Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderatebuffer overflow

SUSE Linux 7.2/7.3 SA:2003:032 Moderate: WUFTPD Remote Buffer Overflow

There is a single byte buffer overflow in the WU ftp daemon (wuftpd), a widely used ftp server for Linux-like systems.. ______________________________________________________________________________ SuSE Security Announcement Package: wuftpd Announcement-ID: SuSE-SA:2003:032 Date: Thursday, July 31st 2003 18:00 MEST Affected products: 7.2, 7.3 SuSE Linux Enterprise Server 7 SuSE Linux Connectivity Server SuSE Linux Office Server Vulnerability Type: remote buffer overflow Severity (1-10): 7 SuSE default package: no Cross References: CAN-2003-0466 Content of this advisory: 1) security vulnerability resolved: wuftpd problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information Janusz Niewiadomski and Wojciech Purczynski of iSEC Security Research have found a single byte buffer overflow in the Washington University ftp daemon (wuftpd), a widely used ftp server for Linux-like systems. It is yet unclear if this bug is (remotely) exploitable. Positive exploitability may result in a remote root compromise of a system running the wuftpd ftp daemon. Notes: * SuSE Linux products do not contain wuftpd any more starting with SuSE Linux 8.0 and SuSE Linux Enterprise Server 8. The wuftpd package has been substituted by a different server implementation of the file transfer protocol server. * The affected wuftpd packages in products as stated in the header of this announcement actually ship two different wuftpd ftp daemon versions: The older version 2.4.x that is installed as /usr/sbin/wu.ftpd, the newer version 2.6 is installed as /usr/sbin/wu.ftpd-2.6 . The 2.4.x version does not contain the defective parts of the code and is therefore not vulnerable to the weakness found. * If you are using the wuftpd ftp daemon in version 2.4.x, you might want to update the package anyway in order not to risk an insecure configuration once you switch to the newer version. There exists no workaround that can fix this vulnerability on a temporary basis other than just using the 2.4.x version as mentioned above. The proper fix for the weakness is to update the package using the provided update packages. Please download the update package for your distribution and verify its integrity by the methods listed in section 3) of this announcement. Then, install the package using the command "rpm -Fhv file.rpm" to apply the update. Our maintenance customers are being notified individually. The packages are being offered to install from the maintenance web. Intel i386 Platform: SuSE-7.3: 9f786439f4efc289dbaee78a8c873b56 source rpm(s): 6f748bfc27cc44ade2c2044365fb825a SuSE-7.2: 077463a6387d8b596cfedb6f80d765aa source rpm(s): 5bd18ea86422a84338fc1827362e8bdc Sparc Platform: SuSE-7.3: 985a2bdcb25ec5283a00784810b28050 source rpm(s): 49d647216d0f1b22a5a326887d8ef955 PPC Power PC Platform: SuSE-7.3: f8b1276d87cb5dcb4aca89054015a353 source rpm(s): 07ff383965af6b860e5cfda95efa2fce ______________________________________________________________________________ 2) Pending vulnerabilities in SuSE Distributions and Workarounds: - gnats Several security bugs were reported in gnats. The version of gnats that comes with SuSE Linux is not vulnerable to these problems. - kopete Kopete is the KDE instantmessenger. A bug in kopete's gpg plugin can be abused to execute commands remotely. A fix will be available as soon as possible. - wget When handling long URLs, a buffer underrun may occur in the wget program. This underrun may be exploitable remotely. The update packages are available now on our ftp servers. - emacs Due to insecure temporary file handling in the semi and wemi library of GNU Emacs it is possible for a local attacker to overwrite arbitrary files of the user running emacs. The fix is currently being worked on. - ethereal Several remote exploitable bugs were found in the network analyzing tool ethereal. The update packages are available on our ftp servers. - tomcat Wrong file permission and clear passwords in the tomcat default installation allows local users to gain security relevant data by reading the file /opt/jakarta/tomcat/conf/tomcat-users.xml. Please enable password encryption and revoke the read permissions for 'group' and 'others' by adding the following line to /etc/permissions.local: /opt/jakarta/tomcat/conf/tomcat-users.xml wwwrun.root 0700 and run the following command as root: "chkstat -set /etc/permissions.local" - heartbeat A format string bug in heartbeat's debug code can be exploited by a remote attacker if the debug level is high and the heartbeat daemon in configuered in an unsecure manner. The update packages are being tested right now. - freeradius A buffer overflow in the CHAP implementation of freeradius leads to a remotely exploitable security hole which can be abused to execute arbitrary code on the RADIUS server. The update packages are being tested right now. - traceroute(-nanog) An integer overflow in traceroute-nanog can be abused to gain access to the raw ip socket. We are working on the fix. - kdelibs Due to the fact of verifying the IP address instead of the Common Name (CN) field of theX.509 certificate the SSL implementation of KDE 2.2 and earlier is vulnerable to a MiM attack. Only SuSE Linux 7.3 is affected by this problem. Update packages are available on our FTP servers. - man The mandb program which is part of the man package contains a buffer overflow which allows local attackers to execute arbitrary code as man user. New packages are already availabale on our ftp servers. - several minor bug fixes There are alot more minor security updates in the queue. YOU (Yast Online Update) will inform you when they appear. Alternatively you may want to monitor the following website: SUSE – Open-Source-Lösungen für Enterprise Server und Cloud | SUSE or: SUSE – Open-Source-Lösungen für Enterprise Server und Cloud | SUSE ______________________________________________________________________________ 3) standard appendix: authenticity verification, additional information - Package authenticity verification: SuSE update packages are available on many mirror ftp servers all over the world. While this service is being considered valuable and important to the free and open source software community, many users wish to be sure about the origin of the package and its content before installing the package. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or rpm package: 1) md5sums as provided in the (cryptographically signed) announcement. 2) using the internal gpg signatures of the rpm package. 1) execute the command md5sum after you downloaded the file from a SuSE ftp server or its mirrors. Then, compare the resulting md5sum with the one that is listed in the announcement. Since the announcement containing the checksums is cryptographically signed (usually using the key This email address is being protected from spambots. You need JavaScript enabled to view it. ), the checksums show proof of the authenticity of the package. We disrecommend to subscribe to security lists which cause the email message containing the announcement to be modified so that the signature does not match after transport through the mailing list software. Downsides: You must be able to verify the authenticity of the announcement in the first place. If RPM packages are being rebuilt and a new version of a package is published on the ftp server, all md5 sums for the files are useless. 2) rpm package signatures provide an easy way to verify the authenticity of an rpm package. Use the command rpm -v --checksig to verify the signature of the package, where is the filename of the rpm package that you have downloaded. Of course, package authenticity verification can only target an un-installed rpm package file. Prerequisites: a) gpg is installed b) The package is signed using a certain key. The public part of this key must be installed by the gpg program in the directory ~/.gnupg/ under the user's home directory who performs the signature verification (usually root). You can import the key that is used by SuSE in rpm packages for SuSE Linux by saving this announcement to a file ("announcement.txt") and running the command (do "su -" to be root): gpg --batch; gpg < announcement.txt | gpg --import SuSE Linux distributions version 7.1 and thereafter install the key " This email address is being protected from spambots. You need JavaScript enabled to view it. " upon installation or upgrade, provided that the package gpg is installed. The file containing the public key is placed at the top-level directory of the first CD (pubring.gpg) and at . - SuSE runs two security mailing lists