Explore top 10 tips to secure your open-source projects now. Read More
×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 48 articles for you...
79
security advisorysoftware patchbug fixDebian 12.8 "Bookworm": 50 Security Updates and Upgrade Instructions
The Debian Project recently unveiled Debian 12.8 as the eighth update of its stable distribution, Debian 12, codenamed "Bookworm." While not technically a new release of Debian 12, Debian 12.8 nonetheless features important security fixes and corrections across various packages in Debian 12. . In this article, I'll provide an in-depth overview of what can be expected in this point release. I'll then explain how you can upgrade to Debian 12.8 to take advantage of the security fixes and updates introduced. Let's begin by examining the notable features and capabilities of Debian 12.8 "Bookworm." Key Features and Capabilities of Debian 12.8 "Bookworm" Debian 12.8 "Bookworm" continues the robust and dependable experience users have come to expect from Debian distributions. This release's primary emphasis is maintenance and security to ensure the system remains efficient and safe for its users. Debian 12.8's signature features and capabilities include its unparalleled stability, demonstrated by significant updates and bug fixes that correct existing issues without creating new instabilities. Security remains at the core of everything it does - evidenced by 50 security updates addressing various vulnerabilities. This update enhances package integrity by targeting specific packages to strengthen their functionality and security and ensure seamless integration into the ecosystem. One of the notable aspects is the ease of upgrade. Thanks to an up-to-date mirror, users can quickly upgrade to the latest point release without needing a fresh installation. Comprehensive bug fixes are also an integral component, with 68 bugs addressed, ranging from minor issues to critical fixes that significantly improve user experience. Notable Security Issues Addressed in Debian 12.8 Security updates are vitally important to any operating system, and Debian 12.8 stands out in this area by offering solutions for numerous vulnerabilities to ensure system integrity and prevent known exploits. Critical security updatesinclude fixes to address CVE-2023-52168 and CVE-2023-52169 issues in 7zip's NTFS handler's heap buffer overflow and out-of-bounds read problems, respectively, while ClamAV , updates such as CVE-2024-20505 and CVE-2024-20506 mitigate denial of service vulnerabilities as well as file corruption vulnerabilities. Amanda package updates complete a fix for CVE-2022-37704 , restoring operation with xfsdump. In addition, CVE-2024-8096 corrects curl's handling of specific OCSP responses, while CVE-2024-28182 addresses a denial-of-service issue in the nghttp2 package. Additionally, updates to the Linux Kernel ABI version 6.1.0-27 ensure compatibility between software and hardware components and further security measures designed to defend Debian 12.8 "Bookworm" against potential threats while taking advantage of all available protocols and patches. Debian 12.8 brings with it not only security enhancements but also numerous necessary corrections across several packages. For instance, NTFS-3g updates address use-after-free issues in ntfs-uppercase-mbs and change the fuse classification to Depends. OpenSSL package now includes the most upstream release, which addresses buffer overread and out-of-bounds memory access vulnerabilities. SQLite3 addresses buffer overreads, integer overflows, and stack overflows, while Systemd's new stable release provides improved system initialization and service management. Python3.11 fixes regression issues related to ReDoS vulnerabilities found within specially crafted tar archives. Furthermore, its comprehensive list of bug fixes significantly increases system reliability, from minor adjustments like correcting path information in the notify-osd desktop launcher file to critical fixes like preventing Python packages from experiencing NULL dereferencing crashes. How to Upgrade to Debian 12.8 Upgrading to Debian 12.8 is an effortless process designed to minimize disruption for users and administrators. Before beginning, existing system packages must beup-to-date. This can be accomplished using the sudo apt update and sudo apt upgrade commands. To change to a stable mirror, you must modify your /etc/apt/sources.list file with appropriate entries from Debian mirrors. Visit the Debian mirror list for a comprehensive list of mirrors. Once your mirror has been updated, use sudo apt update followed by sudo apt full-upgrade to complete a system upgrade and install the latest point release. Reboot your system using the sudo reboot command to apply all changes made with these steps and benefit from all the latest fixes and security updates in Debian 12.8 without reinstalling the operating system from scratch. Our Final Thoughts on the Significance of This Release Debian 12.8 "Bookworm" showcases the Debian Project's dedication to creating a secure, stable, and reliable operating system. Containing 68 bug fixes and 50 security updates, this point release strives to enhance user experiences by improving quality and security. We encourage users and system administrators to upgrade to maximize the benefit from these improvements. Debian continues to develop operating systems that balance robustness with cutting-edge innovations, and Debian 12.8 "Bookworm" is proof. Have you upgraded to Debian 12.8? What is your opinion on these changes and fixes? Connect with us @lnxsec and let us know! . Ubuntu 22.04 improves performance and reliability through essential patches and enhancements. Update your system today to ensure protection!. Debian 12.8, security updates, bug fixes, system upgrades, Linux fixes. . Brittany Day
