Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Chromedriver Moderate Security Issues Fixed 2026-10958-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed libmozjs Moderate Update CVE-2025-70103

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Perl HTML Parser Moderate CVE-2026-8829 Advisory

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed kernel-devel Moderate Security Issue 2026-10954-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Gleam Moderate Threat Fixed 2026-10953-1

Calendar White Jun 08, 2026
moderate
Ubuntu Large Esm H900
Ubuntu

Ubuntu 25.10 Systemd Critical Arbitrary Code Exec DNS Issues USN-8402-1

Calendar White Jun 08, 2026
Critical
Opensuse Large Esm H800
openSUSE

openSUSE Epiphany Important Password Handling Issue CVE-2023-26081

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS 8399-1 Pillow Denial of Service Risk CVE-2026-42308

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS Poppler Critical DoS Code Execution Vuln USN-8400-1

Calendar White Jun 08, 2026
Critical
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag 1security advisorycriticalprivilege escalation

SUSE: 2022:2900-2 Critical: Major Attire Security Update Released

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for trousers______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2800-1 Rating: important References: #1164472 Cross-References: CVE-2020-24330 CVSS scores: CVE-2020-24330 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-24330 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for trousers fixes the following issues: - CVE-2020-24330: Fixed a potential tss user to root privilege escalation issue (bsc#1164472). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-2800=1 Package List: - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libtspi1-0.3.13-3.3.1 libtspi1-32bit-0.3.13-3.3.1 libtspi1-debuginfo-0.3.13-3.3.1 libtspi1-debuginfo-32bit-0.3.13-3.3.1 trousers-0.3.13-3.3.1 trousers-debuginfo-0.3.13-3.3.1 trousers-debugsource-0.3.13-3.3.1 References: https://www.suse.com/security/cve/CVE-2020-24330.html https://bugzilla.suse.com/1164472 . SUSE Security Patch addresses a vulnerability concerning privilege escalation in trousers, essential for maintaining system security and integrity.. SUSE Security Update, Privilege Escalation, Trousers Patch. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 12, 2022 •Important SuSE
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryupdateFedora

Fedora 33: Security Advisory for Trousers Fixing Critical Access Issues

Security update for trousers. Fixes for the following CVEs, plus a fix for an annocheck warning. - Fix for CVE-2020-24330 (RHBZ#1874824) - Fix for CVE-2020-24331 (RHBZ#1870057) - Fix for CVE-2020-24332 (RHBZ#1870053). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-ab3dace708 2020-11-05 01:02:23.473495 --------------------------------------------------------------------------------Name : trousers Product : Fedora 33 Version : 0.3.14 Release : 4.fc33 URL : Summary : TCG's Software Stack v1.2 Description : TrouSerS is an implementation of the Trusted Computing Group's Software Stack (TSS) specification. You can use TrouSerS to write applications that make use of your TPM hardware. TPM hardware can create, store and use RSA keys securely (without ever being exposed in memory), verify a platform's software state using cryptographic hashes and more. --------------------------------------------------------------------------------Update Information: Security update for trousers. Fixes for the following CVEs, plus a fix for an annocheck warning. - Fix for CVE-2020-24330 (RHBZ#1874824) - Fix for CVE-2020-24331 (RHBZ#1870057) - Fix for CVE-2020-24332 (RHBZ#1870053) --------------------------------------------------------------------------------ChangeLog: * Thu Oct 29 2020 Jerry Snitselaar - 0.3.14-4 - Fix for CVE-2020-24330 (RHBZ#1874824) - Fix for CVE-2020-24331 (RHBZ#1870057) - Fix for CVE-2020-24332 (RHBZ#1870053) --------------------------------------------------------------------------------References: [ 1 ] Bug #1870053 - CVE-2020-24332 trousers: tss user can be used to create or corrupt existing files, this could lead to DoS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1870053 [ 2 ] Bug #1870057 - CVE-2020-24331 trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root[fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1870057 [ 3 ] Bug #1874824 - CVE-2020-24330 trousers: fails to drop the root gid privilege when no longer needed [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1874824 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-ab3dace708' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora enhances packages to resolve various bugs, including severe security flaws. Crucial for applications relying on encrypted storage.. TrouserS Update, Fedora Security Fixes, Trusted Computing Group. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 04, 2020 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
202
Ls Advisories Opensuse Esm H240
Price Tag 1security advisorymoderatepackage update

openSUSE Leap 15.1: openSUSE-SU-2020:0744-1 Moderate: Trousers Local Attack

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for trousers______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0744-1 Rating: moderate References: #1157651 Cross-References: CVE-2019-18898 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for trousers fixes the following issues: - CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-744=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libtspi1-0.3.14-lp151.4.6.1 libtspi1-debuginfo-0.3.14-lp151.4.6.1 trousers-0.3.14-lp151.4.6.1 trousers-debuginfo-0.3.14-lp151.4.6.1 trousers-debugsource-0.3.14-lp151.4.6.1 trousers-devel-0.3.14-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libtspi1-32bit-0.3.14-lp151.4.6.1 libtspi1-32bit-debuginfo-0.3.14-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2019-18898.html https://bugzilla.suse.com/1157651 -- . A patch for Ubuntu addresses a significant remote vulnerability in gdm to enhance your device's security.. openSUSE Security Update, trousers vulnerability, package management. . LinuxSecurity.com Team

Calendar 2 May 29, 2020 OpenSUSE
202
Ls Advisories Opensuse Esm H240
Price Tag 1security advisorymoderatelocal attack

openSUSE 15.1: 2020:0015-1 Moderate: Trousers Security Update

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for trousers______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0015-1 Rating: moderate References: #1157651 Cross-References: CVE-2019-18898 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for trousers fixes the following issues: - CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-15=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libtspi1-0.3.14-lp151.4.3.1 libtspi1-debuginfo-0.3.14-lp151.4.3.1 trousers-0.3.14-lp151.4.3.1 trousers-debuginfo-0.3.14-lp151.4.3.1 trousers-debugsource-0.3.14-lp151.4.3.1 trousers-devel-0.3.14-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libtspi1-32bit-0.3.14-lp151.4.3.1 libtspi1-32bit-debuginfo-0.3.14-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-18898.html https://bugzilla.suse.com/1157651 -- . openSUSE Security Patch addresses moderate vulnerabilities in the trousers library, allowing potential local exploitation risks.. Security Update, System Patch, Threat Mitigation. . LinuxSecurity.com Team

Calendar 2 Jan 13, 2020 OpenSUSE
Banner 4 1028x280 1708121825 1771600306
87
Ls Advisories Debian Esm H240
Price Tag 1security advisorydenial of servicedebian

Debian 2012: DSA-2576-1 Critical: Trousers Denial Of Service

Andy Lutomirski discovered that tcsd (the TPM userspace daemon) was missing a of input validation. Using carefully crafted input, it can lead to a denial of service by making the daemon crash with a segmentation fault. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2576-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Yves-Alexis Perez November 23, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : trousersVulnerability : denial of service Problem type : local Debian-specific: no CVE ID : CVE-2012-0698 Debian Bug : 692649 Andy Lutomirski discovered that tcsd (the TPM userspace daemon) was missing a of input validation. Using carefully crafted input, it can lead to a denial of service by making the daemon crash with a segmentation fault. For the stable distribution (squeeze), this problem has been fixed in version 0.3.5-2+squeeze1. For the testing distribution (wheezy), this problem has been fixed in version 0.3.9-1. For the unstable distribution (sid), this problem has been fixed in version 0.3.9-1. We recommend that you upgrade your trousers packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian DSA-2576-1 advisory highlights trousers update addressing a critical denial of service issue by Andy Lutomirski.. trousers update, denial of service, Debian advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 23, 2012 •Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here