What Are You Looking To Secure Today?
Advisories
Debian libhttp-daemon-perl Critical Shell Command Execution DLA-4639-1
A flaw was discovered in libhttp-daemon-perl, a simple http server class for Perl, which may result in the execution of arbitrary shell commands or file overwrite when processing specially crafted input. For Debian 11 bullseye, this problem has been ...
Debian Squid Significant Information Exposure Service Disruption DSA-6360-1
Multiple security issues were discovered in the Squid proxy caching server, which could result in information disclosure or denial of service. For the stable distribution (trixie), these problems have been fixed in version 6.13-2+deb13u2. We recommen...
Debian gst-plugins-good1.0 Critical Denial of Service Code Exec DSA-6359-1
Multiple security vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For ...
Debian libhttp-daemon-perl Important Exec Command Flaw DSA-6358-1
A flaw was discovered in libhttp-daemon-perl, a simple http server class for Perl, which may result in the execution of arbitrary shell commands or file overwrite when processing specially crafted input. For the stable distribution (trixie), this pro...
Debian Pillow Important DoS Code Exec Vulnern DSA-6357-1
Multiple security vulnerabilities have been discovered in Pillow, a Python imaging library, which could result in denial of service or the execution of arbitrary code if malformed files are processed. For the stable distribution (trixie), these probl...
Join Our Community
Join our community and get the latest security insights delivered to you.
Featured Articles
HTTP/2 Bomb: Why Linux Infrastructure is Vulnerable to a New Low-Bandwidth DoS Attack
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the...
Compromised VS Code Extension Puts Linux Development Pipelines at Risk
The compromise of Nx Console shows how much infrastructure now sits behind a single developer...
Get expert insights in the realm of Linux Security
Subscribe to Linux Security Newsletters
Linux Persistence Hunting: The 5 Techniques Security Teams Miss Most
You remove the malware. You rotate the compromised credentials. You patch the original...
Red Hat npm Package Compromise Highlights a Growing Supply Chain Problem
Researchers investigating a campaign now tracked as Miasma found that more than 30 packages in Red...
Why Linux Rootkits Still Matter in Cloud and VMware Environments
Linux rootkits are old, but they never really disappeared. They just stopped attracting the same...
Get expert insights in the realm of Linux Security
Subscribe to Linux Security Newsletters
Latest Linux Security News
Europe’s Open Source Strategy Takes Aim at Software Security’s Maintenance Problem
OpenStack Keystone Flaws Expose Multiple Paths to Cloud Privilege Escalation
The recent Keystone advisory is unusual because the vulnerabilities are scattered across several features but keep affecting the same class of security controls. Application credentials, trusts, RBAC enforcement, project ownership validation, token e...
Fortinet FortiSandbox Critical Command Execution Risk Exploit 2026-39813
Fortinet has confirmed active exploitation of three FortiSandbox vulnerabilities. One allows attackers to bypass login controls, while the other two enable command execution directly on the appliance. Combined, they create a path from unauthenticated...
Trending News
HOWTOs
How to Find and Secure Exposed Services on Linux
Open ports have a way of accumulating over time. A test environment gets deployed and never removed. An administrative interface is exposed for troubleshooting and left in place. A database that was supposed to listen internally ends up reachable fro...
How to Find and Remove Malicious Cron Jobs on Linux
A compromised Linux server can continue running malware long after the initial intrusion. One of the most common persistence techniques is a malicious cron job that silently downloads payloads, restarts malware, or re-establishes attacker access ever...
How to Harden SSH on Linux After Disabling Password Authentication
Most SSH hardening advice ends at the same recommendation: Disable password authentication and use SSH keys.
How to Detect Unauthorized SSH Keys on Linux Systems
Most of the time, nobody notices. SSH authentication succeeds, no alerts are generated, and the connection looks exactly the way it did the day the key was installed. That's part of the problem.
Linux IDS vs IPS: Operational Differences and Deployment Tradeoffs
The wrong IPS rule can look like a security fix right up until it becomes an outage.
Community Poll
Is automated patching safe for servers?
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!