Update to 1.22.20. General cleanup. Fix CVE-2025-6297. Major clean up. Enable all tests.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-0ae3421615 2025-07-25 02:00:42.465722+00:00 -------------------------------------------------------------------------------- Name : dpkg Product : Fedora 41 Version : 1.22.20 Release : 1.fc41 URL : https://tracker.debian.org/pkg/dpkg Summary : Package maintenance system for Debian Linux Description : This package provides the low-level infrastructure for handling the installation and removal of Debian software packages. This package contains the tools (including dpkg-source) required to unpack, build and upload Debian source packages. This package also contains the programs dpkg which used to handle the installation and removal of packages on a Debian system. This package also contains dselect, an interface for managing the installation and removal of packages on the system. dpkg and dselect will certainly be non-functional on a rpm-based system because packages dependencies will likely be unmet. -------------------------------------------------------------------------------- Update Information: Update to 1.22.20. General cleanup. Fix CVE-2025-6297. Major clean up. Enable all tests. Trim changelog. Adjust Requires and BuildRequires. Update configure options. -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 26 2025 Simone Caronni - 1.22.20-1 - Update to 1.22.20 * Thu Jun 26 2025 Simone Caronni - 1.22.15-4 - Enable all tests. - Trim changelog. * Thu Jun 26 2025 Simone Caronni - 1.22.15-3 - Clean up SPEC file. - Adjust Requires and BuildRequires. - Update configure options. - Fix all tests except one. * Mon Mar 31 2025 Tim Landscheidt - 1.22.15-2 - Remove obsolete requirement for %postscriptlet -------------------------------------------------------------------------------- References: [ 1 ] Bug #2350593 - dpkg-1.22.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=2350593 [ 2 ] Bug #2375782 - CVE-2025-6297 dpkg: dpkg excessive disk usage [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2375782 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-0ae3421615' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0331-1 Rating: important References: #1194581 #1194588 Cross-References: CVE-2022-23034 CVE-2022-23035 CVSS scores: CVE-2022-23034 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-23035 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud 9 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server 12-SP4-LTSS ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for xen fixes the following issues: - CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. (XSA-394) (bsc#1194581) - CVE-2022-23035: Fixed insufficient cleanup of passed-through device IRQs. (XSA-395) (bsc#1194588) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-331=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-331=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-331=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-331=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): xen-4.11.4_26-2.68.1 xen-debugsource-4.11.4_26-2.68.1 xen-doc-html-4.11.4_26-2.68.1 xen-libs-32bit-4.11.4_26-2.68.1 xen-libs-4.11.4_26-2.68.1 xen-libs-debuginfo-32bit-4.11.4_26-2.68.1 xen-libs-debuginfo-4.11.4_26-2.68.1 xen-tools-4.11.4_26-2.68.1 xen-tools-debuginfo-4.11.4_26-2.68.1 xen-tools-domU-4.11.4_26-2.68.1 xen-tools-domU-debuginfo-4.11.4_26-2.68.1 - SUSE OpenStack Cloud 9 (x86_64): xen-4.11.4_26-2.68.1 xen-debugsource-4.11.4_26-2.68.1 xen-doc-html-4.11.4_26-2.68.1 xen-libs-32bit-4.11.4_26-2.68.1 xen-libs-4.11.4_26-2.68.1 xen-libs-debuginfo-32bit-4.11.4_26-2.68.1 xen-libs-debuginfo-4.11.4_26-2.68.1 xen-tools-4.11.4_26-2.68.1 xen-tools-debuginfo-4.11.4_26-2.68.1 xen-tools-domU-4.11.4_26-2.68.1 xen-tools-domU-debuginfo-4.11.4_26-2.68.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64): xen-4.11.4_26-2.68.1 xen-debugsource-4.11.4_26-2.68.1 xen-doc-html-4.11.4_26-2.68.1 xen-libs-32bit-4.11.4_26-2.68.1 xen-libs-4.11.4_26-2.68.1 xen-libs-debuginfo-32bit-4.11.4_26-2.68.1 xen-libs-debuginfo-4.11.4_26-2.68.1 xen-tools-4.11.4_26-2.68.1 xen-tools-debuginfo-4.11.4_26-2.68.1 xen-tools-domU-4.11.4_26-2.68.1 xen-tools-domU-debuginfo-4.11.4_26-2.68.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (x86_64): xen-4.11.4_26-2.68.1 xen-debugsource-4.11.4_26-2.68.1 xen-doc-html-4.11.4_26-2.68.1 xen-libs-32bit-4.11.4_26-2.68.1 xen-libs-4.11.4_26-2.68.1 xen-libs-debuginfo-32bit-4.11.4_26-2.68.1 xen-libs-debuginfo-4.11.4_26-2.68.1 xen-tools-4.11.4_26-2.68.1 xen-tools-debuginfo-4.11.4_26-2.68.1 xen-tools-domU-4.11.4_26-2.68.1 xen-tools-domU-debuginfo-4.11.4_26-2.68.1 References: https://www.suse.com/security/cve/CVE-2022-23034.html https://www.suse.com/security/cve/CVE-2022-23035.html https://bugzilla.suse.com/1194581 https://bugzilla.suse.com/1194588 . SUSE has releaseda crucial security update to tackle significant vulnerabilities in xen that impact various distributions, recommending that users reboot their systems.. SUSE Security Update,xen DoS issues,system maintenance,security patches,OS updates. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.