Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 4 articles for you...
210
security advisorydenial of servicekernel updateRHEL and CentOS 7 Kernel Update: Security Fixes for Graphics Flaws
RHEL (Red Hat Enterprise Linux) and CentOS Linux 7 users have received a new Linux kernel security update fixing several vulnerabilities affecting the Intel graphics drivers. . The new Linux kernel security update comes exactly two months after the previous one and it’s here to fix three security vulnerabilities discovered by various security researchers in the Intel graphics drivers (i915), as well as three other security flaws. The three security vulnerabilities affecting the Intel graphics drivers are CVE-2020-12362 , an integer overflow that could allow a privileged user to escalate his/her privileges via local access, CVE-2020-12363 , an input validation flaw, and CVE-2020-12364 , a null pointer reference, both of which allowing a privileged user to initiate a denial-of-service (DoS) attack via local access The link for this article located at 9 to 5 Linux is no longer available. . The latest Linux kernel upgrade for RHEL and CentOS 7 addresses Intel graphics performance concerns, enhancing overall system security significantly.. kernel update, RHEL security, CentOS security, graphics flaw, local privilege escalation. . Brittany Day
Jun 18, 2021
•
Security Vulnerabilities
210
security advisoryIntellocal accessIntel: Two New Security Issues on Processors Related to Data Leakage
Intel last night made public two more data leakage disclosures, which tie back to Zombieload and November's TAA issue. . Here are the new disclosures: CVEID: CVE-2020-0548 Description: Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. CVSS Base Score: 2.8 Low CVE-2020-0549 Description: Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. CVSS Base Score: 6.5 Medium The link for this article located at Phoronix is no longer available. . Intel reveals two fresh security concerns tied to CPU termination flaws and access loopholes.. Data Leakage, Intel Processors, Information Disclosure. . Brittany Day
Jan 28, 2020
•
Security Vulnerabilities
77
security advisorymoderatelocal accessAstaro Security Linux 2.016 Advisory Moderate Design Flaws
Several serious theoretical and practical security vulnerabilities, alleged GPL license violations, and more were found in Astaro "secure" Linux. Joerg Luebbert writes, "Some of the vulnerabilities might be local and some might argue about that Astaro Security Linux is a Firewall and no server... but as it uses SSHD it could always be that the "loginuser" account might have been compromised and shell access granted.". . .. Several serious theoretical and practical security vulnerabilities, alleged GPL license violations, and more were found in Astaro "secure" Linux. Joerg Luebbert writes, "Some of the vulnerabilities might be local and some might argue about that Astaro Security Linux is a Firewall and no server... but as it uses SSHD it could always be that the "loginuser" account might have been compromised and shell access granted." Date: Sat, 02 Feb 2002 19:40:08 +0100 From: "[ISO-8859-1] Jörg Lübbert" To: bugtraq@ Subject: Vulnerabilities in Astaro Security Linux 2.016 Preamble: Product: Astaro Security Linux Version: 2.016 Vendor: Astaro AG Vendor URL: Vendor status and reply: Vendor has been contacted with posting of this message Description: Astaro develops and distributes the firewall solution Astaro Security Linux. Astaro Security Linux offers extensive protection for local networks against hackers, viruses and other risks of connecting to the Internet. Astaro Security Linux is distributed by a worldwide network of partners who offer local support regarding installation and maintenance. Introduction: Dear BugTraq readers. I've taken a short glimpse on Astaro Security Linux and found out some points of interest that are mostly design flaws. Please note that I am theorising (based on a 1 1/2 hour research only) about the impacts and have not proven their concepts on Astaro Security Linux yet even though most can be proved easily. Some of the vulnerabilities might be local and some might argue about that Astaro Security Linux is a Firewall and no server... butas it uses SSHD it could always be that the "loginuser" account might have been compromised and shell access granted. Vulnerabilities: Summary: 5 Design flaws 2 Completely theorised design flaws 1 Possible design flaw 1 Licensing violation 1 Software bug Category 1: Design flaw Problem 1: Astaro Security Linux chroots various daemons like snmpd and named in an insecure manner. The proc filesystem is mounted within their chroot jails. Furthermore the chroot jail entitled chroot-ipsec provides the proc file system, a bash, ls, cat and most notably mount. Impact 1: Arbitrary users could cause severe damage by breaking the named or snmpd remotely and by misusing the proc file system to reconfigure certain parts of the system configuration under proc/sys. Furthermore proc/kcore could be read to obtain information stored in memory which could lead to system administrator privileges. These could for instance be DES encrypted passwords which leads to another design flaw Exploit 1: None provided Category 2: Design flaw Problem 2: Astaro Security Linux uses the DES algorithm as standard hashing scheme. DES has turned very old and is known to be easily crackable with modern processing power. Impact 2: Arbitrary users who obtain encrypted passwords (see 1) could retreive a 6 letter clear-text password within just some hours using modern processing power and use it to compromise the system. Exploit 2: None provided Category 3: Design flaw Problem 3: Astaro Security Linux runs most of its daemons with UID 0 privileges. Affected daemons are: named or snmpd. These daemons run in a chroot jail. Impact 3: Arbitrary users could remotely crack one of the affected daemons and use UID 0 powers to compromise the whole file system even if these daemons run in a chroot jail. Additional note 3-1: The main design flaw lies within that these daemons run UID 0 within a chroot jail. The daemons itself are not the design flaw (even though BIND 8.2.3 can be considered old). Additional note3-2: Other daemons with UID 0 are syslogd, klogd, mdw_daemon.pl, cron, aua and sshd. VPN subsystem, SQUID and others haven't been checked by me. Exploit 3: None provided Category 4: Possible design flaw Problem 4: OpenSSL PRNG Internal State Disclosure Vulnerability Impact 4: Please see: Exploit 4: None provided Additional note 4: It was NOT tested if the version of OpenSSL (0.9.6) used in Astaro Security Linux is a security-patched version of OpenSSL 0.9.6 since no sources were provided (5) Category 5: Licensing violation Problem 5: Astaro AG releases software packages without providing their sources and modifications to them as required in §3 of the GNU GPL and neither seems to offer distribution of GPL sources for free within a 3 year period in a written form. Additional note 5: I have not checked every available documentation for a written form of an offer as described in GNU GPL §3 b but only their license (which should normally contain just that) and CD-ROM contents. Category 6: Design flaw Problem 6: Astaro Security Linux has a default limit for simultaneously processes of 8190 soft and 8912 hard and its default cpu-time is "unlimited". Impact 6: Arbitrary users with local access (loginuser) can easily launch fork bombs to consume 100% CPU power and stop the system from operating. Exploit 6: None provided Category 7: Completely theorised design flaw Problem 7: Astaro Security Linux uses a very old version of PAM (0.70 dated 09.10.1999) which maybe contains vulnerabilities. Category 8: Design flaw Problem 8: /proc/version indicates "Linux version 2.4.8-asl-0.010815.0", which indicates the 2.4.8 version of the Linux kernel that contains some security vulnerabilities. Additional information on possible vulnerabilities can be found here: Impact 8: Various, see above URLs. Exploit 8: None provided Additional note 8: Due to absence of source code it could not be proved if this kernel is patched against the security issues mentionedabove. Category 9: Completely theorised design flaw Problem 9: Astaro Security Linux seems to rely on an old version of glibc according to ls -l /lib/libc*. Output: -rwxr-xr-x 1 root root 1080268 Sep 15 2000 libc.so.6 If my assumption is correct and the version used was not patched, it could be possible that the system is vulnerable to a "glibc file globbing heap corruption vulnerability". For more information please see: Impact 9: See URL above Exploit 9: None provided Category 10: Software bug (OT for Bugtraq, still included;) Problem 10: During installation one can choose to install OpenSource software only or OpenSource software and the so called Astaro Security Enterprise Toolkit. When only "OpenSource" was chosen, the installer locks up after entry of the last password (I think this was for lilo). If my assumption is right (that a lilo password is asked for) then no lilo password will be set even though the Enterprise Toolkit was selected and the installation finished successfully. Additional note 10: System tested on was 800MHZ Duron, 128MB RAM, 20GB Maxtor HD, 52X CD-ROM, 3X RTL 8139. Final words: Conclusion, a final word to the Astaro AG: So much about a "Security Linux"... You may have done the firewalling and the configuration interface of your product real good... but you should also read some articles on what could be considered more internal security and work on your products some more. Disclaimer: None of the information provided are meant to aid any destructive purposes. I will furthermore take no responsibility for that anyone will use the information provided for his or her own malicious purposes. This information is intended to aid in improving the current state of Astaro Security Linux, warn companies and individuals who run Astaro Security Linux and should help other designers of Linux distributions to avoid flaws like the ones elaborated on above. Please also not that I am in no way affiliated with Astaro AG or any of their 3rd party affiliates or wantto harm Astaro AG and/or their customers. - Jörg Lübbert (aka Kaladis) -- Kaladix Linux - The Secure Linux Distribution URL: . Numerous practical security weaknesses and design flaws are highlighted in Astaro Security Linux, indicating critical issues.. Astaro Security Linux, design flaws, security weaknesses, GPL violations, access control. . LinuxSecurity.com Team
Jun 02, 2019
•
Server Security
82
security advisorysecurity researchlocal accessSwiss E-Voting System Advisory: Cryptographic Risk of Vote Tampering
Two separate teams of security researchers and academics from universities in Australia and Switzerland have revealed today vulnerabilities in the e-voting system that the Swiss voting commission plans to roll out for future elections. . Among the reported vulnerabilities there is one that security researchers said it could allow an attacker with local access to a voting machine --or the voting machine vendor itself-- to tamper with cast votes. The vulnerability resides in the cryptographic system that verifies that the cast votes are the same ones that are being reported, however, researchers say this cryptographic scheme is weak and allows someone to swap votes. The link for this article located at ZDNet is no longer available. . An in-depth examination of weaknesses present in Switzerland's electronic voting framework that could potentially enable manipulation of ballots.. Swiss E-Voting,Cryptographic Vulnerability,Vote Tampering,Security Research,Local Access. . Brittany Day
Mar 13, 2019
•
Government
83
security advisorycriticallocal accessBelkin N750 Router Critical: Local Access Risk Resolved
A serious vulnerability in a popular Belkin router could be exploited by a local, unauthenticated attacker to gain full control over affected devices.. The good news is that the bug has already been patched by Belkin. The bad news is that approximately nobody installs router firmware updates. The link for this article located at ThreatPost is no longer available. . The good news is that the bug has already been patched by Belkin. The bad news is that approximately. serious, vulnerability, popular, belkin, router, exploited, local, unauthenticated. . LinuxSecurity.com Team
Nov 10, 2014
•
Hacks/Cracks
77
security advisoryexploitlocal accessFreeBSD 6.0-6.4: Local Root Access Risk in kqueue Notification Interface
A security researcher has uncovered a security bug in the FreeBSD operating system that allows users with limited privileges to take full control of underlying systems.. The bug in FreeBSD's kqueue notification interface makes it trivial for those with local access to a vulnerable system to gain full root privileges, Przemyslaw Frasunek, an independent security consultant in Poland, told The Register. It affects versions 6.0 through 6.4 of the operating system, the last two versions of which enjoy wide use and continue to be supported by the FreeBSD Foundation. Versions 7.1 and and beyond are not vulnerable. The link for this article located at The Register is no longer available. . A vulnerability in OpenBSD permits unauthorized users to escalate privileges through a flaw in the PF firewall subsystem.. FreeBSD Access Control Bug, Local Root Exploit, kqueue Notification Issue. . LinuxSecurity.com Team
Sep 14, 2009
•
Server Security
77
security advisoryupdatesendmailSendmail Update: Critical Local Access Risk for Unix/Linux Admins
Security experts and vendors of Linux and other Unix-like operating systems are urging network administrators to replace some versions of popular e-mail server software known as Sendmail, because the most recent open-source versions can provide a doorway for local hackers.. . .. Security experts and vendors of Linux and other Unix-like operating systems are urging network administrators to replace some versions of popular e-mail server software known as Sendmail, because the most recent open-source versions can provide a doorway for local hackers. Since malicious individuals would need to gain command-line access to a server in order to exploit the vulnerability, the problem is greatest for organizations such as Internet service providers or universities that regularly provide shell access to users. Cade Cairns, a member of the Security Focus Threat Analysis Team, reported late last week that hackers with access to run Sendmail from the command line of vulnerable systems could possibly gain administrator access to the server by supplying specially crafted commands. The link for this article located at Newsbytes is no longer available. . Specialists strongly recommend that system administrators enhance their Sendmail versions to mitigate the possibility of unauthorized local access by hackers.. Sendmail Security Update, Unix-Like Systems, Mail Server Vulnerability. . LinuxSecurity.com Team
Aug 24, 2001
•
Server Security
83
security advisorykernel updatelocal accessSuSE Kernel Update: Clarifying Misconceptions On Backdoors And Security
Roman Drahtmüller send this message to the suse-security-announce mailing list in regards to an April Fools joke that some people are taking a little bit too seriously. . .. Roman Drahtmüller send this message to the suse-security-announce mailing list in regards to an April Fools joke that some people are taking a little bit too seriously : Date: Thu, 29 Mar 2001 15:48:18 +0200 (MEST) From: Roman Drahtmueller To:
Mar 29, 2001
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!