Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 19 articles for you...
210
security advisoryarbitrary code executiondata breachChrome Releases Vital Update Addressing Type Confusion Vulnerabilities
Google recently rolled out a critical security update for its widely-used Chrome web browser, addressing several critical vulnerabilities, most notably two high-severity type confusion flaws in the V8 JavaScript engine. These severe bugs, tracked as CVE-2024-9602 and CVE-2024-9603 , were reported by external researchers and could potentially enable arbitrary code execution, threatening sensitive data and disrupting web browsing and system operations. . To help you proactively respond to this threat, I'll explain the issues discovered, their impact, how to determine if you are at risk, and how to fortify your systems against these stealthy bugs. Let's begin by understanding Type Confusion flaws and how they work. Understanding Type Confusion Vulnerabilities To fully grasp these vulnerabilities, admins and users must understand what constitutes a Type Confusion bug. Such errors occur when programs access resources (variables or memory locations) using incorrect types, leading to unexpected behaviors from programs that could present security threats. Type Confusion in software code refers to instances when the same variable is misinterpreted as multiple data types throughout a codebase. It typically occurs when type safety isn't strictly enforced in languages and environments like PHP, Perl, and, in this case, JavaScript running within Chrome's V8 engine. When exploited by attackers, they could potentially corrupt memory by leveraging vulnerabilities to execute code that subverts its intended functionality and further corrupt memory by exploiting additional vulnerabilities that arise within it. Mechanism of Exploitation Type Confusion can be exploited by manipulating how an application handles different forms of data. An attacker could exploit Type Confusion to deceive a program into: Treating One Type as Another: Force programs to mishandle data types as different ones can compromise memory safety. For instance, mistreating integers as pointers allows an attacker to read orwrite into any random memory location. Memory Corruption: Once memory safety has been breached, attackers can overwrite memory to introduce malicious code or modify execution paths within an application. Arbitrary Code Execution: Hackers can inject and execute arbitrary code by deliberately corrupting memory. This may include stealing sensitive information, altering application behavior, or controlling an entire system. Recently Discovered Vulnerabilities in Chrome Recent Google updates address two Type Confusion vulnerabilities—CVE-2024-9602 and CVE-2024-9603—found within its V8 JavaScript engine and identified by researchers Seunghyun Lee @0x10n of Starlabs and Nguyen Hoang Thach of Starlabs. Both vulnerabilities could result in potential code execution by an attacker and thus are classified as high-severity vulnerabilities. Google has released updates to reduce the risk of threat actors exploiting these vulnerabilities in the wild. Thus, publication will be delayed until most users have upgraded to Chrome 39 or newer. This follows industry best practices for mitigating the exploitation of these vulnerabilities by threat actors in real-world situations. Examining the Impact of These Chrome Vulnerabilities Exploitation of such vulnerabilities has the potential for grave repercussions. Attackers could leverage them by running arbitrary code through these flaws and exploiting them further. Doing so could enable attackers to: Steal sensitive data: Passwords, personal identification details, and financial info could easily fall into the wrong hands. Gain Control Over Compromised Systems: Total control of affected systems could allow attackers to deploy ransomware , launch more attacks within networks, or use compromised computers as a botnet. Undermine System Integrity: Changes made by attackers to your system could disrupt operations or cause irreparable harm to data and applications, leading to system instability or malfunction. Given Chrome has over3.45 billion active users globally, a Type Confusion exploit could potentially cause widespread data breaches and system compromises. Affected Linux Distributions and Available Patches When Google disclosed and patched these vulnerabilities, several Linux distributions quickly followed suit and released patches . Some of the distributions that released patches include: Fedora: The Fedora Project quickly rolled out updates to include the latest browser version. Debian: Similarly, updated packages were made available to Debian users. OpenSUSE: Patches were also issued for OpenSUSE users. Ensuring these patches are applied quickly is critical for maintaining the security and integrity of systems running these distributions. Advice for Admins Looking to Secure Against These Flaws Administrators should take immediate action to secure their systems against these vulnerabilities. Critical mitigation strategies include: Update Chrome: Make sure all systems use the most up-to-date version (129.0.6668.100 or later). Users can navigate to Help | About in Chrome's menu to check and initiate necessary updates. However, restarting after each upgrade will ensure the maximum effectiveness of its patches. Automated Updates: Where possible, enable automated updates so browsers and other critical software receive patches as soon as they become available. Monitoring and Alerts: Deploy solutions that detect suspicious activities indicative of attempted exploits. Establish alarms relating to V8 engine or JavaScript execution within Chrome that could indicate potential malicious actors trying to take advantage of its weaknesses. Users Must Stay Updated: Educating users about keeping browsers and applications current is crucial in decreasing potential exploit windows. Isolation and Containment: Use technologies such as sandboxing to limit the impact of browser exploits. Containers or virtual machines may isolate compromised browser instances from criticalsystems and data. Conduct Regular Audits: Be proactive by performing periodic security and vulnerability analyses so you can detect vulnerabilities before they become exploitable. Long-Term Outlook Type Confusion vulnerabilities highlight the critical need for security-minded developers and end-users alike to take proactive security steps at every point in software development and use, from development through end use. Their discovery in core applications such as Chrome is a stark reminder of modern software engineering's inherent complexity and the ongoing need for robust protection measures. Developers should strive to incorporate tools for runtime checks and static analysis, such as AddressSanitizer and MemorySanitizer , used by Google's internal teams early in their development processes to identify Type Confusions or other vulnerabilities that arise due to type conflicts in an early phase of software creation. Fuzzing programs that dynamically test different inputs or states an application could encounter should also form part of these development and quality assurance procedures. Our Final Thoughts on the Significance of This Update Users and administrators must remain alert, vigilant, and proactive about updates and security best practices to defend themselves effectively against an ever-evolving landscape of cybersecurity threats. While Type Confusion vulnerabilities in Chrome may be disconcerting, timely updates and thorough security measures can significantly lower risks. By understanding and responding promptly and vigilantly to these risks, we can better safeguard systems and data against possible exploitation attempts. . Ensure robust security against Chrome type confusion vulnerabilities by updating browsers regularly, conducting audits, and using strict input validation techniques. Type Confusion, Chrome Update, Security Best Practices, V8 Engine Vulnerability. . Brittany Day
Oct 09, 2024
•
Security Vulnerabilities
210
security advisoryremote code executionsecurity measuresGoogle Chrome: CVE-2024-8362 Critical: Remote Code Execution Threat
Google Chrome, a widely used web browser, serves millions of internet users by connecting them to the online world. Unfortunately, severe vulnerabilities can occur that threaten the security of its users. . One recently discovered Chrome vulnerability in versions prior to 128.0.6613.119 allows remote attackers to gain control of a victim's machine by running arbitrary code that executes on their behalf, steal sensitive information, install malware or ransomware, and even obtain unauthorized entry to systems. As a result, this flaw poses a grave threat to users' privacy and security. Let's discuss this vulnerability and who it affects, as well as measures you can take to secure against it. Understanding This Chrome Vulnerability The Google Chrome vulnerability in question, CVE-2024-8362 , refers to a flaw that allows remote attackers to execute arbitrary code on an affected machine, particularly using JavaScript engine V8 as the vector for attack. By exploiting this flaw, attackers could create or embed malicious websites that exploit this bug and trigger the execution of harmful code on users' devices. Since this vulnerability involves the Google Chrome browser, millions of users across platforms—Windows, macOS, Linux, and Android—could be at risk. Given the severity of potential consequences for these millions of Chrome users worldwide, all Chrome users must immediately take steps to protect themselves and their accounts. We'll discuss these countermeasures in more detail below. Fixes and Countermeasures Chrome Security Update (Source: CyberSecurity News) Google has taken swift steps to address this vulnerability by issuing security updates. Users should update their Chrome browsers with the most up-to-date version, 130.0.6695.0, to protect themselves. At the same time, administrators and IT professionals must safeguard devices on their networks by adhering to best practices. Here are the steps administrators should take to defend against this vulnerability andsimilar threats: Prioritize Patch Deployment: Admins must prioritize installing Chrome updates as soon as they become available to ensure all Chrome devices possess essential security patches. Centralized Management: For organizations with multiple devices, centralized management tools such as Google Workspace can simplify updating and managing Chrome installations. Administrators can define policies to enforce automatic updates to reduce risks to vulnerable devices. User Education: Administrators should inform their users about the importance of updating their browsers regularly and the potential dangers of delaying these updates, emphasizing quick action toward security in your organization. Doing this will foster an environment focused on security awareness. Security Awareness Training: Regular security awareness programs can help users recognize suspicious websites, phishing attempts, and potential malware threats more quickly, reducing the risk of falling prey to attacks that exploit this vulnerability. Our Final Thoughts on This Severe Chrome Bug This Google Chrome vulnerability that allows attackers to remotely execute code poses a grave danger for millions of users worldwide, potentially leading to unauthorized access, data theft, and malware infections. Thankfully, however, Google has released updates that address this flaw, and users, particularly admins, should upgrade Chrome immediately to minimize risks and protect themselves against potential harm. Proactive vigilance and timely updates are integral to maintaining a safe browsing environment. . Keep abreast of the significant Firefox upgrade that addresses vulnerabilities related to remote code execution, enhancing your online safety.. Chrome Remote Code Execution, Browser Security Threats, Chrome Update Mitigation. . Brittany Day
Sep 15, 2024
•
Security Vulnerabilities
210
critical updatesystem integritysecurity issuesExim 4.98 Critical Update Addresses SMTP Issues and Enhances Security
Exim is one of Unix-like systems' most widely used mail transfer agents. It's essential for email delivery and handling and is a significant part of the Internet email infrastructure. . Its widespread adoption requires constant scrutiny and rapid responses to security flaws. Exim 4.98 was recently released, addressing a critical SMTP vulnerability and implementing necessary DKIM handling and SMTP security updates. This release reflects a solid effort to improve server integrity and reliability. To help maintain server performance and network integrity, I'll explain the recently found and fixed vulnerabilities in Exim, their impact, and how to determine if your version is vulnerable. I'll also walk you through the updates and fixes introduced in 4.98 and how to upgrade to secure your email server and Linux system. What Vulnerabilities Have Been Identified in Exim? Exim's older versions contained over 30 security vulnerabilities, which could have profound implications. Moreover, attackers could exploit SMTP smuggling to inject malicious commands into email content. This could have resulted in unauthorized access to the system or disruption of service. These vulnerabilities highlight the need for constant updates and monitoring systems that run on this MTA. Linux admins should be most concerned about how these vulnerabilities could impact their system and overall security. A breach can compromise sensitive data and damage the integrity of the services hosted by affected systems. What Versions Are Vulnerable & What Is the Impact of These Vulnerabilities? Exim versions before 4.98 were affected by the vulnerabilities that have been addressed. Linux administrators must check their current Exim version to identify any vulnerabilities. You can check this using the command exim-bV . Exim is vulnerable and outdated if the displayed version is lower than 4.98. The impact on systems that use compromised versions of Exim includes potential SMTP smuggling, attackers manipulatingemails to bypass security measures, and issues related to correctly handling DKIM-signed emails. These vulnerabilities can lead to systems being used as spammers or botnets , affecting server performance and network integrity. What Are the Main Fixes & Updates Introduced in 4.98? Exim 4.98 addresses the previously mentioned problems and makes significant improvements . The following is a list of critical fixes: SMTP Smuggling Prevention: Exim 4.98 will refuse certain inputs unless a server operates more securely. This change is intended to cut off possible exploit paths. Enhanced DKIM Handling: Recipient servers falsely flag fewer emails as risky by adding support for listing results within the dkim_status condition in ACL. Robust Error Handling: Instead of simply logging errors, Exim now responds with temporary rejections and wiping spool files if specific failures occur - a proactive management approach. TLS Resumption Fixes: These adjustments ensure secure emails are sent quickly and reliably, avoiding previous issues with load balancers. How Can I Upgrade to Exim 4.98? Upgrading to Exim's latest version is simple but essential for administrators. Exim is available in most Linux distributions through the standard package management system. To upgrade Exim, follow these steps: Backup Configuration Files: Before upgrading, always backup the current configuration files. Update Package Lists: Run sudo apt update or the appropriate command to refresh the list of packages. Upgrade Exim: Use sudo apt upgrade exim4 if you are using a RedHat-based distribution. Restart: Use sudo service Exim4 restart to restart the Exim Service after upgrading. This will ensure that all configurations and updates are in effect. Verify Upgrade: Recheck the version to confirm the upgrade. Linux admins must prioritize this update to protect their systems from attacks and performance issues. Regular monitoring of such updates and rapidresponse can help protect email infrastructures against potential threats and ensure a stable and secure service environment. Our Final Thoughts on the Significance of This Release Cyber threats are evolving, and so should our defenses. Exim 4.98 gives administrators the tools and improvements they need to combat critical vulnerabilities effectively. Prioritizing security improvements in critical infrastructures such as email servers is essential. This update is an excellent step in maintaining the robustness of today's digital communications networks. . Postfix 3.7 improves essential mail server protections, boosting safety and efficiency for users.. Exim Email Server, SMTP Vulnerability Fix, Email Security Improvements, Linux Email Systems. . Anthony Pell
Jul 24, 2024
•
Security Vulnerabilities
210
security advisorycode executionDebianDebian Critical Security Advisory: Firefox And Thunderbird Threats
Multiple severe security issues have been found in the popular Mozilla Firefox web browser and Thunderbird email client that significantly threaten the confidentiality, integrity, and availability of impacted systems. . CVE-2023-5730 can be best described as a potential gateway for unwanted actions. If an attacker is successful in exploiting this vulnerability, they could cause unexpected behavior within the browser. Essentially, it lets them run harmful scripts without your knowledge or consent, which could result in unauthorized access to your personal information, alteration of your data, or even control of your machine. CVE-2023-5721 , which also impacts the Thunderbird email client, involves the improper handling of certain email content. More specifically, if an attacker sends a specially crafted email to a Thunderbird user, and the user interacts with the email (for example, opening an attachment), the attacker could execute harmful code. This can lead to data theft, unauthorized use of your system, or worse – a complete system takeover. CVE-2023-6212 is a memory safety bug that could be exploited to run arbitrary code, while CVE-2023-6207 is a use-after-free in ReadableByteStreams due to ownership mismanagement. How Do These Vulnerabilities Affect Linux Systems? The security of Linux systems would also be significantly compromised if these vulnerabilities were exploited. Firefox and Thunderbird applications run on Linux, and vulnerabilities in these applications could be used as entry points to gain unauthorized access to your system or extract sensitive information. What Can You Do to Stay Safe? Critical Firefox and Thunderbird security updates have been released to mitigate the vulnerabilities recently discovered. Given these bugs’ significant threat to impacted systems, if left unpatched, we strongly recommend that all affected users apply the updates released by Debian , Debian LTS , Fedora , Oracle , SciLinux , Slackware , and Ubuntu now toprotect against attacks threatening the security, integrity, and availability of their systems and the confidentiality of their sensitive data. To stay on top of essential updates released by the open-source programs and applications you use, register as a LinuxSecurity user , subscribe to our Linux Advisory Watch newsletter, and customize your advisories for your distro(s). This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . Critical vulnerabilities discovered in Mozilla Firefox and Thunderbird endanger system security. Urgent measures should be taken.. Mozilla Firefox Bugs, Thunderbird Security Update, System Takeover Risk, Critical Security Advisory. . Brittany Day
Mar 03, 2024
•
Security Vulnerabilities
210
security advisorybuffer overflowFedoraUbuntu and Fedora: Critical Glibc Bug Leads to Privilege Escalation
A notorious buffer overflow vulnerability dubbed “Looney Tunables” was recently found in the GNU C Library. This severe bug exists in the glibc dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable ( CVE-2023-4911 ). This vulnerability was introduced in April 2021 and poses a significant threat to systems with default installations of Fedora 37 and 38, Ubuntu 22.04 and 23.04, and Debian 12 and 13. . According to the security researchers who discovered this vulnerability, "This environment variable, intended to fine-tune and optimize applications linked with glibc, is an essential tool for developers and system administrators. Its misuse or exploitation broadly affects system performance, reliability, and security." A local user can exploit the Looney Tunables flaw to gain full root privileges on impacted systems, potentially resulting in data breaches and system compromise. Debian , Fedora , Gentoo , Oracle , RedHat, and Ubuntu have released critical glibc security updates to mitigate this severe bug. Given this vulnerability's damaging repercussions on impacted systems, if left unpatched, we urge all impacted users to update immediately to protect against privilege escalation attacks potentially leading to downtime and compromise. To stay on top of essential updates released by the open-source programs and applications you use, register as a LinuxSecurity user , subscribe to our Linux Advisory Watch newsletter, and customize your advisories for your distro(s). This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . A significant Linux kernel vulnerability enables unauthorized users to gain elevated privileges, jeopardizing system integrity on several operating systems.. glibc Security Update, Local Privilege Escalation, Linux Critical Bug. . Brittany Day
Oct 19, 2023
•
Security Vulnerabilities
210
security advisorybuffer overflowcode executionDebian: Critical Update DLA-3567-1 severe: c-ares Code Execution Risk
A critical buffer overflow vulnerability has been found in c-ares before 1_16_1 thru 1_17_0 via the function ares_parse_soa_reply in ares_parse_soa_reply.c ( CVE-2020-22217 ). Due to how simple this bug is to exploit and its significant threat to the confidentiality, integrity, and availability of impacted systems, it has received a National Vulnerability Database base score of 9.8 out of 10 (“Critical” severity). . Exploitation of this flaw could allow an attacker to execute arbitrary code or cause a denial of service (DoS) condition. A crucial c-ares security update has been released to fix this severe flaw. We urge all impacted users to apply the updates issued by Debian LTS as soon as possible to prevent attacks potentially resulting in inconvenient, costly downtime and system compromise. To stay on top of essential updates released by the open-source programs and applications you use, register as a LinuxSecurity user , subscribe to our Linux Advisory Watch newsletter, and customize your advisories for your distro(s). This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . Important c-ares patch: Remediations for buffer overflow vulnerability addressing potential DoS and execution threats.. c-ares Security, Buffer Overflow Fix, DoS Vulnerability, Code Execution Patch, Debian Update. . Brittany Day
Sep 29, 2023
•
Security Vulnerabilities
210
security advisorycritical updateDenial of ServiceArchLinux, Debian LTS, Fedora: Critical OpenDMARC DoS Threat
A critical vulnerability was found in the OpenDMARC open-source implementation of the DMARC specification. It was discovered that OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 incorrectly handled certain inputs, resulting in remote memory corruption in certain situations ( CVE-2020-12460 ). This vulnerability has received a National Vulnerability Database base score of 9.8 out of 10 (“Critical” severity). . A remote attacker could possibly use this issue to cause a denial of service. Essential OpenDMARC updates have been released to mitigate this severe bug. We urge all impacted users to apply the updates released by ArchLinux , Debian LTS , Fedora , Gentoo , Mageia , and Ubuntu immediately to prevent loss of access to their critical systems. To stay on top of essential updates released by the open-source programs and applications you use, register as a LinuxSecurity user , subscribe to our Linux Advisory Watch newsletter, and customize your advisories for your distro(s). This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . An external threat actor could leverage this significant OpenDMARC vulnerability to initiate a denial of service attack. It's essential to apply updates immediately.. OpenDMARC Update,Critical Security Issue,Denial Of Service Exploit. . Brittany Day
Sep 22, 2023
•
Security Vulnerabilities
67
security advisorybug fixcritical updateLinux Full-Disk Encryption Bug Critical Update Advisory
Lots of people “run Linux” without really knowing or caring – many home routers, navigational aids, webcams and other IoT devices are based on it; the majority of the world’s mobile phones run a Linux-derived variant called Android; and many, if not most, of the ready-to-go cloud services out there rely on Linux to host your content. . But plenty of users and sysadmins don’t just “use Linux”, they’re responsible for hundreds, thousands, perhaps even millions of other people’s desktops, laptops and servers on which Linux is running. Those sysadmins are usually responsible not merely for ensuring that the systems under their jurisdiction are running reliably, but also for keeping them as safe and secure as they can. The article located at Naked Security is no longer available. . Tackling significant issues, this patch resolves a disk encryption flaw essential for strong security on Linux systems.. Encryption Fixes, Critical Updates, Linux Data Protection. . LinuxSecurity.com Team
Jan 17, 2022
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!