to which any interested party may subscribe: This email address is being protected from spambots. You need JavaScript enabled to view it. - general/linux/SuSE security discussion. All SuSE security announcements are sent to this list. Tosubscribe, send an email to . This email address is being protected from spambots. You need JavaScript enabled to view it. - SuSE's announce-only mailing list. Only SuSE's security announcements are sent to this list. To subscribe, send an email to . For general information or the frequently asked questions (faq) send mail to: or respectively. ==================================================================== SuSE's security contact is or . The public key is listed below. ====================================================================______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, it is desired that the clear-text signature shows proof of the authenticity of the text. SuSE Linux AG makes no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key . Fedora has issued an advisory about openssh, highlighting a vulnerability that could allow local privilege escalation. It's crucial to update the software promptly to reduce risks. wuftpd exploit fix,SUSE update,ftp server risk. . LinuxSecurity.com Team

Calendar%202 Aug 01, 2003 SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorybuffer overflowSuSE

SuSE: 2001:043 Moderate: Wuftpd Remote Root Compromise Issue

Due to a missing \0 at the end of the buffer a later call to a function that frees allocated memory will feed free(3) with userdefined data. This bug could be exploited depending on the implementation of the dynmaic allocateable memory API (malloc(3), free(3)) in the libc library.. ______________________________________________________________________________ SuSE Security Announcement Package: wuftpd Announcement-ID: SuSE-SA:2001:043 Date: Wednesday, Nov. 28th, 2001 23:45 MET Affected SuSE versions: 6.3, 6.4, 7.0, 7.1, 7.2, 7.3 Vulnerability Type: remote root compromise Severity (1-10): 7 SuSE default package: no Other affected systems: all liunx-like systems using wu-ftpd 2.4.x / 2.6.0 / 2.6.1 Content of this advisory: 1) security vulnerability resolved: wuftpd problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The wuftpd package as shipped with SuSE Linux distributions comes with two versions of wuftpd: wuftpd-2.4.2, installed as /usr/sbin/wuftpd, and wuftpd-2.6.0, installed as /usr/sbin/wuftpd-2.6. The admin decides which version to use by the inetd/xinetd configuration. The CORE ST Team had found an exploitable bug in all versions of wuftpd's ftpglob() function. The glob function overwrites buffer bounds while matching open and closed brackets. Due to a missing \0 at the end of the buffer a later call to a function that frees allocated memory will feed free(3) with userdefined data. This bug could be exploited depending on the implementation of the dynmaic allocateablememory API (malloc(3), free(3)) in the libc library. Linux and other system are exploitable! Some weeks ago, an internal source code audit of wu-ftpd 2.6.0 performed by Thomas Biege, SuSE Security, revealed some other security related bugs that are fixed in the new RPM packages. Additionally, code from wu-ftpd 2.6.1 were backported to version 2.6.0 to make it more stable. A temporary fix other than using a different server implementation of the ftp protocol is not available. We recommend to update the wuftpd package on your system. We thank the wuftpd team for their work on the bug, particularly because the coordination between the vendors and the wuftpd developers lacked the necessary discipline for the timely release of the information about the problem. Please download the update package for your distribution and verify its integrity by the methods listed in section 3) of this announcement. Then, install the package using the command "rpm -Uhv file.rpm" to apply the update. i386 Intel Platform: SuSE-7.3 d1b549b8c2d91d66a8b35fe17a1943b3 source rpm: 9ef0e6ac850499dc0150939c62bc146f SuSE-7.2 4583443a993107b26529331fb1e6254d source rpm: aaee0343670feae70ccc9217a8e22211 SuSE-7.1 347a030a85cb5fcbe32d3d79d382e19e source rpm: aa3e53641f6ce0263196e6f1cb0447c3 SuSE-7.0 e34eec18ecc10f187f6aa1aa3b24b75b source rpm: fafc8c2bbd68dd5ca3d04228433c359a SuSE-6.4 2354abe95b056762c7f6584449291ff2 source rpm: 507b8d484b13737c9d2b6a68fda0cc26 SuSE-6.3 9851ad02e656bba8b5e02ed2ddb46845 source rpm: 5d7c4b6824836ca28b228cc5dcfc4fd6 Sparc Platform: SuSE-7.3 2d19e4ead17396a1e28fca8745f9629d source rpm: bdb0b5ddd72f8563db3c8e444a0df7f5 SuSE-7.1 f6b04f284bece6bf3700facccc015ffe source rpm: 1660547ac9a5a3b32a4070d69803cf18 SuSE-7.0 1bd905b095b9a4bb354fc190b6e54a01 source rpm: 597263eb7d0fbbf242d519d3c126a441 AXP Alpha Platform: SuSE-7.1 e608bfd2cc9e511c6eb6932c33c68789 source rpm: 34915af1ca79b27bad8bc2fd3a5cab05 SuSE-7.0 86a7d8f60d76a053873bcc13860b0bbb source rpm: 9674f9f1630b3107ac22d275705da76e SuSE-6.4 2501444a1e4241e8f6f4cdcc6fd133b0 source rpm: 34812d943900bdb902ad7edd40e1943f SuSE-6.3 429a49ef9d4d0865fbb443c212b8a8c7 source rpm: 76467dae0f460677ba80ec907eefca28 PPC Power PC Platform: SuSE-7.3 a381269b3e2fc43fda59e4d08aef57ae source rpm: 7cacb696a88e57a843402a796212aee6 SuSE-7.1 bfc39be2c09323d96f974fdd0c73fda1 source rpm: e2681b2ed4801ce14b5dfb926480ac51 SuSE-7.0 19f989e637fd9b6fa652f8a4014bb7b1 source rpm: 76c493a915691c51a2481f0925e8ce39 SuSE-6.4 ad29cf172bbd03a5e1f301cf6b9404e5 source rpm: 82338702692eba599d8c3d242aff3d1a ______________________________________________________________________________ 2) Pending vulnerabilities in SuSE Distributions and Workarounds: - ssh/openssh exploits The wrong fix for the crc32-compensation attack is currently actively exploited in the internet for both the ssh and the openssh implementation of the ssh-1 protocol. We urge our users to upgrade their ssh or openssh packages to the latest versions that are located on our ftp server at the usual directories, referred to via SUSE – Open-Source-Lösungen für Enterprise Server und Cloud | SUSE from February earlier this year. Please note, the packages for the SuSE Linux distributions 7.0 and older containing cryptographic code are located on the German ftp server ftp.suse.de, the distributions 7.1and newer have their crypto updates on ftp.suse.com. There are legal constraints beyond our control that lead to this situation. Openssh packages of the version 2.9.9p2 ready to download on the ftp server ftp.suse.com. They fix the security problems mentioned above, along with a set of less serious security problems. The announcement is still pending while investigations about the status of the package are in progress. - libgtop_daemon The libgtop_daemon, part of the libgtop package for gathering and monitoring process and system information, has been found vulnerable to a format string error. We are in the process of providing fixes for the affected distributions 6.4-7.3. In the meanwhile, we recommend to disable the libgtop_daemon on systems where it is running. This daemon is neither installed nor started (if installed) by default on SuSE Systems. - kernel updates A bug in the elf loader of the linux kernels version 2.4 from our announcement SSA:2001:036 can cause a system to crash if a user executes a vmlinux kernel image. We are preparing another update series to workaround this problem and will re-issue the kernel announcement as soon as possible. ______________________________________________________________________________ 3) standard appendix: SuSE runs two security mailing lists to which any interested party may subscribe: This email address is being protected from spambots. You need JavaScript enabled to view it. - general/linux/SuSE security discussion. All SuSE security announcements are sent to this list. To subscribe, send an email to . This email address is being protected from spambots. You need JavaScript enabled to view it. - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to . For general information or the frequently asked questions (faq) send mail to: or respectively. ============================================== SuSE's security contact is . ============================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. SuSE GmbH makes no warranties of any kind whatsoever with respect to the information contained in this security advisory. . A critical security advisory on the wuftpd remote root compromise issue affecting SuSE Linux distributions, detailing severity and fixes.. wuftpd Security Advisory, SuSE Updates, Remote Exploit Mitigation, Buffer Overflow Prevention. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 29, 2001 •Important SuSE
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics