Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
100
security advisorymoderateSuSESUSE Systemd Moderate Security Update Related to CVE-2025-4598
An update that solves one vulnerability and has three fixes can now be installed.. # Security update for systemd Announcement ID: SUSE-SU-2026:20407-1 Release Date: 2025-06-12T07:37:25Z Rating: moderate References: * bsc#1236177 * bsc#1237496 * bsc#1241190 * bsc#1242938 Cross-References: * CVE-2025-4598 CVSS scores: * CVE-2025-4598 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-4598 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro Extras 6.1 An update that solves one vulnerability and has three fixes can now be installed. ## Description: This update for systemd fixes the following issues: * coredump: use %d in kernel core pattern (CVE-2025-4598) * Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific) * umount: do not move busy network mounts (bsc#1236177) * man/pstore.conf: pstore.conf template is not always installed in /etc * man: coredump.conf template is not always installed in /etc (bsc#1237496) * Don't write messages sent from users with UID falling into the container UID range to the system journal. Daemons in the container don't talk to the outside journald as they talk to the inner one directly, which does its journal splitting based on shifted uids. (bsc#1242938) * This re-adds back the support for the persistent net name rules as well as their generator since predictable naming scheme is still disabled by default on Micro (via the `net.ifnames=0` boot option). (bsc#1241190) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.1 zypper in -t patch SUSE-SLE-Micro-Extras-6.1-145=1 ## PackageList: * SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64) * systemd-debugsource-254.25-slfo.1.1_1.1 * systemd-devel-254.25-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4598.html * https://bugzilla.suse.com/show_bug.cgi?id=1236177 * https://bugzilla.suse.com/show_bug.cgi?id=1237496 * https://bugzilla.suse.com/show_bug.cgi?id=1241190 * https://bugzilla.suse.com/show_bug.cgi?id=1242938 . This advisory addresses a moderate security update for systemd on SUSE, correcting a coredump issue and enhancing system stability.. systemd update, SUSE security, Linux patch, systemd vulnerability, security advisory. . LinuxSecurity.com Team
Feb 17, 2026
SuSE
100
security advisorymoderateSuSESUSE Linux Core Systemd Important Security Patch 2025-20302-2 CVE-2025-4600
An update that solves one vulnerability and has three fixes can now be installed.. # Security update for systemd Announcement ID: SUSE-SU-2026:20301-1 Release Date: 2025-06-12T07:16:56Z Rating: moderate References: * bsc#1236177 * bsc#1237496 * bsc#1241190 * bsc#1242938 Cross-References: * CVE-2025-4598 CVSS scores: * CVE-2025-4598 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-4598 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves one vulnerability and has three fixes can now be installed. ## Description: This update for systemd fixes the following issues: * coredump: use %d in kernel core pattern (CVE-2025-4598) * Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific) * umount: do not move busy network mounts (bsc#1236177) * man/pstore.conf: pstore.conf template is not always installed in /etc * man: coredump.conf template is not always installed in /etc (bsc#1237496) * Don't write messages sent from users with UID falling into the container UID range to the system journal. Daemons in the container don't talk to the outside journald as they talk to the inner one directly, which does its journal splitting based on shifted uids. (bsc#1242938) * This re-adds back the support for the persistent net name rules as well as their generator since predictable naming scheme is still disabled by default on Micro (via the `net.ifnames=0` boot option). (bsc#1241190) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-352=1 ## PackageList: * SUSE Linux Micro Extras 6.0 (aarch64 ppc64le s390x x86_64) * systemd-devel-254.25-1.1 * systemd-debugsource-254.25-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4598.html * https://bugzilla.suse.com/show_bug.cgi?id=1236177 * https://bugzilla.suse.com/show_bug.cgi?id=1237496 * https://bugzilla.suse.com/show_bug.cgi?id=1241190 * https://bugzilla.suse.com/show_bug.cgi?id=1242938 . Update for SUSE systemd addresses one vulnerability and includes three fixes, enhancing system security and stability.. systemd update, SUSE security, Linux updates, systemd vulnerability fix. . LinuxSecurity.com Team
Feb 13, 2026
SuSE
100
security advisorymoderateupdateSUSE: systemd Moderate Vulnerability Update 2025:20554-1 CVE-2025-4598
* bsc#1242827 * bsc#1243935 * bsc#1247074 Cross-References: . # Security update for systemd Announcement ID: SUSE-SU-2025:20554-1 Release Date: 2025-08-12T14:14:50Z Rating: moderate References: * bsc#1242827 * bsc#1243935 * bsc#1247074 Cross-References: * CVE-2025-4598 CVSS scores: * CVE-2025-4598 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-4598 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves one vulnerability and has two fixes can now be installed. ## Description: This update for systemd fixes the following issues: * Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations (bsc#1247074) The script was introduced more than 7 years ago and all systems running TW should have been migrated since then. Moreover the installer supports the systemd default locations since approximately SLE15. * triggers.systemd: skip update of hwdb, journal-catalog if executed during an offline update. * logs-show: get timestamp and boot ID only when necessary (bsc#1242827) * sd-journal: drop to use Hashmap to manage journal files per boot ID * tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate * sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag * sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added * sd-journal: cache last entry offset and journal file state * sd-journal: fix typo in function name * coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listedfor your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-416=1 * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-416=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * systemd-journal-remote-254.27-1.1 * libsystemd0-debuginfo-254.27-1.1 * systemd-debugsource-254.27-1.1 * systemd-254.27-1.1 * systemd-experimental-debuginfo-254.27-1.1 * udev-debuginfo-254.27-1.1 * systemd-debuginfo-254.27-1.1 * libudev1-debuginfo-254.27-1.1 * systemd-journal-remote-debuginfo-254.27-1.1 * systemd-coredump-254.27-1.1 * systemd-portable-debuginfo-254.27-1.1 * systemd-portable-254.27-1.1 * udev-254.27-1.1 * libudev1-254.27-1.1 * systemd-container-debuginfo-254.27-1.1 * systemd-coredump-debuginfo-254.27-1.1 * libsystemd0-254.27-1.1 * systemd-experimental-254.27-1.1 * systemd-container-254.27-1.1 * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * systemd-debugsource-254.27-1.1 * systemd-devel-254.27-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4598.html * https://bugzilla.suse.com/show_bug.cgi?id=1242827 * https://bugzilla.suse.com/show_bug.cgi?id=1243935 * https://bugzilla.suse.com/show_bug.cgi?id=1247074 . SUSE Linux Micro 6.0 undergoes a significant systemd revision, resolving various problems including a CVE, and provides guidance on installation procedures.. SUSE Linux Micro 6.0, systemd update, Linux security, SUSE patch, coredump fix. . LinuxSecurity.com Team
Aug 19, 2025
SuSE
100
security advisorymoderateissueSUSE Linux Micro 6.1: SUSE-SU-2025:20416-1 moderate: systemd coredump issue
* bsc#1236177 * bsc#1237496 * bsc#1241190 * bsc#1242938 . # Security update for systemd Announcement ID: SUSE-SU-2025:20416-1 Release Date: 2025-06-12T07:37:25Z Rating: moderate References: * bsc#1236177 * bsc#1237496 * bsc#1241190 * bsc#1242938 Cross-References: * CVE-2025-4598 CVSS scores: * CVE-2025-4598 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-4598 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro Extras 6.1 An update that solves one vulnerability and has three fixes can now be installed. ## Description: This update for systemd fixes the following issues: * coredump: use %d in kernel core pattern (CVE-2025-4598) * Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific) * umount: do not move busy network mounts (bsc#1236177) * man/pstore.conf: pstore.conf template is not always installed in /etc * man: coredump.conf template is not always installed in /etc (bsc#1237496) * Don't write messages sent from users with UID falling into the container UID range to the system journal. Daemons in the container