Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian LTS xz-utils Critical Buffer Overflow Vuln DLA-4690-1 CVE-2026-34743

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatebug fix

openSUSE xar Moderate Null Pointer Threat Fix 2026-21153-1

An update that solves 4 vulnerabilities and has 4 bug fixes can now be installed.. openSUSE security update: security update for xar ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21153-1 Rating: moderate References: * bsc#1047874 * bsc#1047875 * bsc#1108595 * bsc#1108596 Cross-References: * CVE-2017-11124 * CVE-2017-11125 * CVE-2018-17093 * CVE-2018-17094 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 4 vulnerabilities and has 4 bug fixes can now be installed. Description: This update for xar fixes the following issues: Changes in xar: - Switch to the maintained Apple xar lineage (build 503, versioned 1.8.0.0.503): the mackyle 1.6.1 fork this package tracked has been dead since 2012, and Debian, Fedora and Gentoo all moved to Apple's xar (apple-oss-distributions/xar). This resolves the long-standing NULL-pointer dereferences in xar_get_path() and xar_unserialize() when parsing malformed archives: * CVE-2017-11124 (boo#1047875) * CVE-2017-11125 (boo#1047874) * CVE-2018-17093 (boo#1108595) * CVE-2018-17094 (boo#1108596) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-348=1 Package List: - openSUSE Leap 16.0: libxar-devel-1.8.0.0.503-bp160.1.1 libxar1-1.8.0.0.503-bp160.1.1 xar-1.8.0.0.503-bp160.1.1 References: * https://www.suse.com/security/cve/CVE-2017-11124.html * https://www.suse.com/security/cve/CVE-2017-11125.html * https://www.suse.com/security/cve/CVE-2018-17093.html * https://www.suse.com/security/cve/CVE-2018-17094.html . openSUSE addresses 4 vulnerabilities in xar with this security patch, ensuring system integrity and performance.. openSUSE patch xarvulnerabilities security update. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 30, 2026 •moderate OpenSUSE
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysecurity issueupdate

Fedora 31: FEDORA-2020-edf53cd770 Critical: xar Buffer Overflow

- Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close CVE-2018-17094 - Close CVE-2017-11124 - Close CVE-2017-11125 - Close CVE-2010-3798 - Use license macro - Add OpenSSL To Configuration. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-edf53cd770 2020-02-07 01:50:13.851612 --------------------------------------------------------------------------------Name : xar Product : Fedora 31 Version : 1.8.0.417.1 Release : 1.fc31 URL : Summary : The eXtensible ARchiver Description : The XAR project aims to provide an easily extensible archive format. Important design decisions include an easily extensible XML table of contents for random access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the ability to handle files of arbitrarily large sizes, the ability to choose independent encodings for individual files in the archive, the ability to store checksums for individual files in both compressed and uncompressed form, and the ability to query the table of content's rich meta-data. --------------------------------------------------------------------------------Update Information: - Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close CVE-2018-17094 -Close CVE-2017-11124 - Close CVE-2017-11125 - Close CVE-2010-3798 - Use license macro - Add OpenSSL To Configuration --------------------------------------------------------------------------------ChangeLog: * Sat Jan 25 2020 Mosaab Alzoubi - 1.8.0.417.1-1 - Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close CVE-2018-17094 - Close CVE-2017-11124 - Close CVE-2017-11125 - Close CVE-2010-3798 - Use license macro - AddOpenSSL To Configuration * Wed Jan 1 2020 Mosaab Alzoubi - 1.6.1-1 - Update to 1.6.1 - Change upstream - Exclude CVE-2010-0055 patch, includes in upstream - Exclude norpath patch, using sed - Pass FTBFS state #1676224 - General clean of the spec - Use Fedora guide lines in Source URL * Sun Feb 3 2019 Fedora Release Engineering - 1.5.2-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sat Jul 14 2018 Fedora Release Engineering - 1.5.2-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Feb 9 2018 Fedora Release Engineering - 1.5.2-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #654486 - CVE-2010-3798 xar: arbitrary code execution via crafted xar archive [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=654486 [ 2 ] Bug #1629651 - CVE-2018-17093 CVE-2018-17094 xar: Two NULL pointer dereference issues [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1629651 [ 3 ] Bug #1470073 - CVE-2017-11124 CVE-2017-11125 xar: Multiple vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1470073 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-edf53cd770' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Debian Security Alert DEBIAN-2021-abc123xyz details patches for zip vulnerabilities, addressing potential for unauthorized code execution.. Fedora Update,xar Package,Security Fixes,Code Execution. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 06, 2020 •Critical Fedora
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 30: FEDORA-2020-bbd24dd0cf Moderate: xar Arbitrary Code Execution

- Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close CVE-2018-17094 - Close CVE-2017-11124 - Close CVE-2017-11125 - Close CVE-2010-3798 - Use license macro - Add OpenSSL To Configuration. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-bbd24dd0cf 2020-02-03 01:02:24.438509 --------------------------------------------------------------------------------Name : xar Product : Fedora 30 Version : 1.8.0.417.1 Release : 1.fc30 URL : Summary : The eXtensible ARchiver Description : The XAR project aims to provide an easily extensible archive format. Important design decisions include an easily extensible XML table of contents for random access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the ability to handle files of arbitrarily large sizes, the ability to choose independent encodings for individual files in the archive, the ability to store checksums for individual files in both compressed and uncompressed form, and the ability to query the table of content's rich meta-data. --------------------------------------------------------------------------------Update Information: - Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close CVE-2018-17094 -Close CVE-2017-11124 - Close CVE-2017-11125 - Close CVE-2010-3798 - Use license macro - Add OpenSSL To Configuration --------------------------------------------------------------------------------ChangeLog: * Sat Jan 25 2020 Mosaab Alzoubi - 1.8.0.417.1-1 - Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close CVE-2018-17094 - Close CVE-2017-11124 - Close CVE-2017-11125 - Close CVE-2010-3798 - Use license macro - AddOpenSSL To Configuration * Wed Jan 1 2020 Mosaab Alzoubi - 1.6.1-1 - Update to 1.6.1 - Change upstream - Exclude CVE-2010-0055 patch, includes in upstream - Exclude norpath patch, using sed - Pass FTBFS state #1676224 - General clean of the spec - Use Fedora guide lines in Source URL * Sun Feb 3 2019 Fedora Release Engineering - 1.5.2-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sat Jul 14 2018 Fedora Release Engineering - 1.5.2-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Feb 9 2018 Fedora Release Engineering - 1.5.2-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #654486 - CVE-2010-3798 xar: arbitrary code execution via crafted xar archive [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=654486 [ 2 ] Bug #1470073 - CVE-2017-11124 CVE-2017-11125 xar: Multiple vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1470073 [ 3 ] Bug #1629651 - CVE-2018-17093 CVE-2018-17094 xar: Two NULL pointer dereference issues [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1629651 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-bbd24dd0cf' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . --------------------------------------------------------------------------------Fedora Update Notifi. upstream, apple, instead, non-fresh, github, branch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 02, 2020 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 31: FEDORA-2020-6490123c7c moderate: xar Security Update

- Update to 1.6.1 - Change upstream - Exclude CVE-2010-0055 patch, includes in upstream - Exclude norpath patch, using sed - Pass FTBFS state #1676224 - General clean of the spec - Use Fedora guide lines in Source URL. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-6490123c7c 2020-01-17 05:04:53.759981 --------------------------------------------------------------------------------Name : xar Product : Fedora 31 Version : 1.6.1 Release : 1.fc31 URL : http://mackyle.github.io/xar/ Summary : The eXtensible ARchiver Description : The XAR project aims to provide an easily extensible archive format. Important design decisions include an easily extensible XML table of contents for random access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the ability to handle files of arbitrarily large sizes, the ability to choose independent encodings for individual files in the archive, the ability to store checksums for individual files in both compressed and uncompressed form, and the ability to query the table of content's rich meta-data. --------------------------------------------------------------------------------Update Information: - Update to 1.6.1 - Change upstream - Exclude CVE-2010-0055 patch, includes in upstream - Exclude norpath patch, using sed - Pass FTBFS state #1676224 -General clean of the spec - Use Fedora guide lines in Source URL --------------------------------------------------------------------------------ChangeLog: * Wed Jan 1 2020 Mosaab Alzoubi - 1.6.1-1 - Update to 1.6.1 - Change upstream - Exclude CVE-2010-0055 patch, includes in upstream - Exclude norpath patch, using sed - Pass FTBFS state #1676224 - General clean of the spec - Use Fedora guide lines in Source URL * Sun Feb 3 2019 Fedora Release Engineering - 1.5.2-21 - Rebuilt forhttps://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sat Jul 14 2018 Fedora Release Engineering - 1.5.2-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Feb 9 2018 Fedora Release Engineering - 1.5.2-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1556546 - xar: FTBFS in F28 https://bugzilla.redhat.com/show_bug.cgi?id=1556546 [ 2 ] Bug #1676224 - xar: FTBFS in Fedora rawhide/f30 https://bugzilla.redhat.com/show_bug.cgi?id=1676224 [ 3 ] Bug #1736975 - xar: FTBFS in Fedora rawhide/f31 https://bugzilla.redhat.com/show_bug.cgi?id=1736975 [ 4 ] Bug #1476402 - xar-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1476402 [ 5 ] Bug #1787960 - Review Request: xar - The eXtensible ARchiver https://bugzilla.redhat.com/show_bug.cgi?id=1787960 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-6490123c7c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ .--------------------------------------------------------------------------------Fedora Update Notifi. upstream, exclude, update, change, cve-2010-0055, patch. . LinuxSecurity.com Team

Calendar%202 Jan 17, 2020 Fedora
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics