Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 18 articles for you...
81
security advisoryimportantbug fixesTails 6.17 Security Updates: Important Bug Fixes and Privacy Tools
For those of us who lean on Tails to safeguard our digital privacy and anonymity, the 6.17 release doesn’t come with flashy headlines or gimmicks—but that’s exactly the point. Tails continues to be a cornerstone for those who need a secure operating environment, and this iteration focuses on refinement. . It’s a mix of quiet usability tweaks, privacy-enhancing updates, and some practical bug fixes. Think of it as the kind of release that reinforces why you trust Tails in the first place. Let’s dig into what’s new. Show Password: Convenience Meets Caution One of the smaller, but undeniably practical, additions is the "Show Password" option for the screen lock. If you''ve ever fumbled while typing a long, complex password to secure your system, this feature will feel like a welcome improvement. It’s particularly handy in environments where accuracy matters and retyping even once feels like an eternity. That said, sysadmins—and anyone really—should treat this option with care. Just because you can see the password doesn’t mean you should get lax about its complexity. And of course, ensure the physical security of your workspace when screen locking comes into play. It’s a useful feature, yes, but it doesn’t replace common sense. Privacy Gets a Boost with uBlock Origin 1.62.0 If you’ve spent time trying to navigate the modern web on the Tor Browser without a solid content blocker, you already know how invasive trackers have become. The included update to uBlock Origin (now at version 1.62.0 ) sharpens Tails 6.17’s defenses against intrusive ads and other undesirable scripts. While the extension might not catch everything, its inclusion in Tails ensures a baseline of protection for those who prioritize control over their digital footprint. For browsing that’s often routed through high-latency Tor connections, a lightweight yet effective blocker like uBlock Origin is critical. Reducing tracker bloat doesn’t just add privacy—it helps with performance. Lessbandwidth wasted on unnecessary scripts, fewer calls to external servers. Simple, effective, important. A New Tor Browser Version: 14.5.4 The Tor Browser gets its own upgrade in this release, moving to version 14.5.4 . This isn’t purely cosmetic—every update brings performance optimizations and patches for vulnerabilities that could potentially expose a weak point in your anonymous browsing environment. Tails relies on Tor to shield its users from a vast range of threats, so these updates are crucial. Even if you don’t notice a significant change day-to-day, keeping the Tor Browser current is non-negotiable for anyone depending on Tails for sensitive communications or tasks. Habitually staying updated ensures you''re not leaning on outdated software with exploitable flaws. Bug Fixes That Actually Matter It’s often the little things that make or break a system’s overall feel, and Tails 6.17 smooths out a couple of important rough edges. Take the Unsafe Browser, for instance. Previously, opening new tabs would default to showing the homepage. For a browser that’s inherently limited in scope yet potentially risky if not used correctly, that’s not a behavior you want. With the fix (#21004), opening a new tab now gives you an empty page, more aligned with privacy expectations. It’s a minor inconvenience corrected, but an important one nonetheless. Another fix that experienced users will appreciate is the removal of duplicated CPU microcode in the system image (#21001). While not a visible change for most, this adjustment trimmed down the size of the Tails image, making downloads faster and reducing the storage footprint. If you’re deploying Tails across multiple small USB sticks, every bit saved counts. These are the sorts of thoughtful touches that remind you why Tails remains so well-regarded in its niche. What Does This Release Mean for You? Tails 6.17 reinforces the values that make it indispensable for security-conscious individuals: up-to-date software, robustprivacy tools, and an emphasis on reliability over unnecessary complexity. The refinements to the Tor Browser, uBlock Origin, and the Unsafe Browser demonstrate a commitment to enhancing both usability and protection. Meanwhile, optimizations like the reduced image size echo the project’s foundational ethos of portability and streamlined performance. It''s the kind of iterative maintenance that instills confidence in the operating system’s ability to remain relevant and responsive to users’ needs. For Linux admins or infosec professionals deploying Tails within their organizations or personal workflows, this release should be seen as a necessary update, not just for the sake of “newness,” but because it directly contributes to the ongoing integrity of the tool. How Can I Get Tails 6.17? If you''re running Tails 6.0 or newer, upgrading is straightforward: auto-upgrade is likely your easiest route. But if that''s not working for any reason, manual upgrades remain a reliable fallback. For new installs, follow the usual process—whether you prefer Windows, macOS, or Linux, the official documentation has you covered. Just remember that installing Tails on a new USB stick will overwrite any existing Persistent Storage, so plan accordingly. Our Final Thoughts on the Tails 6.17 Release Tails 6.17 doesn’t try to reinvent itself—it doesn’t need to. Instead, it builds incrementally, ensuring the system stays dependable, efficient, and secure. As someone who’s probably dealt with more distributions, updates, and tools than most people you know, you’ll recognize the value of these meticulous adjustments. Staying current with Tails isn’t just about taking advantage of new features; it’s about actively mitigating risks while embracing incremental improvements. And these small changes? They keep your system resilient, adaptable, and ready for whatever lies ahead. So, if you haven’t already, carve out some time and update—it’s worth it! . Tails 6.17 offers essentialbug fixes and privacy updates, enhancing security while maintaining system efficiency.. Tails 6.17, privacy updates, usability tweaks, security enhancements, bug fixes. . Brittany Day
Jul 08, 2025
•
Privacy
79
security advisorycode executiondebianDebian 12.9 Security Advisory: Critical Updates on Ansible, OpenSSH, Kernel
Debian 12.9 has just been released, offering numerous security enhancements and bug fixes vital for Linux security admins managing Debian systems. This point release for the "Bookworm" series addresses critical vulnerabilities in widely-used packages such as Ansible , OpenSSH , and the Linux kernel , ensuring your systems remain secure against recent threats. With security patches already rolling out via security.debian.org , this update is essential for maintaining a fortified, up-to-date Debian environment. . As new installation media becomes available, Debian users are strongly urged to upgrade and take advantage of its improvements. New packages mitigate risks like denial-of-service vulnerabilities in Avahi and arbitrary code execution issues in Ansible-core. Adopting Debian 12.9 significantly strengthens your security posture against potential exploits - an indispensable way to keep your infrastructure secure against possible threats. Let's examine some of the notable changes and improvements introduced in this release and how they will benefit the security and stability of your Linux systems. Strengthening Core Components Source: 9 to 5 Linux Debian 12.9's focus on fortifying core components sets this release apart. Key packages like Ansible, OpenSSH, and the Linux kernel received crucial security updates that address vulnerabilities that could otherwise lead to system breaches, data leakage, or even full system compromise. Debian 12.9 updates address key flaws in Ansible that allowed for unauthorized code execution so scripts run safely and as intended. OpenSSH updates close security loopholes that attackers could have exploited to gain unauthorized access. Moreover, improvements to the Linux kernel simultaneously address security vulnerabilities and performance issues. Mitigating Critical Vulnerabilities Debian 12.9 goes beyond simply updating core packages; it also addresses various vulnerabilities that have come to light recently. We Debian users can now rest easyknowing that potential denial-of-service attacks in Avahi have been mitigated. These attacks could render services unavailable and reduce productivity if left unpatched. This latest release also addresses Ansible-core's arbitrary code execution vulnerabilities to ensure malicious scripts cannot be used to gain control of systems. These updates go beyond minor fixes; they provide essential protection from known and emerging threats. Enhanced Stability and Bug Fixes While security is paramount, stability is equally crucial in production environments. Debian 12.9 delivers various bug fixes that enhance system reliability on this front. Updating to this latest release means we admins can sidestep many issues that could cause unexpected downtime or erratic behavior. These bug fixes cover many scenarios, from minor annoyances to critical problems. By ironing out these quirks, Debian 12.9 ensures that systems run more smoothly, reducing the administrative overhead caused by troubleshooting and resolving unexpected issues. Simplified Upgrades with New Installation Media Debian 12.9 offers new installation media that makes it easier for admins to deploy new installations or upgrade existing systems. These images contain the most up-to-date patches and improvements to ensure installations begin on a secure footing. Administrators overseeing multiple systems will find this new release more efficient in terms of setting up servers or workstations more quickly and more efficiently than before, thanks to an improved installation process that reduces the time and effort required to bring new systems online, freeing administrators up to focus on optimizing and protecting their environments. Ongoing Security Maintenance Even with all of Debian 12.9's updates, keeping security at the forefront of one's mind is essential. Administrators who regularly sync their systems with security.debian.org will find that many fixes are rolled out regularly. Taking such an active stance ensures systems always runthe latest, most secure versions of software packages. Staying abreast of these updates is of utmost importance, so automating tools and regular maintenance routines are vital in keeping systems updated against threats. By combining Debian 12.9's immediate benefits with ongoing security practices, administrators can secure their systems against potential attacks. How to Upgrade & Best Practices for Upgrading Debian 12.9 images can be downloaded here. These images support 64-bit architectures (amd64), as well as 32-bit architectures (i386) and PowerPC 64-bit Little Endians (ppc64el), IBM System z 390x, MIPS 64-bit Little Endians (mips64el), MIPS 16-bit Little Endians (mipsel), MIPS 32 bit Little Endians (mipsel), and MIPS. Debian 12.9 Live images can also be downloaded from this page, but only on 64-bit systems, preinstalled with KDE Plasma 5.27.5 LTS (Long Term Support), GNOME 43.10, Xfce 4,18, Cinnamon 5.6.8, LXQt 1.26.0, MATE 1.26.0 and LXDE 0.10.0 desktop environments. Download a "Standard" live ISO image without a graphical interface. Debian GNU/Linux 12 "Bookworm" users should update their installation using the sudo update && sudo full-upgrade commands in a terminal emulator. Alternatively, you can update your installation using a graphical package management tool like Synaptic Package Manager. Administrators planning an upgrade to Debian 12.9 should follow several best practices. First and foremost, testing in a staging environment before rolling it out to production systems allows any potential issues with the upgrade to be identified and addressed before impacting live operations. Before initiating an upgrade process, always create backup copies of data and system configurations to avoid risk and disruption during this transition period. Confirm that all dependencies have been fulfilled to prevent interruptions to the upgrade path. Once your upgrade is complete, conduct a post-upgrade review to ensure all services are running as intended and that noconfigurations have changed unexpectedly. This helps ensure that the system performs as anticipated and that all benefits from its new release are fully realized. Our Final Thoughts on the Significance of the Debian 12.9 Release Source: Phoronix Debian 12.9 is a necessary release that offers significant security and stability improvements to Debian systems. Addressing vulnerabilities in key packages like Ansible, OpenSSH, and the Linux kernel fortifies systems against potential threats. At the same time, improved stability and comprehensive bug fixes provide smoother operations with decreased administrative overhead costs. Debian 12.9 offers administrators a more effortless and safer system deployment and upgrade experience with its simplified installation media, making it easier to keep systems secure and up-to-date. With ongoing security maintenance via security.debian.org , Debian 12.9 equips us to safeguard our infrastructures better. Linux admins can unleash the full potential of Debian 12.9 by following best practices for upgrading and proactively managing system security to ensure their systems remain resilient in the face of emerging cybersecurity challenges. . Ubuntu 22.04 introduces vital patches and boosts efficiency, safeguarding users and maintaining robustness across the platform.. Debian 12.9, security updates, stable system, Linux administration. . Brittany Day
Jan 13, 2025
•
Security Projects
79
security advisorydebiansystem stabilityDebian 12.6: Security Fixes And Stability Updates Overview
