Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found -1 articles for you...
210
security advisoryUbuntupatchVLC Media Player: No Significant Vulnerabilities Detected in Software
There has been a lot of confusion over the last few days after news spread of a supposedvulnerability in the media player VLC. Despite being labelled as "critical", VLC's developers, VideoLAN, denied there was a problem at all. . And they were right. While there is a vulnerability, it was in a third-party library, not VLC itself. On top of this, it is nowhere near as severe as first suggested. Oh -- and it was fixed over a year ago. An older version of Ubuntu Linux was to blame for the confusion. The problem actually exists in a third-party library called libebml, and the issue was addressed some time ago. The upshot is that if you have updated VLC within the last year, there is no risk whatsoever. VLC's developers are understandably upset at the suggestion that their software was insecure. The link for this article located at BetaNews is no longer available. . Despite confusion over a critical flaw, VLC developers confirmed no vulnerabilities exist in their software, only in a library.. VLC Media Player, Libebml Library, Security Patch, Open Source Software. . Brittany Day
Jul 26, 2019
•
Security Vulnerabilities
83
security advisorycriticalremote attackRealNetworks RealPlayer 10.0.5 Critical Advisory: Remote Attack Risk
Users who run the media players on Linux or Unix are at risk of attack, security experts claim Popular media players RealPlayer and Helix Player are at risk of a security vulnerability that could let malicious attackers launch remote attacks on a user's system, security experts say. . A flaw has been discovered in RealNetworks' RealPlayer version 10.0.5.756 Gold and Helix Player 1.0.5.757 Gold running on Linux or Unix operating systems, according to a report released Tuesday by the French Security Incident Response Team, or FrSIRT. Attack code that takes advantage of the flaw, a so-called exploit, has been posted on the Internet, increasing the security risk to users. The link for this article located at ZDNet.co.uk is no longer available. . A vulnerability has been identified in RealNetworks' RealPlayer 10.0.5.756 Gold and Helix Player 1.0, presenting potential security threats.. RealNetworks Security, Remote Attack Threat, Media Player Risks, Helix Player Vulnerability. . LinuxSecurity.com Team
Sep 28, 2005
•
Hacks/Cracks
81
media playerprivacy riskuser informationExamining Flash Player Privacy Risks: Data Tracking and User Info
Macromedia's Flash media player is raising concerns among privacy advocates for its little-known ability to store computer users' personal information and assign a unique identifier to their machines. "A lot of media players come with identifiers embedded in them to track content usage and digital rights management," Chris Hoofnagle, director of the Electronic Privacy Information Center's West Coast office, said. "With respect to Windows Media Player and now the Macromedia player, we're realizing that the media players themselves are creating privacy risks." . Flash, popular for its ability to play animation and video clips, employs a technology known as local shared objects to save up to 100KB of information on users' hard drives. By assigning a unique identifier to a computer and preserving it in the space for the local shared object, a website can recognize that someone has already visited the site, and advertisers can use the information to determine that a visitor has previously viewed an ad. Websites that require users to fill out personal information can also associate that data with the identifier. Macromedia does not view its software as a threat to user privacy. "The Flash player by its nature doesn't by default gather any information," Jeff Whatcott, vice president of product management at Macromedia, said. " We designed that technology from the beginning to make sure that (computer) users are always in control of their key information." Macromedia provides instructions on its website for how to disable local shared objects on an individual site or all sites, delete data that is already stored locally, and set the maximum space allowed for storage. Unfortunately, most Flash users are unaware that the player is storing any information about them at all and are unlikely to see these instructions or understand how to follow them. The link for this article located at Security Pipeline is no longer available. . Flash, popular for its ability to play animation and video clips,employs a technology known as loca. macromedia's, flash, media, player, raising, concerns, among, privacy, advocates, little-known. . LinuxSecurity.com Team
Apr 21, 2005
•
Privacy
81
consumer protectionmedia playerinternet privacyWindows XP Media Player Data Logging Risk Highlighted By Privacy Advocate
A prominent Internet privacy advocate says Microsoft Corp. should have warned consumers that the media player that ships with its new Windows XP operating system connects to a server operated by the software giant and reports what DVDs customers insert into their PCs.. . .. A prominent Internet privacy advocate says Microsoft Corp. should have warned consumers that the media player that ships with its new Windows XP operating system connects to a server operated by the software giant and reports what DVDs customers insert into their PCs. Richard M. Smith said in a posting to Internet security mailing lists Wednesday that the Windows Media Player version 8 installed by default along with millions of copies of XP automatically contacts a Microsoft Web server to look up information about DVDs played by users. Smith, who one month ago complained that earlier - and more ubiquitous - versions of the Windows Media Player can give up a uniquely identifying digital fingerprint when communicating across the Internet, said that a similar ID number is transmitted when the version 8 player looks up DVD "chapter" information at a Microsoft Web site. The link for this article located at Newsbytes is no longer available. . An information rights activist condemns Google for failing to inform users regarding data tracking by Android's default settings.. Privacy Awareness, Microsoft Concerns, Data Logging, Windows XP Issues, Consumer Protection. . LinuxSecurity.com Team
Feb 21, 2002
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!