Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 CUPS Critical Control Character Injection CVE-2026-34980

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579-1

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 4 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorypatchimportant

SUSE: 2025:0609-1 Important Update: Ovmf Boot Issue Fix

* bsc#1237084 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 . # Security update for ovmf Announcement ID: SUSE-SU-2025:0609-1 Release Date: 2025-02-21T10:33:48Z Rating: important References: * bsc#1237084 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one security fix can now be installed. ## Description: This update for ovmf fixes the following issues: * PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-609=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-609=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-609=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-609=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-609=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-609=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * openSUSE Leap 15.5 (noarch) * qemu-uefi-aarch32-202208-150500.6.9.1 *qemu-ovmf-ia32-202208-150500.6.9.1 * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * openSUSE Leap 15.5 (x86_64) * qemu-ovmf-x86_64-debug-202208-150500.6.9.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * qemu-ovmf-x86_64-202208-150500.6.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1237084 . Critical security enhancements for ovmf affecting various SUSE releases, detailing significant vulnerabilities and installation instructions.. ovmf security update, high performance computing patch, SUSE update guidance. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 21, 2025 •Important SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryupdatesecurity fix

openSUSE Leap 15.5: SUSE-SU-2025:0609-1 important: ovmf boot issue

An update that has one security fix can now be installed.. # Security update for ovmf Announcement ID: SUSE-SU-2025:0609-1 Release Date: 2025-02-21T10:33:48Z Rating: important References: * bsc#1237084 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one security fix can now be installed. ## Description: This update for ovmf fixes the following issues: * PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-609=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-609=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-609=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-609=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-609=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-609=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * openSUSE Leap 15.5 (noarch) * qemu-uefi-aarch32-202208-150500.6.9.1 * qemu-ovmf-ia32-202208-150500.6.9.1 * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * openSUSE Leap 15.5 (x86_64) * qemu-ovmf-x86_64-debug-202208-150500.6.9.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * qemu-uefi-aarch64-202208-150500.6.9.1 * qemu-ovmf-x86_64-202208-150500.6.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * ovmf-tools-202208-150500.6.9.1 * ovmf-202208-150500.6.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * qemu-ovmf-x86_64-202208-150500.6.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1237084 . Urgent patch released for openSUSE Leap and SUSE Linux Enterprise Server addressing OVMF boot failures.. openSUSE Security Update, SUSE Patch Management, Linux Update Process, ovmf Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 21, 2025 •Important OpenSUSE
Banner 2 1028x280 1708121730 1 1771599631
100
Ls Advisories Suse Esm H240
Price Tag%201security advisoryimportantSUSE Linux

SUSE: 2022:2747-1 Critical Update for Oracleasm Boot Issue Resolution

An update that contains security fixes can now be installed. . SUSE Security Update: Security update for oracleasm ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2747-1 Rating: important References: #1198581 Affected Products: SUSE Linux Enterprise Real Time Extension 12-SP5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Real Time Extension 12-SP5: zypper in -t patch SUSE-SLE-RT-12-SP5-2022-2747=1 Package List: - SUSE Linux Enterprise Real Time Extension 12-SP5 (x86_64): oracleasm-kmp-rt-2.0.8_k4.12.14_10.94-4.6.2 oracleasm-kmp-rt-debuginfo-2.0.8_k4.12.14_10.94-4.6.2 References: https://bugzilla.suse.com/1198581 . SUSE Security Update: A crucial security patch for oracleasm addresses significant boot problems in SUSE Linux Enterprise.. SUSE Linux, Oracle ASM, Security Update, Boot Issues. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 10, 2022 •Important SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorysecurity fiximportant

SUSE: 2022:2657-1 Critical Fix for Oracleasm Boot Problem Encountered

An update that contains security fixes can now be installed. . SUSE Security Update: Security update for oracleasm ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2657-1 Rating: important References: #1198581 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2657=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2657=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): oracleasm-debugsource-2.0.8-150400.25.2.8 oracleasm-kmp-default-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 oracleasm-kmp-default-debuginfo-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 - openSUSE Leap 15.4 (aarch64): oracleasm-kmp-64kb-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 oracleasm-kmp-64kb-debuginfo-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 - SUSE Linux Enterprise Module forServer Applications 15-SP4 (aarch64 ppc64le s390x x86_64): oracleasm-kmp-default-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 oracleasm-kmp-default-debuginfo-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 References: https://bugzilla.suse.com/1198581 . SUSE has issued an essential Security Update for oracleasm, tackling major vulnerabilities. For detailed information, refer to announcement ID: SUSE-SU-2022:2658-1. SUSE Security Update, oracleasm patch, important updates, system security, boot issue fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 03, 2022 •Important SuSE
Banner 2 1028x280 1708121730 1 1771599631
100
Ls Advisories Suse Esm H240
Price Tag%201security advisoryupdateimportant

SUSE: 2022:2316-2 Critical Oracleasm Startup Problem Patch

An update that contains security fixes can now be installed. . SUSE Security Update: Security update for oracleasm ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2316-1 Rating: important References: #1198581 Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server for SAP 15-SP1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2316=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2316=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2316=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2316=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2316=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2316=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 oracleasm-kmp-default-debuginfo-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 oracleasm-kmp-default-debuginfo-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 oracleasm-kmp-default-debuginfo-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 oracleasm-kmp-default-debuginfo-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 oracleasm-kmp-default-debuginfo-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 oracleasm-kmp-default-debuginfo-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 - SUSE CaaS Platform 4.0 (x86_64): oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 oracleasm-kmp-default-debuginfo-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 References: https://bugzilla.suse.com/1198581 . SUSE has issued a critical security advisory regarding oracleasm; make certain your systems are updated with the newest patches.. Oracleasm Update, SUSE Enterprise, System Maintenance. . Severity: Important. LinuxSecurity.comTeam

Calendar%202 Jul 07, 2022 •Important SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorypatchcritical fix

SUSE: 2022:2272-1 Important: dpdk Secure Boot Key Critical Fix

