Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
100
security advisorysecurity updatemoderate severitySUSE 15.5: 2023:1112-1 Moderate: CDI Importer Security Fixes
The container suse/sles/15.5/cdi-importer was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles/15.5/cdi-importer ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:1112-1 Container Tags : suse/sles/15.5/cdi-importer:1.55.0 , suse/sles/15.5/cdi-importer:1.55.0-150500.3.18 , suse/sles/15.5/cdi-importer:1.55.0.17.259 Container Release : 17.259 Severity : moderate Type : security References : 1208432 ----------------------------------------------------------------- The container suse/sles/15.5/cdi-importer was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1768-1 Released: Wed Apr 5 10:30:50 2023 Summary: Security update for skopeo Type: security Severity: moderate References: This update for skopeo fixes the following issue: - rebuild against the current go1.19 version to make sure bugs and security issues are fixed. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:1779-1 Released: Thu Apr 6 08:16:58 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate References: 1208432 This update for systemd fixes the following issues: - Fix return non-zero value when disabling SysVinit service (bsc#1208432) - Drop build requirement on libpci, it's not no longer needed - Move systemd-boot and all components managing (secure) UEFI boot into udev sub-package, so they aren't installed in systemd based containers The following package changes have been done: - libudev1-249.16-150400.8.25.7 updated - libgcrypt20-1.9.4-150500.10.16 updated - libgcrypt20-hmac-1.9.4-150500.10.16 updated - libsystemd0-249.16-150400.8.25.7 updated - libopenssl1_1-1.1.1l-150500.15.1 updated - libopenssl1_1-hmac-1.1.1l-150500.15.1 updated -sles-release-15.5-150500.38.2 updated - libnettle8-3.8.1-150500.2.22 updated - qemu-block-curl-7.1.0-150500.47.9 updated - libhogweed6-3.8.1-150500.2.22 updated - systemd-249.16-150400.8.25.7 updated - qemu-tools-7.1.0-150500.47.9 updated - containerized-data-importer-importer-1.55.0-150500.3.18 updated - skopeo-0.1.41-150000.4.14.1 updated - container:sles15-image-15.0.0-34.20 updated . The SUSE Package Update Summary details critical enhancements for cdi-importer alongside security patches for skopeo and systemd.. SUSE Container, CDI Importer, Skopeo Update, Systemd Fixes, Security Advisory. . LinuxSecurity.com Team
Apr 14, 2023
SuSE
100
security advisoryimportantsuseSUSE 15.5: 2023:945-1 Important Security Update for CDI-Importer
The container suse/sles/15.5/cdi-importer was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles/15.5/cdi-importer ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:945-1 Container Tags : suse/sles/15.5/cdi-importer:1.55.0 , suse/sles/15.5/cdi-importer:1.55.0-150500.3.16 , suse/sles/15.5/cdi-importer:1.55.0.17.247 Container Release : 17.247 Severity : important Type : security References : 1202853 1203355 1203537 1207183 1207571 1207957 1207975 1208237 1208358 1208471 1209001 1209209 1209210 1209211 1209212 1209214 1209533 CVE-2022-4899 CVE-2023-0687 CVE-2023-24329 CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538 ----------------------------------------------------------------- The container suse/sles/15.5/cdi-importer was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:632-1 Released: Mon Mar 6 20:33:59 2023 Summary: Recommended update for gnutls Type: recommended Severity: moderate References: 1207183,1208237 This update for gnutls fixes the following issues: - FIPS: Fix pct_test() return code in case of error (bsc#1207183) - Increase the limit of TLS PSK usernames from 128 to 65535 characters. [bsc#1208237, jsc#PED-1562] ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:709-1 Released: Fri Mar 10 16:04:41 2023 Summary: Recommended update for console-setup Type: recommended Severity: moderate References: 1202853 This update for console-setup and kbd fixes the following issue: - Fix Caps_Lock mapping for us.map and others (bsc#1202853) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:743-1 Released: Wed Mar 1511:18:23 2023 Summary: Recommended update for gnutls Type: recommended Severity: moderate References: 1209001 This update for gnutls fixes the following issues: FIPS: Establish PBKDF2 additional requirements [bsc#1209001] * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N) * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1) * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2) * Set the minimum passlen of 20 characters (SP SP800-132 sec 5) * Add regression tests for the new PBKDF2 requirements. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:776-1 Released: Thu Mar 16 17:29:23 2023 Summary: Recommended update for gcc12 Type: recommended Severity: moderate References: This update for gcc12 fixes the following issues: This update ships gcc12 also to the SUSE Linux Enterprise 15 SP1 LTSS and 15 SP2 LTSS products. SUSE Linux Enterprise 15 SP3 and SP4 get only refreshed builds without changes This update ship the GCC 12 compiler suite and its base libraries. The compiler baselibraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 11 ones. The new compilers for C, C++, and Fortran are provided in the SUSE Linux Enterprise Module for Development Tools. To use gcc12 compilers use: - install 'gcc12' or 'gcc12-c++' or one of the other 'gcc12-COMPILER' frontend packages. - override your makefile to use CC=gcc12, CXX=g++12 and similar overrides for the other languages. For a full changelog with all new GCC12 features, check out https://gcc.gnu.org/gcc-12/changes.html ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:868-1 Released: Wed Mar 22 09:41:01 2023 Summary: Security update for python3 Type: security Severity: important References: 1203355,1208471,CVE-2023-24329 This update for python3 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse componentwhen supplying a URL that starts with blank characters (bsc#1208471). The following non-security bug was fixed: - Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1582-1 Released: Mon Mar 27 10:31:52 2023 Summary: Security update for curl Type: security Severity: moderate References: 1209209,1209210,1209211,1209212,1209214,CVE-2023-27533,CVE-2023-27534,CVE-2023-27535,CVE-2023-27536,CVE-2023-27538 This update for curl fixes the following issues: - CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209). - CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210). - CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211). - CVE-2023-27536: Fixed GSS delegation too eager connection reuse (bsc#1209212). - CVE-2023-27538: Fixed SSH connection too eager reuse still (bsc#1209214). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:1662-1 Released: Wed Mar 29 10:36:23 2023 Summary: Recommended update for patterns-base Type: recommended Severity: moderate References: 1203537 This update for patterns-base fixes the following issues: - change label of FIPS 140-2 to 140-3 to reflect our current certifications (bsc#1203537) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1688-1 Released: Wed Mar 29 18:19:10 2023 Summary: Security update for zstd Type: security Severity: moderate References: 1209533,CVE-2022-4899 This update for zstd fixes the following issues: - CVE-2022-4899: Fixed buffer overrun in util.c (bsc#1209533). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1718-1 Released: Fri Mar 31 15:47:34 2023 Summary: Security update for glibc Type: security Severity: moderate References: 1207571,1207957,1207975,1208358,CVE-2023-0687 This update for glibc fixesthe following issues: Security issue fixed: - CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975) Other issues fixed: - Fix avx2 strncmp offset compare condition check (bsc#1208358) - elf: Allow dlopen of filter object to work (bsc#1207571) - powerpc: Fix unrecognized instruction errors with recent GCC - x86: Cache computation for AMD architecture (bsc#1207957) The following package changes have been done: - glibc-2.31-150300.46.1 updated - libzstd1-1.5.0-150400.3.3.1 updated - libz1-1.2.13-150500.1.16 updated - libuuid1-2.37.4-150500.7.10 updated - libsmartcols1-2.37.4-150500.7.10 updated - libblkid1-2.37.4-150500.7.10 updated - libgcrypt20-1.9.4-150500.10.14 updated - libgcrypt20-hmac-1.9.4-150500.10.14 updated - libfdisk1-2.37.4-150500.7.10 updated - libgcc_s1-12.2.1+git416-150000.1.7.1 updated - libstdc++6-12.2.1+git416-150000.1.7.1 updated - libopenssl1_1-1.1.1l-150500.13.5 updated - libopenssl1_1-hmac-1.1.1l-150500.13.5 updated - libmount1-2.37.4-150500.7.10 updated - patterns-base-fips-20200124-150400.20.4.1 updated - libcurl4-7.79.1-150400.5.18.1 updated - sles-release-15.5-150500.37.4 updated - util-linux-2.37.4-150500.7.10 updated - curl-7.79.1-150400.5.18.1 updated - kbd-legacy-2.4.0-150400.5.3.1 updated - libnettle8-3.8.1-150500.2.20 updated - qemu-block-curl-7.1.0-150500.47.6 updated - kbd-2.4.0-150400.5.3.1 updated - libpython3_6m1_0-3.6.15-150300.10.45.1 updated - python3-base-3.6.15-150300.10.45.1 updated - libhogweed6-3.8.1-150500.2.20 updated - libmpath0-0.9.4+71+suse.c648a77-150500.1.1 updated - libgnutls30-3.7.3-150400.4.35.1 updated - libgnutls30-hmac-3.7.3-150400.4.35.1 updated - qemu-tools-7.1.0-150500.47.6 updated - containerized-data-importer-importer-1.55.0-150500.3.16 updated - libcontainers-common-20230214-150500.2.1 updated - container:sles15-image-15.0.0-34.15 updated . Crucial SUSE Container Revision Notification: suse/sles/15.5/cdi-importer now features vital security fixes and enhancements.. SUSE Container, CDI Importer, Security Updates, Patch Advisory. .Severity: Important. LinuxSecurity.com Team
Apr 05, 2023
•Important
SuSE
100
security advisorymoderatesecurity issueSUSE: 2022:4532-1 Moderate: CDI Importer Security Update
The container suse/sles/15.4/cdi-importer was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles/15.4/cdi-importer ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2022:2334-1 Container Tags : suse/sles/15.4/cdi-importer:1.43.0 , suse/sles/15.4/cdi-importer:1.43.0-150400.2.4 , suse/sles/15.4/cdi-importer:1.43.0.16.31 Container Release : 16.31 Severity : moderate Type : security References : 1047178 1199140 CVE-2017-6512 ----------------------------------------------------------------- The container suse/sles/15.4/cdi-importer was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:3262-1 Released: Tue Sep 13 15:34:29 2022 Summary: Recommended update for gcc11 Type: recommended Severity: moderate References: 1199140 This update for gcc11 ships some missing 32bit libraries for s390x. (bsc#1199140) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3271-1 Released: Wed Sep 14 06:45:39 2022 Summary: Security update for perl Type: security Severity: moderate References: 1047178,CVE-2017-6512 This update for perl fixes the following issues: - CVE-2017-6512: Fixed File::Path rmtree/remove_tree race condition (bsc#1047178). The following package changes have been done: - perl-base-5.26.1-150300.17.11.1 updated - libgcc_s1-11.3.0+git1637-150000.1.11.2 updated - libstdc++6-11.3.0+git1637-150000.1.11.2 updated - sles-release-15.5-150500.11.1 updated - libnettle8-3.8.1-150500.1.6 updated - libhogweed6-3.8.1-150500.1.6 updated - container:sles15-image-15.0.0-31.15 updated . The SUSE Software Enhancement Announcement features essential updates for suse/sles/15.4/cdi-exporter targeting low to medium severity vulnerabilities.. SUSE Container Update, CDI Importer Security, SUSEAdvisory. . LinuxSecurity.com Team
Sep 23, 2022
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!