Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 51 articles for you...
79

Debian 12.8 "Bookworm": 50 Security Updates and Upgrade Instructions

The Debian Project recently unveiled Debian 12.8 as the eighth update of its stable distribution, Debian 12, codenamed "Bookworm." While not technically a new release of Debian 12, Debian 12.8 nonetheless features important security fixes and corrections across various packages in Debian 12. . In this article, I'll provide an in-depth overview of what can be expected in this point release. I'll then explain how you can upgrade to Debian 12.8 to take advantage of the security fixes and updates introduced. Let's begin by examining the notable features and capabilities of Debian 12.8 "Bookworm." Key Features and Capabilities of Debian 12.8 "Bookworm" Debian 12.8 "Bookworm" continues the robust and dependable experience users have come to expect from Debian distributions. This release's primary emphasis is maintenance and security to ensure the system remains efficient and safe for its users. Debian 12.8's signature features and capabilities include its unparalleled stability, demonstrated by significant updates and bug fixes that correct existing issues without creating new instabilities. Security remains at the core of everything it does - evidenced by 50 security updates addressing various vulnerabilities. This update enhances package integrity by targeting specific packages to strengthen their functionality and security and ensure seamless integration into the ecosystem. One of the notable aspects is the ease of upgrade. Thanks to an up-to-date mirror, users can quickly upgrade to the latest point release without needing a fresh installation. Comprehensive bug fixes are also an integral component, with 68 bugs addressed, ranging from minor issues to critical fixes that significantly improve user experience. Notable Security Issues Addressed in Debian 12.8 Security updates are vitally important to any operating system, and Debian 12.8 stands out in this area by offering solutions for numerous vulnerabilities to ensure system integrity and prevent known exploits. Critical security updatesinclude fixes to address CVE-2023-52168 and CVE-2023-52169 issues in 7zip's NTFS handler's heap buffer overflow and out-of-bounds read problems, respectively, while ClamAV , updates such as CVE-2024-20505 and CVE-2024-20506 mitigate denial of service vulnerabilities as well as file corruption vulnerabilities. Amanda package updates complete a fix for CVE-2022-37704 , restoring operation with xfsdump. In addition, CVE-2024-8096 corrects curl's handling of specific OCSP responses, while CVE-2024-28182 addresses a denial-of-service issue in the nghttp2 package. Additionally, updates to the Linux Kernel ABI version 6.1.0-27 ensure compatibility between software and hardware components and further security measures designed to defend Debian 12.8 "Bookworm" against potential threats while taking advantage of all available protocols and patches. Debian 12.8 brings with it not only security enhancements but also numerous necessary corrections across several packages. For instance, NTFS-3g updates address use-after-free issues in ntfs-uppercase-mbs and change the fuse classification to Depends. OpenSSL package now includes the most upstream release, which addresses buffer overread and out-of-bounds memory access vulnerabilities. SQLite3 addresses buffer overreads, integer overflows, and stack overflows, while Systemd's new stable release provides improved system initialization and service management. Python3.11 fixes regression issues related to ReDoS vulnerabilities found within specially crafted tar archives. Furthermore, its comprehensive list of bug fixes significantly increases system reliability, from minor adjustments like correcting path information in the notify-osd desktop launcher file to critical fixes like preventing Python packages from experiencing NULL dereferencing crashes. How to Upgrade to Debian 12.8 Upgrading to Debian 12.8 is an effortless process designed to minimize disruption for users and administrators. Before beginning, existing system packages must beup-to-date. This can be accomplished using the sudo apt update and sudo apt upgrade commands. To change to a stable mirror, you must modify your /etc/apt/sources.list file with appropriate entries from Debian mirrors. Visit the Debian mirror list for a comprehensive list of mirrors. Once your mirror has been updated, use sudo apt update followed by sudo apt full-upgrade to complete a system upgrade and install the latest point release. Reboot your system using the sudo reboot command to apply all changes made with these steps and benefit from all the latest fixes and security updates in Debian 12.8 without reinstalling the operating system from scratch. Our Final Thoughts on the Significance of This Release Debian 12.8 "Bookworm" showcases the Debian Project's dedication to creating a secure, stable, and reliable operating system. Containing 68 bug fixes and 50 security updates, this point release strives to enhance user experiences by improving quality and security. We encourage users and system administrators to upgrade to maximize the benefit from these improvements. Debian continues to develop operating systems that balance robustness with cutting-edge innovations, and Debian 12.8 "Bookworm" is proof. Have you upgraded to Debian 12.8? What is your opinion on these changes and fixes? Connect with us @lnxsec and let us know! . Ubuntu 22.04 improves performance and reliability through essential patches and enhancements. Update your system today to ensure protection!. Debian 12.8, security updates, bug fixes, system upgrades, Linux fixes. . Brittany Day

Calendar%202 Nov 12, 2024 User Avatar Brittany Day Security Projects
79

OpenSSH 9.6 Launch: Critical Security Updates and Performance Enhancements

In the world of open source, there are few names as synonymous with security than OpenSSH. The latest version of the software— version 9.6 —has been released, bringing major improvements to the platform. . First and foremost, this release sees several bug fixes and other changes that will help users better manage their systems. For example, there’s now support for “ssh-keygen -M” which allows admins to generate RSA authentication keys compatible with older SSH versions. This should help reduce the time spent troubleshooting compatibility issues so you can get back to work! In addition to these new features, OpenSSH 9.6 also includes several performance improvements that make using the platform faster and more efficient than ever before. These changes include support for secure key exchange algorithms (ECDHE) and optimization for generating session IDs, which may improve performance when making many concurrent connections over an SSH connection. When it comes down to it, this new release is about ensuring your company can stay ahead of today's security threats by offering an open-source solution that addresses them head-on while also meeting your needs from an operational standpoint. Don't overlook the significance of OpenSSH 9.6! Have you tested it out? What do you think? Connect with us on X @lnxsec - we'd love to hear your perspective on this exciting release! . Explore the essential enhancements and bug fixes introduced in OpenSSH 9.6, enhancing both security measures and overall efficiency for users.. OpenSSH, Performance Enhancement, Security Upgrade. . LinuxSecurity.com Team

Calendar%202 Dec 28, 2023 User Avatar LinuxSecurity.com Team Security Projects
79

Debian 12.3 Release Postponed Because of EXT4 Data Loss Issue

The Debian project has announced that it is delaying the release of its next version, Debian 123. This delay is because developers are working on fixing a bug that causes EXT4 file systems to become corrupt. . The bug occurs when the system writes too much data in too short a time to the EXT4 file system, leading to data loss and corruption. This affects only some distributions based on Debian, such as Ubuntu, Linux Mint, and Raspbian. The bug was found by a developer named Timo Teräs, who posted about it on Launchpad, an open-source collaboration website owned by Canonical Ltd. After finding out about the bug, Canonical contacted Debian about it and suggested that they delay releasing their new version until they could fix this issue. The team at Debian then decided to delay their release until they could fix this problem so that there would not be any risk posed by using EXT4 file systems within their operating system (OS). Check out the article linked below for more details on this bug. I'm disappointed to see this release put on hold, but happy to see the Debian team prioritizing security over speed. The link for this article located at Phoronix is no longer available. . Debian delays version release for EXT4 data corruption issue, ensuring system integrity before launch.. Debian Release Delay, EXT4 Corruption Issue, Data Loss. . LinuxSecurity.com Team

Calendar%202 Dec 10, 2023 User Avatar LinuxSecurity.com Team Security Projects
78

PHLAK 0.2 Release: Enhanced Security Tools and Features Await Users

PHLAK 0.2 has been released. With many bug fixes and an overall better feel and look, 0.2 will deliver what we had hoped 0.1 would have. Head over to to grab your copy and start testing. PHLAK . . . . PHLAK 0.2 has been released. With many bug fixes and an overall better feel and look, 0.2 will deliver what we had hoped 0.1 would have. Head over to to grab your copy and start testing. PHLAK is a Modular Security Live Linux distribution packed full of security tools and documentation for education. Go to Data HK, Data Pengeluaran Togel Hongkong Pools Sbobet - phlak for details. . PLKHA 0.3 has been released with enhanced visuals, bug resolutions, and vital security features for comprehensive assessments.. PHLAK Live Distribution, Modular Security Environment, Security Tools, Bug Fixes. . LinuxSecurity.com Team

Calendar%202 Nov 27, 2023 User Avatar LinuxSecurity.com Team Vendors/Products
79

Linux Kernel 6.3 End Of Life: Upgrade To 6.4 For Security Fixes

The Linux 6.3 kernel series is now marked as EOL on the kernel.org website and the last release is 6.3.13. . The time has come to say goodbye to the Linux 6.3 kernel series as it’s now marked as EOL (End of Life) on the kernel.org website, meaning it will no longer be supported with bug and security fixes. Earlier today, renowned Linux kernel maintainer Greg Kroah-Hartman announced the release of Linux kernel 6.3.13 as the thirteenth maintenance update to the Linux 6.3 kernel series, an update that brings quite a lot of changes (481 files changed, 4919 insertions, and 2870 deletions). However, Greg Kroah-Hartman also marked the Linux kernel 6.3 series as EOL (End of Life) on the kernel.org website, noting the fact that Linux kernel 6.3.13 is the last update in the series and urging users to upgrade their Linux systems to the latest Linux 6.4 kernel as soon as possible. The link for this article located at 9 to 5 Linux is no longer available. . The Linux 6.3 kernel series is now officially retired; users are encouraged to transition to Linux 6.4 to ensure ongoing support and enhanced security.. Linux Kernel Upgrade, Kernel Maintenance Update, Linux 6.4 Security. . LinuxSecurity.com Team

Calendar%202 Jul 12, 2023 User Avatar LinuxSecurity.com Team Security Projects
78

Thunderbird 102.9.0 Security Update and Bug Fix Overview

The Thunderbird team has released a new stable version of the open source email client. Thunderbird 102.9.0 is a security and bug fix update. . The new version of the email client is available already. Existing Thunderbird installations should receive the update automatically, if the automatic updates functionality has not been disabled by the administrator. Some users may prefer to update the application manually. This is done by selecting Help > About Thunderbird, or by selecting the Settings icon in the new sidebar on the left. Thunderbird displays the installed version in a small overlay window in the interface. The email client performs an update check and will download and install updates that it finds during the check. The link for this article located at ghacks.net is no longer available. . The latest update, Thunderbird 102.9.0, has been released featuring critical bug resolutions and upgraded security measures to ensure better email safety.. Thunderbird Email Client, Open Source Update, Security Improvements. . LinuxSecurity.com Team

Calendar%202 Mar 17, 2023 User Avatar LinuxSecurity.com Team Vendors/Products
81

Tails 5.9 Security Update: Bug Fixes and Privacy Enhancements

Tails 5.9 mainly focuses on bug fixes from the previous release and comes with updated versions of the Tor software.. Tails is a privacy and strongly security-focused Linux distribution designed to be run on a live USB drive, allowing users to boot the operating system on any computer while leaving no trace of their activity on the host computer. The distro routes all internet traffic through the Tor network , providing a high level of anonymity and including a wide range of privacy and security tools such as the PGP email client, the Electrum Bitcoin wallet, and the VeraCrypt disk encryption software. Yesterday, the Tails Project announced the general availability of Tails 5.9 with yet another dose of novelties and bug fixes. So, let’s have a look at them. . Whonix is an operating system designed for secure web browsing and anonymity, often deployed from a virtual machine.. Tails Distribution, Live USB Security, Tor Network Privacy, Linux Anonymity, Security Tools. . LinuxSecurity.com Team

Calendar%202 Jan 30, 2023 User Avatar LinuxSecurity.com Team Privacy
78

Debian: 11.6 moderate: 78 Security Updates And 69 Fixes

The Debian Project has announced the general availability of Debian GNU/Linux 11.6 as the sixth ISO release for the project’s latest Debian GNU/Linux 11 “Bullseye” operating system series. . Coming more than three months after Debian GNU/Linux 11.5 , the Debian GNU/Linux 11.6 release is here as a fresh, up-to-date installation medium for those who want to deploy the latest and greatest Debian GNU/Linux 11 “Bullseye” operating system series on new computers. This means that it includes all the security and software updates that have been released from September 10th when Debian GNU/Linux 11.5 was released until today, through the main Debian GNU/Linux 11 “Bullseye” software repositories. In numbers, Debian GNU/Linux 11.6 includes a total of 78 security updates and 69 miscellaneous bug fixes. For more details about these fixes, you can study the release announcement page. But if you’re already running Debian GNU/Linux 11 “Bullseye,” you only have to make sure your installation is up to date to receive these fixes. The link for this article located at 9 to 5 Linux is no longer available. . Arriving over 90 days subsequent to Debian GNU/Linux 11.5, the launch of Debian GNU/Linux 11.6 has finally occurred.. Debian GNU/Linux, Security Updates, Installation Medium. . LinuxSecurity.com Team

Calendar%202 Dec 22, 2022 User Avatar LinuxSecurity.com Team Vendors/Products
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200