Nov 12, 2024
•
Security Projects
79
security updatesecurity fixhardware supportOpenBSD 7.4 Security Update: New Hardware Support And Fixes
Theo de Raadt released OpenBSD 7.4 today as the open-source BSD operating system project's 55th release. . OpenBSD 7.4 features a wide variety of improvements from new kernel features to improved hardware support, security updates, AMD Zenbleed handling updates, and much more. Downloads and more details on the hundreds of changes with OpenBSD 7.4 via OpenBSD.org . The link for this article located at Phoronix is no longer available. . OpenBSD 7.4 unveils expanded hardware compatibility, critical security updates, and significant kernel optimizations for its users.. OpenBSD 7.4, Security Improvements, Hardware Enhancements. . LinuxSecurity.com Team
Oct 17, 2023
•
Security Projects
78
security advisorysecurity fixubuntuUbuntu 23.04 & 22.04.3 LTS: Security Pocket Configuration Issue
It turns out that Ubuntu Linux installations of Ubuntu 23.04, 22.04.3 LTS, and installs done since April 2023 that accepted the Snap version update haven't been following Ubuntu's own recommended security best practices for their security pocket configuration for packages. A new Subiquity release was issued today to fix this problem while those on affected Ubuntu installs are recommended to manually edit their /etc/apt/sources.list file. . Subiquity 23.09.1 was released today and explains: "This release addresses an issue (LP: #2033977) where the security pocket in sources.list can end up not configured matching documented best practices. It is recommended to configure the $series-updates to come from security.ubuntu.com, to minimize the effect of mirroring delays. Affected systems will be ones installed with Ubuntu 23.04, 22.04.3LTS, or installs done since April 2023 that accepted the snap version update. To correct systems already installed, please modify /etc/apt/sources.list, look for the lines containing -security, and update them to use https://ubuntu.com/security/notices " The link for this article located at Phoronix is no longer available. . The recent update to Subiquity 23.09.1 tackles issues with Ubuntu installations that overlooked optimal security measures.. ubuntu installations, security best practices, subiquity update. . LinuxSecurity.com Team
Sep 16, 2023
•
Vendors/Products
210
security advisoryhigh severitysecurity fixRuby: High Severity Fixes For CVE-2021-3362 and CVE-2022-28739
Two important security bugs have been found in Ruby. It was discovered that an HTTP response splitting flaw exists in the Ruby cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 (CVE-2021-3362). It was also discovered that a buffer over-read occurs in String-to-Float conversion in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2 (CVE-2022-28739). With a low attack complexity and a high confidentiality and integrity impact, these bugs have received a National Vulnerability Database severity rating of “High”. . An attacker could exploit these flaws to maliciously modify the response a user would receive from a vulnerable application, or to expose sensitive information. A Ruby security update has been released that mitigates these issues. We strongly recommend that all impacted users apply the Ruby updates issued by their distro(s) immediately to protect against attacks threatening the confidentiality and integrity of their systems and their sensitive data. To stay on top of important updates released by the open-source programs and applications you use, be sure to register as a LinuxSecurity user , then subscribe to our Linux Advisory Watch newsletter and customize your advisories for the distro(s) you use. This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . Crucial Python vulnerabilities patched to avert data leakage and unauthorized access, safeguard your infrastructure today.. Ruby Security Update, HTTP Response Fix, Data Exposure Prevention. . Brittany Day
Jun 10, 2023
•
Security Vulnerabilities
210
security advisoryprivilege escalationaccess controlrunC Security Advisory: Critical Privilege Escalation Threats Identified
Several important security issues were identified in the runC Open Container Project. It was discovered that runC incorrectly performed access control when mounting /proc to non-directories (CVE-2023-27561), and incorrectly handled /proc and /sys mounts inside a container (CVE-2023-28642). . These bugs could possibly allow an attacker to escalate privileges or bypass AppArmor, and potentially SELinux. A runC security update that fixes these flaws has been released. We strongly recommend that all impacted users apply the runC updates issued by their distro(s) as soon as possible to protect the confidentiality, integrity and availability of their systems. To stay on top of important updates released by the open-source programs and applications you use, be sure to register as a LinuxSecurity user , then subscribe to our Linux Advisory Watch newsletter and customize your advisories for the distro(s) you use. This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . Serious runC vulnerabilities may result in privilege escalation and evasion of AppArmor. Prompt updates are necessary for system security.. runC Security, Privilege Escalation Fixes, Open Container Vulnerabilities. . Brittany Day
May 26, 2023
•
Security Vulnerabilities
210
security advisorysecurity issuesecurity fixGit 2.40.1 High-Severity Advisory: Multiple Security Issues Fixed
Git 2.40.1 has been released to address three new security vulnerabilities being disclosed, which have been classified as “high-severity” by the National Vulnerability Database (NVD) due to their high confidentiality, integrity and availability impact, and the low attack complexity and lack of privileges required to exploit them. Due to these security fixes, updates for prior stable Git series are also availble with v2.39.3, v2.38.5, v2.37.7, v2.36.6, v2.35.8, v2.34.8, v2.33.8, v2.32.7, v2.31.8, and v2.30.9. . The three Git security vulnerabilities recently discovered and fixed are CVE-2023-25652, CVE-2023-25815, and CVE-2023-29007. These vulnerabilities could lead to a path outside of the Git working tree potentially being overwritten with partially controlled contents, the possibility of malicious placement of crafted messages when Git is built without translated messages, and the third vulnerability is around arbitrary configuration injection. CVE-2023-25652: By feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). CVE-2023-25815: When Git is compiled with runtime prefix support and runs without translated messages, it still used the gettext machinery to display messages, which subsequently potentially looked for translated messages in unexpected places. This allowed for malicious placement of crafted messages. CVE-2023-29007: When renaming or deleting a section from a configuration file, certain malicious configuration values may be misinterpreted as the beginning of a new configuration section, leading to arbitrary configuration injection. Further details on these updates and downloads can be accessed via the release annoncement . To stay on top of important updates released by the open-source programs and applications you use, be sure to register as a LinuxSecurity user , then subscribe to our LinuxAdvisory Watch newsletter and customize your advisories for the distro(s) you use. This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . Latest patches for Git tackle a trio of critical vulnerabilities that threaten to compromise both system security and data privacy.. Git Updates, Security Fixes, Open-Source Compliance. . Brittany Day
May 04, 2023
•
Security Vulnerabilities
215
security advisoryupdatesecurity fixMidnightBSD 3.0.1 Introduces Security Fixes and rc.d Improvements
Building off last month's release of MidnightBSD 3.0 for this desktop-focused, FreeBSD-forked operating system the v3.0.1 update is now available. . This Xfce-using desktop BSD OS has seen several fixes and other minor refinements with today's MidnightBSD 3.0.1 unveiling from security fixes to cleaning up of rc.d service scripts. The new release can be downloaded at MidnightBSD.org . The link for this article located at Phoronix is no longer available. . MidnightBSD 3.0.1 has been released, featuring essential security enhancements and refined rc.d scripts to boost both stability and performance.. MidnightBSD 3.0.1, security updates, rc.d improvements. . Brittany Day
Apr 07, 2023
•
Desktop Security
81
security advisorykernel updatesecurity fixParrot OS 5.2: Kernel 6.0 Update Enhances Security And Performance
Parrot OS 5.2 brings Linux kernel 6.0, fixes important security issues, and improves its system performance on Raspberry Pi devices. . Parrot OS, similar to Kali, is a Debian-based Linux distribution designed for security and privacy. Using the MATE desktop environment, Parrot OS includes various tools for penetration testing, digital forensics, reverse engineering, cryptography, and anonymity, making it a popular choice for security professionals and researchers. Just over four months after its latest stable 5.1 release , Parrot OS 5.2 is finally here. So let’s see what’s changed. . Parrot OS boosts user safety and efficiency through updates in the Linux kernel, enhancing support for TOR and concentrating on system performance improvements.. Parrot OS, Kernel Update, Security Enhancements, System Performance. . LinuxSecurity.com Team
Feb 20, 2023
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!