An update that contains security fixes can now be installed. . SUSE Security Update: Security update for dpdk ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2272-1 Rating: important References: #1198581 Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server for SAP 15-SP1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2272=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2272=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2272=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2272=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2272=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2272=1 - SUSE Linux Enterprise HighPerformance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2272=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2272=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): dpdk-18.11.9-150100.4.16.1 dpdk-debuginfo-18.11.9-150100.4.16.1 dpdk-debugsource-18.11.9-150100.4.16.1 dpdk-devel-18.11.9-150100.4.16.1 dpdk-devel-debuginfo-18.11.9-150100.4.16.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-tools-18.11.9-150100.4.16.1 dpdk-tools-debuginfo-18.11.9-150100.4.16.1 libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le x86_64): dpdk-18.11.9-150100.4.16.1 dpdk-debuginfo-18.11.9-150100.4.16.1 dpdk-debugsource-18.11.9-150100.4.16.1 dpdk-devel-18.11.9-150100.4.16.1 dpdk-devel-debuginfo-18.11.9-150100.4.16.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-tools-18.11.9-150100.4.16.1 dpdk-tools-debuginfo-18.11.9-150100.4.16.1 libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): dpdk-18.11.9-150100.4.16.1 dpdk-debuginfo-18.11.9-150100.4.16.1 dpdk-debugsource-18.11.9-150100.4.16.1 dpdk-devel-18.11.9-150100.4.16.1 dpdk-devel-debuginfo-18.11.9-150100.4.16.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-tools-18.11.9-150100.4.16.1 dpdk-tools-debuginfo-18.11.9-150100.4.16.1 libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): dpdk-18.11.9-150100.4.16.1 dpdk-debuginfo-18.11.9-150100.4.16.1 dpdk-debugsource-18.11.9-150100.4.16.1 dpdk-devel-18.11.9-150100.4.16.1 dpdk-devel-debuginfo-18.11.9-150100.4.16.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-tools-18.11.9-150100.4.16.1 dpdk-tools-debuginfo-18.11.9-150100.4.16.1 libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): dpdk-18.11.9-150100.4.16.1 dpdk-debuginfo-18.11.9-150100.4.16.1 dpdk-debugsource-18.11.9-150100.4.16.1 dpdk-devel-18.11.9-150100.4.16.1 dpdk-devel-debuginfo-18.11.9-150100.4.16.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-tools-18.11.9-150100.4.16.1 dpdk-tools-debuginfo-18.11.9-150100.4.16.1 libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): dpdk-18.11.9-150100.4.16.1 dpdk-debuginfo-18.11.9-150100.4.16.1 dpdk-debugsource-18.11.9-150100.4.16.1 dpdk-devel-18.11.9-150100.4.16.1 dpdk-devel-debuginfo-18.11.9-150100.4.16.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-tools-18.11.9-150100.4.16.1 dpdk-tools-debuginfo-18.11.9-150100.4.16.1 libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 - SUSE CaaS Platform 4.0 (x86_64): dpdk-18.11.9-150100.4.16.1 dpdk-debuginfo-18.11.9-150100.4.16.1 dpdk-debugsource-18.11.9-150100.4.16.1 dpdk-devel-18.11.9-150100.4.16.1 dpdk-devel-debuginfo-18.11.9-150100.4.16.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 dpdk-tools-18.11.9-150100.4.16.1 dpdk-tools-debuginfo-18.11.9-150100.4.16.1 libdpdk-18_11-18.11.9-150100.4.16.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.16.1 References: https://bugzilla.suse.com/1198581 . SUSE Security Update 2023:1234-5 critical: kernel addresses vulnerability affecting system integrity across various platforms.. dpdk Security Fixes,SUSE Updates,Open Source Tools,Patch Management. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 05, 2022 •Important SuSE
Banner 2 1028x280 1708121730 1 1771599631
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorybug fixcritical bug

Red Hat Enterprise Linux: RHSA-2020-5607-01 Critical Boot Issue Fix

An update for fapolicyd is now available for Red Hat Enterprise Linux 8. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description:. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: fapolicyd bug fix update Advisory ID: RHSA-2020:5607-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:5607 Issue date: 2020-12-17 ==================================================================== 1. Summary: An update for fapolicyd is now available for Red Hat Enterprise Linux 8. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The fapolicyd software framework introduces a form of file access control based on a user-defined policy. The application file access control feature provides one of the most efficient ways to prevent running untrusted and possibly malicious applications on the system. Bug Fix(es): * When an update replaces the binary of a running application, the kernel modifies the application binary path in memory by appending the " (deleted)" suffix. Previously, the fapolicyd file access policy daemon treated such applications as untrusted, and prevented them from opening and executing any other files. As a consequence, the system was sometimes unable to boot after applying updates. With this update, fapolicyd ignores the suffix in the binary path so the binary can match the trust database. As a result, fapolicyd enforces the rules correctly and the update process can finish. (BZ#1906472) * Adding DISA STIG during OS installation causes 'ipa-server-install' to fail (BZ#1905895) Note: The issue from BZ#1906472 was previously addressed in erratum RHBA-2020:5242 linked to from the References section. Due to the high impact of theissue that can cause systems to become unable to boot, we are releasing the same fix again in a security erratum to ensure proper visibility to users who only install security updates. This fix has not been changed in any way since the original bug fix erratum. This erratum does not provide any security fixes. For more details about the issue, see the Knowledgebase article linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1905895 - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail [rhel-8.3.0.z] 1906472 - Erratum RHBA-2020:4969 is of no help when upgrading partially RHEL 8.2 systems [rhel-8.3.0.z] 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: fapolicyd-1.0-3.el8_3.4.src.rpm aarch64: fapolicyd-1.0-3.el8_3.4.aarch64.rpm fapolicyd-debuginfo-1.0-3.el8_3.4.aarch64.rpm fapolicyd-debugsource-1.0-3.el8_3.4.aarch64.rpm noarch: fapolicyd-selinux-1.0-3.el8_3.4.noarch.rpm ppc64le: fapolicyd-1.0-3.el8_3.4.ppc64le.rpm fapolicyd-debuginfo-1.0-3.el8_3.4.ppc64le.rpm fapolicyd-debugsource-1.0-3.el8_3.4.ppc64le.rpm s390x: fapolicyd-1.0-3.el8_3.4.s390x.rpm fapolicyd-debuginfo-1.0-3.el8_3.4.s390x.rpm fapolicyd-debugsource-1.0-3.el8_3.4.s390x.rpm x86_64: fapolicyd-1.0-3.el8_3.4.x86_64.rpm fapolicyd-debuginfo-1.0-3.el8_3.4.x86_64.rpm fapolicyd-debugsource-1.0-3.el8_3.4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/errata/RHBA-2020:5242 https://access.redhat.com/solutions/5542661 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGINPGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX9sNQdzjgjWX9erEAQiM2RAAh86ks3RrW8QLPyRBwXh9/EQjKrAHxNeT S3ttKdPuJOdtPsJniXeJdZtODNRVZnZQet/aJUlQ+5xrmYXPmlhwf0r9+2HpnLap WtUYEczIPkf5siZrX6crnB4x2m6Nf4vYhUviSQDf/C49lhH3R8v9Xj4aTi43lPYF I8pBFjyZLgFeQR8tKhBuZOQpgtPHUOZumqC0jLXAL12/TpY3OIDLzJ0QjciEhk7v TtDeOp9wYw8NYyV76mYnVVVR1TXrjIGUOQm2BvSYZAL7lFtrEeiSMZeqS63FWvAH dKb5O8S8blL2c8Zx/djyjm8iCXoFULxeclkePbBl8waRZssX3EbLqrUrxs3GJd3w /EhKqpP8qdB07W2I47HZf2ggfoxva7vG2U91YyMSsm1ria2YJr9pqjm5ZSGjTVMK M6QYUfhQnkczZ+Dg18AS0o/ElkY+fP3z/W80oNBRclo+r9qZ6aB6Bccnr344MtCf c6chiBdeNpfpuayvPu6zpfKgo7tTJWMxWGkMpagOdVZaDjrumQIBbc0L1SLvs9UP fzclbR8hmb7MGDcE1s1dMZy2nBh7vN43unLlQmRsboEJGcll9rIvh1LZz2OON53L AuyPhGGw9/qN96MVBxo+RuC5EMfyNySonuYFzU/IFEBLdY4vl5V9g//Lkme6bddf YZqFLp6PfoE=RXdS -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ====================================================. update, fapolicyd, enterprise, linux, relevant, releases/archit. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Dec 17, 2020 •Important Red Hat
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateupdate

SUSE 11: SUSE-SU-2020:14490-1 Moderate: Shim Boot Issue Fix

An update that solves one vulnerability and has two fixes is now available. . SUSE Security Update: Security update for shim ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:14490-1 Rating: moderate References: #1168994 #1175626 #1175656 Cross-References: CVE-2020-10713 Affected Products: SUSE Linux Enterprise Server 11-SP4-LTSS ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for shim fixes the following issues: Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 (bsc#1168994) This update addresses the "BootHole" security issue (master CVE CVE-2020-10713), by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and (if used) Xen from or after July / August 2020 are applied. Also fixed: + shim-install: install MokManager to \EFI\boot to process the pending MOK request (bsc#1175626, bsc#1175656) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4-LTSS: zypper in -t patch slessp4-shim-14490=1 Package List: - SUSE Linux Enterprise Server 11-SP4-LTSS (x86_64): shim-15+git47-12.5.1 References: https://www.suse.com/security/cve/CVE-2020-10713.html https://bugzilla.suse.com/1168994 https://bugzilla.suse.com/1175626 https://bugzilla.suse.com/1175656 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . SUSE has issued a security updateaddressing the 'BootHole' vulnerability linked to the shim installation process, offering crucial fixes and installation guidance. SUSE Security Update, shim fix, boot security issue, SUSE Linux patch. . LinuxSecurity.com Team

Calendar%202 Sep 15, 2020 SuSE
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics