Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorycriticalRed Hat Enterprise Linux

Red Hat Enterprise Linux 7 RHSA-2017:0558-01 Critical: Firefox Web Issue

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Critical: firefox security update Advisory ID: RHSA-2017:0558-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2017:0558.html Issue date: 2017-03-17 CVE Names: CVE-2017-5428 ==================================================================== 1. Summary: An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Mozilla Firefox is an open source web browser. Security Fix(es): * A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-5428) Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Chaitin Security Research Lab via Trend Micro's Zero DayInitiative as the original reporters. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1433202 - CVE-2017-5428 Mozilla: integer overflow in createImageBitmap() (MFSA 2017-08) 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: firefox-52.0-5.el7_3.src.rpm x86_64: firefox-52.0-5.el7_3.x86_64.rpm firefox-debuginfo-52.0-5.el7_3.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: firefox-52.0-5.el7_3.i686.rpm firefox-debuginfo-52.0-5.el7_3.i686.rpm Red Hat Enterprise Linux Server (v. 7): Source: firefox-52.0-5.el7_3.src.rpm aarch64: firefox-52.0-5.el7_3.aarch64.rpm firefox-debuginfo-52.0-5.el7_3.aarch64.rpm ppc64: firefox-52.0-5.el7_3.ppc64.rpm firefox-debuginfo-52.0-5.el7_3.ppc64.rpm ppc64le: firefox-52.0-5.el7_3.ppc64le.rpm firefox-debuginfo-52.0-5.el7_3.ppc64le.rpm s390x: firefox-52.0-5.el7_3.s390x.rpm firefox-debuginfo-52.0-5.el7_3.s390x.rpm x86_64: firefox-52.0-5.el7_3.x86_64.rpm firefox-debuginfo-52.0-5.el7_3.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: firefox-52.0-5.el7_3.ppc.rpm firefox-debuginfo-52.0-5.el7_3.ppc.rpm s390x: firefox-52.0-5.el7_3.s390.rpm firefox-debuginfo-52.0-5.el7_3.s390.rpm x86_64: firefox-52.0-5.el7_3.i686.rpm firefox-debuginfo-52.0-5.el7_3.i686.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: firefox-52.0-5.el7_3.src.rpm x86_64: firefox-52.0-5.el7_3.x86_64.rpm firefox-debuginfo-52.0-5.el7_3.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: firefox-52.0-5.el7_3.i686.rpm firefox-debuginfo-52.0-5.el7_3.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2017-5428 https://access.redhat.com/security/updates/classification/#critical https://www.mozilla.org/en-US/security/advisories/mfsa2017-08/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2017 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFYzGGjXlSAg2UNWIIRAiy9AKCpeaKmIcfQkfh/0cfKBmmf75ZYFACfdNsp /cWFCFUcYQADTjlNKWGSlN0=pZC8 -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Important security patch released for Firefox on Red Hat Enterprise Linux to fix a vulnerability related to web content processing.. Red Hat Enterprise Linux, Firefox Update, Critical Security Patch, Web Content Flaw. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 17, 2017 •Critical Red Hat
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorycritical issuesecurity update

Scientific Linux: SLSA-2014:0448 Critical: Firefox Security Fix

Critical: firefox security update. Date: Tue, 29 Apr 2014 11:10:56 -0500 Reply-To: Bonnie King Sender: Security Errata for Scientific Linux From: Bonnie King Subject: FASTBUGS for SL 5x i386, x86_64 now available Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. In-Reply-To: MIME-Version: 1.0 The following FASTBUGS have been uploaded to i386: gfs2-utils-0.1.62-39.el5_10.1.i386.rpm openscap-1.0.8-1.el5_10.i386.rpm openscap-devel-1.0.8-1.el5_10.i386.rpm openscap-engine-sce-1.0.8-1.el5_10.i386.rpm openscap-engine-sce-devel-1.0.8-1.el5_10.i386.rpm openscap-extra-probes-1.0.8-1.el5_10.i386.rpm openscap-python-1.0.8-1.el5_10.i386.rpm openscap-utils-1.0.8-1.el5_10.i386.rpm x86_64: gfs2-utils-0.1.62-39.el5_10.1.x86_64.rpm openscap-1.0.8-1.el5_10.i386.rpm openscap-1.0.8-1.el5_10.x86_64.rpm openscap-devel-1.0.8-1.el5_10.i386.rpm openscap-devel-1.0.8-1.el5_10.x86_64.rpm openscap-engine-sce-1.0.8-1.el5_10.x86_64.rpm openscap-engine-sce-devel-1.0.8-1.el5_10.x86_64.rpm openscap-extra-probes-1.0.8-1.el5_10.x86_64.rpm openscap-python-1.0.8-1.el5_10.x86_64.rpm openscap-utils-1.0.8-1.el5_10.x86_64.rpm Date: Wed, 30 Apr 2014 13:55:56 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Critical: firefox on SL5.x, SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Critical: firefox security update Advisory ID: SLSA-2014:0448-1 Issue Date: 2014-04-29 CVE Numbers: CVE-2014-1518 CVE-2014-1523 CVE-2014-1524 CVE-2014-1529 CVE-2014-1530 CVE-2014-1531 CVE-2014-1532 -- Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2014-1518, CVE-2014-1524, CVE-2014-1529, CVE-2014-1531) A use-after-free flaw was found in the way Firefox resolved hosts in certain circumstances. An attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code with theprivileges of the user running Firefox. (CVE-2014-1532) An out-of-bounds read flaw was found in the way Firefox decoded JPEG images. Loading a web page containing a specially crafted JPEG image could cause Firefox to crash. (CVE-2014-1523) A flaw was found in the way Firefox handled browser navigations through history. An attacker could possibly use this flaw to cause the address bar of the browser to display a web page name while loading content from an entirely different web page, which could allow for cross-site scripting (XSS) attacks. (CVE-2014-1530) After installing the update, Firefox must be restarted for the changes to take effect. -- SL5 x86_64 firefox-24.5.0-1.el5_10.i386.rpm firefox-24.5.0-1.el5_10.x86_64.rpm firefox-debuginfo-24.5.0-1.el5_10.i386.rpm firefox-debuginfo-24.5.0-1.el5_10.x86_64.rpm i386 firefox-24.5.0-1.el5_10.i386.rpm firefox-debuginfo-24.5.0-1.el5_10.i386.rpm SL6 x86_64 firefox-24.5.0-1.el6_5.i686.rpm firefox-24.5.0-1.el6_5.x86_64.rpm firefox-debuginfo-24.5.0-1.el6_5.i686.rpm firefox-debuginfo-24.5.0-1.el6_5.x86_64.rpm i386 firefox-24.5.0-1.el6_5.i686.rpm firefox-debuginfo-24.5.0-1.el6_5.i686.rpm - Scientific Linux Development Team . Important security patch issued for Firefox on Scientific Linux SL5.x and SL6.x correcting several vulnerabilities.. firefox security update, critical issue linux, SL5.x vulnerabilities, SL6.x firefox patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 30, 2014 •Critical Scientific Linux
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics