Energy, Sandia, PNNL, U of Buffalo, TeraGrid, and many other leading edge HPC organizations. This package holds just a few shared files and directories. -------------------------------------------------------------------------------- Update Information: Bugfix - #1215207 create/install service files for these -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2015 David Brown - 4.2.10-3 - Bugfix - #1215207 create/install service files for these - Bugfix - #1117263 qmgr aborts in some instances - Bugfix - #1144396 Hey! Version Bump! - Bugfix - #1215992 more service scripts - Bugfix - #1216037 fixed permissions on directories - Bugfix - #1149045 hopefully these are all fixed now - Bugfix - #965513 calling this one fixed... * Fri Apr 24 2015 David Brown - 4.2.10-2 - Bugfix - #1154413 make manipulating services better. * Mon Apr 6 2015 David Brown - 4.2.10-1 - Updated upstream version * Thu Apr 2 2015 David Brown - 4.2.8-3 - Version bump to merge from previous version * Thu Mar 26 2015 Richard Hughes - 4.2.8-2 - Add an AppData file for the software center * Tue Oct 14 2014 David Brown - 4.2.8-2 - merged fedora latest into epel - This breaks old configs and should be treatedcarefully * Wed Oct 1 2014 Haïkel Guémar - 3.0.4-6 - Fix CVE-2013-4319 (RHBZ #1005918, #1005919) * Fri Sep 5 2014 Haïkel Guémar - 3.0.4-5 - Fix CVE-2013-4495 (RHBZ #1029752) * Mon Sep 1 2014 Haïkel Guémar - 4.2.8-1 - upstream 4.2.8 * Mon Aug 18 2014 Fedora Release Engineering - 4.2.6.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Thu Jul 17 2014 Ralf Corsépius - 4.2.6.1-5 - Reflect upstream URL and Source0 having changed. * Thu Jul 17 2014 Ralf Corsépius - 4.2.6.1-4 - Append -DUSE_INTERP_RESULT -DUSE_INTERP_ERRORLINE to CFLAGS to work-around Tcl/Tk-8.6 incompatibilities (FTFFS RHBZ#1107455). - Pass --without-debug to %configure to let configure pass through %optflags (RHBZ#1074571). - Fix twice listed files in *-devel. * Sun Jun 8 2014 Fedora Release Engineering - 4.2.6.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed May 21 2014 Jaroslav Škarvada - 4.2.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86 * Sun Jan 12 2014 Haïkel Guémar - 4.2.6.1-1 - upstream 4.2.6.1 * Wed Nov 13 2013 Haïkel Guémar - 4.2.6-1 - upstream 4.2.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1215207 - pbs_server does not start trqauthd https://bugzilla.redhat.com/show_bug.cgi?id=1215207 [ 2 ] Bug #1117263 - torque qmgr aborts on server commands while jobs are running https://bugzilla.redhat.com/show_bug.cgi?id=1117263 [ 3 ] Bug #1144396 - torque-4.2.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1144396 [ 4 ] Bug #1215992 - torque-client (4.x) should package trqauthd service https://bugzilla.redhat.com/show_bug.cgi?id=1215992 [ 5 ] Bug #1216037 - permissions on some /var/lib/torque/ sub-directories https://bugzilla.redhat.com/show_bug.cgi?id=1216037 [ 6 ] Bug #1149045 - CVE-2014-3684 torque: non-root users able to kill any process on any node in a job [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1149045 [ 7 ] Bug #965513 - torque package should be built with PIE flags https://bugzilla.redhat.com/show_bug.cgi?id=965513 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update torque' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Here's an overview of the recent security enhancements for Torque in Fedora 20, emphasizing bug corrections and performance boosts. Keep informed!. Torque Update, Fedora Security, Resource Manager Bugfix. . LinuxSecurity.com Team

Calendar%202 May 30, 2015 Fedora
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianexploit

Debian: DSA-3058-1 Moderate: Torque Process Control Security Issue

Chad Vizino reported a vulnerability in torque, a PBS-derived batch processing queueing system. A non-root user could exploit the flaw in the tm_adopt() library call to kill any process, including root-owned ones on any node in a job. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3058-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Salvatore Bonaccorso October 27, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : torque CVE ID : CVE-2014-3684 Debian Bug : 763922 Chad Vizino reported a vulnerability in torque, a PBS-derived batch processing queueing system. A non-root user could exploit the flaw in the tm_adopt() library call to kill any process, including root-owned ones on any node in a job. For the stable distribution (wheezy), this problem has been fixed in version 2.4.16+dfsg-1+deb7u4. For the unstable distribution (sid), this problem has been fixed in version 2.4.16+dfsg-1.5. We recommend that you upgrade your torque packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . - ------------------------------------------------------------------------- Debian Security Advisory. vizino, reported, vulnerability, torque, pbs-derived, batch, processing, queueing, system. . LinuxSecurity.com Team

Calendar%202 Oct 27, 2014 Debian
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorysecurity updatebuffer overflow

Debian: DSA-2936-1 Critical: Torque Buffer Overflow Danger

John Fitzpatrick from MWR Labs reported a stack-based buffer overflow vulnerability in torque, a PBS-derived batch processing queueing system. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code with root privileges. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2936-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : torque CVE ID : CVE-2014-0749 Debian Bug : 748827 John Fitzpatrick from MWR Labs reported a stack-based buffer overflow vulnerability in torque, a PBS-derived batch processing queueing system. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code with root privileges. For the oldstable distribution (squeeze), this problem has been fixed in version 2.4.8+dfsg-9squeeze4. For the stable distribution (wheezy), this problem has been fixed in version 2.4.16+dfsg-1+deb7u3. For the unstable distribution (sid), this problem has been fixed in version 2.4.16+dfsg-1.4. We recommend that you upgrade your torque packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Severe vulnerability found in torque could lead to unauthorized code execution. It's essential to update your torque packages without delay to ensure protection.. Debian Advisories, Torque Security Updates, Buffer Overflow Risks. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 23, 2014 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian: DSA-2796-1 Major Security Issue: Torque Remote Exec Vulnerability

Matt Ezell from Oak Ridge National Labs reported a vulnerability in torque, a PBS-derived batch processing queueing system. A user could submit executable shell commands on the tail of what is . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : torque Vulnerability : arbitrary code execution Problem type : remote Debian-specific: no CVE ID : CVE-2013-4495 Debian Bug : 729333 Matt Ezell from Oak Ridge National Labs reported a vulnerability in torque, a PBS-derived batch processing queueing system. A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbs_server. For the oldstable distribution (squeeze), this problem has been fixed in version 2.4.8+dfsg-9squeeze3. For the stable distribution (wheezy), this problem has been fixed in version 2.4.16+dfsg-1+deb7u2. For the unstable distribution (sid), this problem has been fixed in version 2.4.16+dfsg-1.3. We recommend that you upgrade your torque packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest torque security update for Debian effectively fixes vulnerabilities allowing arbitrary code execution in batch processing, boosting system integrity and safety.. Debian Updates,Torque Security,Batch Processing,Code Execution,Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 13, 2013 •Important Debian
Banner 1 1028x280 1708121660 1771599717
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianremote threat

Debian: DSA-2775-2 High: Apache Security Exposure Identified

John Fitzpatrick of MWR InfoSecurity discovered an authentication bypass vulnerability in torque, a PBS-derived batch processing queueing system. The torque authentication model revolves around the use of privileged . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2770-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Salvatore Bonaccorso October 09, 2013 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : torque Vulnerability : authentication bypass Problem type : remote Debian-specific: no CVE ID : CVE-2013-4319 Debian Bug : 722306 John Fitzpatrick of MWR InfoSecurity discovered an authentication bypass vulnerability in torque, a PBS-derived batch processing queueing system. The torque authentication model revolves around the use of privileged ports. If a request is not made from a privileged port then it is assumed not to be trusted or authenticated. It was found that pbs_mom does not perform a check to ensure that connections are established from a privileged port. A user who can run jobs or login to a node running pbs_server or pbs_mom can exploit this vulnerability to remotely execute code as root on the cluster by submitting a command directly to a pbs_mom daemon to queue and run a job. For the oldstable distribution (squeeze), this problem has been fixed in version 2.4.8+dfsg-9squeeze2. For the stable distribution (wheezy), this problem has been fixed in version 2.4.16+dfsg-1+deb7u1. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your torque packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . -------------------------------------------------------------------------- Debian Security Advisory. fitzpatrick, infosecurity, authentication, bypass, vulnerability, torque. . LinuxSecurity.com Team

Calendar%202 Oct 09, 2013 Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics