Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 12 articles for you...
197
security advisorydebianarbitrary codeDebian 11 Thunderbird Security Fix DLA-4594-1 Multiple Code Execution
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For Debian 11 bullseye, these problems have been fixed in version 1:140.11.0esr-1~deb11u1. We recommend that you upgrade your thunderbird packages.. Debian LTS Advisory DLA-4594-1
May 22, 2026
•Critical
Debian LTS
197
security advisoryinformation leakdebianDebian 11 mbedtls DLA-4551-1 CVE-2025-59438 Timing Leak
CVE-2025-59438 Observable Timing Discrepancy. The presence of a padding error could leak through timings, enabling the attacker to recover information about the secret. CVE-2026-34871. Debian LTS Advisory DLA-4551-1
Apr 27, 2026
•Important
Debian LTS
91
security advisorygentooupdate recommendedGentoo: GLSA-202407-02 Normal Severity: SDL_ttf Memory Write Issue
A vulnerability has been discovered in SDL_ttf, which can lead to arbitrary memory writes.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202407-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: SDL_ttf: Arbitrary Memory Write Date: July 01, 2024 Bugs: #843434 ID: 202407-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in SDL_ttf, which can lead to arbitrary memory writes. Background ========== SDL_ttf is a wrapper around the FreeType and Harfbuzz libraries, allowing you to use TrueType fonts to render text in SDL applications. Affected packages ================= Package Vulnerable Unaffected ------------------- ------------ ------------ media-libs/sdl2-ttf < 2.20.0 > = 2.20.0 Description =========== A vulnerability has been discovered in SDL_ttf. Please review the CVE identifier referenced below for details. Impact ====== SDL_ttf was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file. Workaround ========== There is no known workaround at this time. Resolution ========== All SDL_ttf users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-libs/sdl2-ttf-2.20.0" References ========== [ 1 ] CVE-2022-27470 https://nvd.nist.gov/vuln/detail/CVE-2022-27470 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202407-02 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines isof utmost importance to us. Any security concerns should be addressed to
Jul 01, 2024
Gentoo
89
security advisorysecurity issuefedoraFedora 0.9.16 Critical: Ethereal Buffer Overflow Fix Released
These updated ethereal packages fix a security problem found in versions prior to 0.9.16. It also fixes several other minor bugs and problems. . ---------------------------------------------------------------------Fedora Update Notification FEDORA-2003-022 2003-11-25 ---------------------------------------------------------------------Name : ethereal Version : 0.9.16 Release : 2.FC1.1 Summary : Network traffic analyzer Description : Ethereal is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for ethereal. A graphical user interface is packaged separately to GTK+ package. ---------------------------------------------------------------------Update Information: These updated ethereal packages fix a security problem found in versions prior to 0.9.16. It also fixes several other minor bugs and problems. All users of ethereal are recommended to update to these newest packages. ---------------------------------------------------------------------* Tue Nov 25 2003 Phil Knirsch 0.9.16-2.FC1.1 - Added BuildRequires for elfutils-devel (#89466). - Fixed buggy desktop entry (#105704). - Fixed out of bound array access (#110749). - Build Fedora core 1 errata for ethereal. * Fri Nov 07 2003 Phil Knirsch 0.9.16-2 - rebuilt * Wed Nov 05 2003 Phil Knirsch 0.9.16-1 - Updated to latest upstream version 0.9.16 ---------------------------------------------------------------------This update can be downloaded from: SRPMS/ethereal-0.9.16-2.FC1.1.src.rpm md5 sum: 4fea34a2e0e7e6c48dde6b2c08de549d i386/ethereal-0.9.16-2.FC1.1.i386.rpm md5 sum: 7e2d061e1e1c08fa6da4ab292647d6b4 i386/ethereal-gnome-0.9.16-2.FC1.1.i386.rpm md5 sum: 0695ec2615b93668fecf2c750770815e i386/debug/ethereal-debuginfo-0.9.16-2.FC1.1.i386.rpm md5 sum: 670e64737be107e8c3e0c138de4c714a This update can also be installedwith the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- . ---------------------------------------------------------------------Fedora Update Notification FEDO. these, updated, ethereal, packages, security, problem, found, versions, prior. . Severity: Critical. LinuxSecurity.com Team
Jun 08, 2023
•Critical
Fedora
197
security advisorybuffer overflowDebianDebian 10 Buster: DLA-3205-1 Moderate: Inetutils Buffer Oversight
Several security vulnerabilities were discovered in inetutils, a collection of common network programs. CVE-2019-0053 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3205-1
Nov 25, 2022
Debian LTS
172
security advisoryUbuntuupdate recommendedUbuntu: 5021-1 High: Curl Connection Handling Risks and Updates
Several security issues were fixed in curl.. =========================================================================Ubuntu Security Notice USN-5021-1 July 22, 2021 curl vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.04 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in curl. Software Description: - curl: HTTP, HTTPS, and FTP client and client libraries Details: Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled TELNET connections when the -t option was used on the command line. Uninitialized data possibly containing sensitive information could be sent to the remote server, contrary to expectations. (CVE-2021-22898, CVE-2021-22925) Harry Sintonen discovered that curl incorrectly reused connections in the connection pool. This could result in curl reusing the wrong connections. (CVE-2021-22924) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.04: curl 7.74.0-1ubuntu2.1 libcurl3-gnutls 7.74.0-1ubuntu2.1 libcurl3-nss 7.74.0-1ubuntu2.1 libcurl4 7.74.0-1ubuntu2.1 Ubuntu 20.04 LTS: curl 7.68.0-1ubuntu2.6 libcurl3-gnutls 7.68.0-1ubuntu2.6 libcurl3-nss 7.68.0-1ubuntu2.6 libcurl4 7.68.0-1ubuntu2.6 Ubuntu 18.04 LTS: curl 7.58.0-2ubuntu3.14 libcurl3-gnutls 7.58.0-2ubuntu3.14 libcurl3-nss 7.58.0-2ubuntu3.14 libcurl4 7.58.0-2ubuntu3.14 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5021-1 CVE-2021-22898, CVE-2021-22924, CVE-2021-22925 PackageInformation: https://launchpad.net/ubuntu/+source/curl/7.74.0-1ubuntu2.1 https://launchpad.net/ubuntu/+source/curl/7.68.0-1ubuntu2.6 https://launchpad.net/ubuntu/+source/curl/7.58.0-2ubuntu3.14 . Numerous vulnerabilities resolved in curl impacting different Ubuntu versions. System update advised for enhanced security.. Curl Security Issues, Ubuntu Patch Updates, Security Recommendations. . LinuxSecurity.com Team
Jul 22, 2021
Ubuntu
91
security advisorydenial of serviceupdateGentoo: GLSA-202101-28 Normal Severity: ncurses Denial of Service
Multiple vulnerabilities have been found in ncurses, the worst of which could result in a Denial of Service condition.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202101-28 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: ncurses: Multiple vulnerabilities Date: January 26, 2021 Bugs: #698210 ID: 202101-28 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in ncurses, the worst of which could result in a Denial of Service condition. Background ========= A console display library. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-apps/ncurses < 6.2 > = 6.2 Description ========== Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Impact ===== Please review the referenced CVE identifiers for details. Workaround ========= There is no known workaround at this time. Resolution ========= All ncurses users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =sys-apps/ncurses-6.2" References ========= [ 1 ] CVE-2019-17594 https://nvd.nist.gov/vuln/detail/CVE-2019-17594 [ 2 ] CVE-2019-17595 https://nvd.nist.gov/vuln/detail/CVE-2019-17595 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202101-28 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuringthe confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jan 25, 2021
Gentoo
91
security advisoryGentoogentooGentoo: GLSA-202012-05 Normal: Chromium And Google Chrome Code Risk
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202012-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Chromium, Google Chrome: Multiple vulnerabilities Date: December 07, 2020 Bugs: #755227, #758368 ID: 202012-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code. Background ========= Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-client/chromium < 87.0.4280.88 > = 87.0.4280.88 2 www-client/google-chrome < 87.0.4280.88 > = 87.0.4280.88 ------------------------------------------------------------------- 2 affected packages Description ========== Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact ===== Please review the referenced CVE identifiers for details. Workaround ========= There is no known workaround at this time. Resolution ========= All Chromium users should upgrade to the latest version: #emerge --sync # emerge --ask --oneshot -v "> =www-client/chromium-87.0.4280.88" All Google Chrome users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v "> =www-client/google-chrome-87.0.4280.88" References ========= [ 1 ] CVE-2020-16014 https://nvd.nist.gov/vuln/detail/CVE-2020-16014 [ 2 ] CVE-2020-16015 https://nvd.nist.gov/vuln/detail/CVE-2020-16015 [ 3 ] CVE-2020-16018 https://nvd.nist.gov/vuln/detail/CVE-2020-16018 [ 4 ] CVE-2020-16019 https://nvd.nist.gov/vuln/detail/CVE-2020-16019 [ 5 ] CVE-2020-16020 https://nvd.nist.gov/vuln/detail/CVE-2020-16020 [ 6 ] CVE-2020-16021 https://nvd.nist.gov/vuln/detail/CVE-2020-16021 [ 7 ] CVE-2020-16022 https://nvd.nist.gov/vuln/detail/CVE-2020-16022 [ 8 ] CVE-2020-16023 https://nvd.nist.gov/vuln/detail/CVE-2020-16023 [ 9 ] CVE-2020-16024 https://nvd.nist.gov/vuln/detail/CVE-2020-16024 [ 10 ] CVE-2020-16025 https://nvd.nist.gov/vuln/detail/CVE-2020-16025 [ 11 ] CVE-2020-16026 https://nvd.nist.gov/vuln/detail/CVE-2020-16026 [ 12 ] CVE-2020-16027 https://nvd.nist.gov/vuln/detail/CVE-2020-16027 [ 13 ] CVE-2020-16028 https://nvd.nist.gov/vuln/detail/CVE-2020-16028 [ 14 ] CVE-2020-16029 https://nvd.nist.gov/vuln/detail/CVE-2020-16029 [ 15 ] CVE-2020-16030 https://nvd.nist.gov/vuln/detail/CVE-2020-16030 [ 16 ] CVE-2020-16031 https://nvd.nist.gov/vuln/detail/CVE-2020-16031 [ 17 ] CVE-2020-16032 https://nvd.nist.gov/vuln/detail/CVE-2020-16032 [ 18 ] CVE-2020-16033 https://nvd.nist.gov/vuln/detail/CVE-2020-16033 [ 19 ] CVE-2020-16034 https://nvd.nist.gov/vuln/detail/CVE-2020-16034 [ 20 ] CVE-2020-16036 https://nvd.nist.gov/vuln/detail/CVE-2020-16036 [ 21 ] CVE-2020-16037 https://nvd.nist.gov/vuln/detail/CVE-2020-16037 [ 22 ] CVE-2020-16038 https://nvd.nist.gov/vuln/detail/CVE-2020-16038 [ 23 ] CVE-2020-16039 https://nvd.nist.gov/vuln/detail/CVE-2020-16039 [ 24 ] CVE-2020-16040 https://nvd.nist.gov/vuln/detail/CVE-2020-16040 [ 25 ] CVE-2020-16041 https://nvd.nist.gov/vuln/detail/CVE-2020-16041 [ 26 ] CVE-2020-16042 https://nvd.nist.gov/vuln/detail/CVE-2020-16042 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202012-05 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Dec 06, 2020
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!