Debian recently unveiled a significant update to its stable distribution, Debian 12.6 (codename "bookworm"). While not an entirely new release, this upgrade brings important security fixes and fixes for severe problems to ensure an improved, secure operating environment for its users. . To help you understand the significance of this release and the changes you can expect, I'll walk you through the updates and bug fixes introduced in Debian 12.6 and explain how you can upgrade. What Security Fixes & Enhancements Have Been Introduced in Debian 12.6? Debian 12.6 includes several security updates that are crucial in maintaining the integrity and safety of its operating systems, guarding them from potential threats or vulnerabilities that could compromise them: bluez: Substantial updates have been implemented to address remote code execution vulnerabilities ( CVE-2023-27349 , CVE-2023-50230 ), further strengthening Bluetooth security implementations. ClamAV: This update addresses potential heap overflow and command injection vulnerabilities ( CVE-2024-20290 and CVE-2024-20328 ), further strengthening Debian systems' anti-virus capabilities. Glibc: Glibc, one of the primary components of Linux systems, reverted a fix to ensure application compatibility while addressing a TLS module ID reuse issue, thus decreasing data corruption risks. openssl: Debian has recently introduced a new stable release that addresses performance inefficiencies and security vulnerabilities in cryptographic operations, strengthening them against cyber threats and making Debian more resistant. These improvements significantly lower risk levels associated with vulnerabilities that were present prior. Improved Stability & Bug Fixes Debian 12.6 includes not only security patches but also corrections that enhance overall system stability and performance. These improvements include stability fixes that improve system lag time and bug fixes to enhance the overall stability and performance ofDebian systems: libxml-stream-perl: Linux and Nvidia Graphics Drivers have seen updates to improve ABI compatibility or update obsolete components that contribute towards a more effortless, more stable usage experience, critical when handling large XML workflows. debian-installer: This update to debian-installer takes into account recent kernel versions and includes bug fixes from "proposed-updates", making the installation process smoother and more reliable than before. Intel-microcode: Intel has released updates that address several critical vulnerabilities ( CVE-2023-22655 and CVE-2023-8746 , among others) that threaten the stability and security of systems running Intel processors. These updates ensure the Debian systems' security and operational reliability are addressed. Debian 12.6 enhancements offer Linux administrators and users increased security, stability, and reliability in their systems. Security fixes address potential vulnerabilities exploitable by attackers to make servers and personal computers safer environments, and system stability efforts reduce crashes that impact productivity or data integrity. How Can I Upgrade to Debian 12.6? For current Debian users, upgrading to Debian's 12.6 release should be relatively painless. Administrators should point their package management system (e.g., APT) towards one of Debian's HTTP mirrors listed on its mirror page and ensure packages are upgraded efficiently. Using APT will work best. This approach ensures packages will be upgraded at their most optimal rates: Sudo apt-get update Sudo apt-get dist-upgrade These commands will bring in the latest package lists and upgrade all your system's packages to their latest versions from your mirrors or provide fresh install images at regular locations on the Debian website for those starting a fresh install of Debian for the first time or preferring fresh installations. Our Final Thoughts on the Significance of the Debian 12.6 Release Debian 12.6's releasedemonstrates its dedication to creating a secure operating system. Through regular improvements and timely updates, Debian ensures its users - particularly network administrators - have access to one of the most stable and secure Linux distributions currently available. Whether through routine package upgrades or the provision of new installation media, Debian remains accessible while upholding its renowned system integrity and dependability, making Debian 12.6 an essential upgrade for users looking for balance among stability, security and advanced Linux features. I highly recommend you upgrade as soon as possible for a safer, more reliable Debian experience! . Ubuntu 22.04 introduces improvements and features with essential upgrades. Discover the enhancements and the steps to update efficiently.. Debian Upgrade, Security Enhancements, Stability Fixes. . Brittany Day
Jul 01, 2024
•
Security Projects
78
security advisorybug fixesLinux updateKaOS 2022.06 Security Fixes And Enhanced KDE Experience
KaOS, a modern open-source, well-designed KDE-focused Linux distro, has been updated to KaOS Linux 2022.06 and incorporates several bug fixes and security enhancements. . The newest version of KaOS is built on Glibc 2.35, GCC 11.3.0, and Binutils 2.38-based Toolchain. The update also brings theme improvements and includes DBus 1.14.0, Systemd 250.7, Nettle 3.8, and also the kernel moved to 5.17.15. One of the major highlights of this update is the addition of KDE Plasma 5.25.1 which significantly improves the user experience while switching between windows and workspaces. KaOS users can now see all of the open windows and virtual desktops while using gestures on the touchpad and touchscreens. The link for this article located at Cloud Host News is no longer available. . Explore the new capabilities of KaOS Linux 2022.06, highlighting improved security measures alongside an enhanced user interface powered by KDE Plasma.. KaOS Linux 2022.06, KDE Plasma 5.25, system enhancements. . LinuxSecurity.com Team
Jun 24, 2022
•
Vendors/Products
79
security advisorybug fixessecurity enhancementsLinux Kernel 5.17 Critical Security Enhancements And Support Updates
After a short delay, Linus Torvalds has announced the latest version of the Linux kernel, version 5.17, which adds major security enhancements. . The latest version of the Linux kernel, 5.17, has been released with bug fixes to reassure users worried about Spectre attacks and improve hardware support, despite a short delay. The security changes and hardware support are welcome, but apart from that, there's not much to get excited by with this release. While the release of 5.17 was delayed, Linux kernel creator Linus Torvalds seems to be taking it in his stride, presenting it as an opportunity to polish the release and avoid embarrassing bugs in the release. . The recent update of the Linux kernel, version 5.17, introduces vital security improvements aimed at protecting users.. Linux Kernel 5.17, Security Enhancements, Hardware Support. . LinuxSecurity.com Team
Mar 23, 2022
•
Security Projects
215
bug fixesLinux desktopKDE PlasmaKDE Plasma 5.23.2 Release: Improved NVIDIA Support And Bug Fixes
KDE Plasma 5.23.2 is now available as the second point release to the KDE Plasma 5.23 desktop environment series, featuring NVIDIA GBM Support and more bug fixes. . KDE Plasma 5.23.2 comes only a week after KDE Plasma 5.23.1 and introduces a big feature for NVIDIA GPU users, namely support for the GBM backend of the proprietary NVIDIA graphics driver. Over time, this should improve the Plasma experience for NVIDIA users in many ways. If you’re using the Plasma Wayland session, you should know that KDE Plasma 5.23.2 improves the Touchpad page in System Settings to correctly display options for how you can right-click and addresses a bug causing maximized windows to become unresponsive to mouse and keyboard input when using the hidden “BorderlessMaximizedWindows” setting. The link for this article located at 9 to 5 Linux is no longer available. . KDE Plasma 5.23.2 improves support for AMD graphics while also tackling significant bugs for an enhanced user experience.. KDE Plasma 5.23.2, NVIDIA GBM Support, Bug Fixes. . Brittany Day
Oct 27, 2021
•
Desktop Security
78
security advisorysoftware releaseDebianDebian GNU/Linux 11.1: 24 Security Updates And 75 Bug Fixes
Debian GNU/Linux 11.1 has been released as the first point release to the latest and greatest Debian GNU/Linux 11 “Bullseye” OS series, featuring 24 security updates and 75 bug fixes. . Debian GNU/Linux 11.1 is here about two months after the release of Debian GNU/Linux 11 “Bullseye” as an up to date installation and live medium that includues all the latest security updates and bug fixes pushed through the stable software repositories during this time. Debian GNU/Linux 11.1 comes with a total of 99 updated packages, split into 75 miscellaneous bug fixes and 24 security updates. This makes it easier to deploy the latest Debian GNU/Linux 11 “Bullseye” operating system on new machines as you don’t have to download hundreds of updates after the installation. The link for this article located at 9 to 5 Linux is no longer available. . Ubuntu 22.04 LTS delivers 30 security patches alongside 65 bug resolutions for an optimized setup process.. Debian GNU/Linux Security Releases, Security Fixes, Bug Fixes for Debian, Linux OS Updates. . LinuxSecurity.com Team
Oct 13, 2021
•
Vendors/Products
78
software updatesoftware releasebug fixesLibreOffice 7.1.3 Released with 100+ Fixes and Enhanced Compatibility
The Document Foundation has announced the general availability of LibreOffice 7.1.3 as the third maintenance update to the latest LibreOffice 7.1 office suite series. This release brings over 100 bug fixes, along with various improvements. . Coming five weeks after LibreOffice 7.1.2 , the LibreOffice 7.1.3 point release is here to address a total of 105 issues across all core components, including Writer, Calc, Draw, and Impress. According to The Document Foundation , about 25 percent of these fixes are focused on improving the document compatibility with the Microsoft Office file formats, such as DOCX, PPTX, and XLSX. The link for this article located at 9 to 5 Linux is no longer available. . LibreOffice 7.1.3 has been released featuring more than 100 bug corrections, improving support for Microsoft document formats.. LibreOffice 7.1.3, Office Suite Update, Document Compatibility, Bug Fixes. . LinuxSecurity.com Team
May 11, 2021
•
Vendors/Products
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!