don't talk to the outside journald as they talk to the inner one directly, which does its journal splitting based on shifted uids. (bsc#1242938) * This re-adds back the support for the persistent net name rules as well as their generator since predictable naming scheme is still disabled by default on Micro (via the `net.ifnames=0` boot option). (bsc#1241190) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-145=1 * SUSE Linux Micro Extras 6.1 zypper in -tpatch SUSE-SLE-Micro-6.1-145=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * systemd-254.25-slfo.1.1_1.1 * libudev1-254.25-slfo.1.1_1.1 * systemd-experimental-254.25-slfo.1.1_1.1 * systemd-experimental-debuginfo-254.25-slfo.1.1_1.1 * systemd-journal-remote-debuginfo-254.25-slfo.1.1_1.1 * systemd-coredump-debuginfo-254.25-slfo.1.1_1.1 * systemd-portable-254.25-slfo.1.1_1.1 * systemd-debugsource-254.25-slfo.1.1_1.1 * libudev1-debuginfo-254.25-slfo.1.1_1.1 * systemd-debuginfo-254.25-slfo.1.1_1.1 * systemd-container-debuginfo-254.25-slfo.1.1_1.1 * systemd-portable-debuginfo-254.25-slfo.1.1_1.1 * udev-debuginfo-254.25-slfo.1.1_1.1 * systemd-container-254.25-slfo.1.1_1.1 * systemd-journal-remote-254.25-slfo.1.1_1.1 * libsystemd0-debuginfo-254.25-slfo.1.1_1.1 * libsystemd0-254.25-slfo.1.1_1.1 * udev-254.25-slfo.1.1_1.1 * systemd-coredump-254.25-slfo.1.1_1.1 * SUSE Linux Micro 6.1 (ppc64le) * systemd-sysvcompat-debuginfo-254.25-slfo.1.1_1.1 * systemd-sysvcompat-254.25-slfo.1.1_1.1 * SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64) * systemd-devel-254.25-slfo.1.1_1.1 * systemd-debugsource-254.25-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4598.html * https://bugzilla.suse.com/show_bug.cgi?id=1236177 * https://bugzilla.suse.com/show_bug.cgi?id=1237496 * https://bugzilla.suse.com/show_bug.cgi?id=1241190 * https://bugzilla.suse.com/show_bug.cgi?id=1242938 . An enhancement for systemd tackles a security flaw rated as moderate. Essential for installations of SUSE Linux Micro 6.1.. SUSE systemd update, Linux security update, SUSE Linux Micro maintenance. . LinuxSecurity.com Team
Jun 20, 2025
SuSE
100
security advisorymoderateupdateSUSE: 2025:20405-1 moderate: fix for systemd coredump vulnerability
* bsc#1236177 * bsc#1237496 * bsc#1241190 * bsc#1242938 . # Security update for systemd Announcement ID: SUSE-SU-2025:20405-1 Release Date: 2025-06-12T07:16:22Z Rating: moderate References: * bsc#1236177 * bsc#1237496 * bsc#1241190 * bsc#1242938 Cross-References: * CVE-2025-4598 CVSS scores: * CVE-2025-4598 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-4598 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves one vulnerability and has three fixes can now be installed. ## Description: This update for systemd fixes the following issues: * coredump: use %d in kernel core pattern (CVE-2025-4598) * Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific) * umount: do not move busy network mounts (bsc#1236177) * man/pstore.conf: pstore.conf template is not always installed in /etc * man: coredump.conf template is not always installed in /etc (bsc#1237496) * Don't write messages sent from users with UID falling into the container UID range to the system journal. Daemons in the container don't talk to the outside journald as they talk to the inner one directly, which does its journal splitting based on shifted uids. (bsc#1242938) * This re-adds back the support for the persistent net name rules as well as their generator since predictable naming scheme is still disabled by default on Micro (via the `net.ifnames=0` boot option). (bsc#1241190) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-352=1 * SUSE Linux Micro Extras 6.0 zypper in -tpatch SUSE-SLE-Micro-6.0-352=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * systemd-254.25-1.1 * libsystemd0-254.25-1.1 * systemd-debugsource-254.25-1.1 * systemd-portable-debuginfo-254.25-1.1 * udev-254.25-1.1 * libudev1-254.25-1.1 * systemd-container-254.25-1.1 * libudev1-debuginfo-254.25-1.1 * systemd-journal-remote-debuginfo-254.25-1.1 * systemd-debuginfo-254.25-1.1 * systemd-journal-remote-254.25-1.1 * systemd-portable-254.25-1.1 * udev-debuginfo-254.25-1.1 * systemd-coredump-254.25-1.1 * systemd-coredump-debuginfo-254.25-1.1 * systemd-experimental-debuginfo-254.25-1.1 * systemd-experimental-254.25-1.1 * systemd-container-debuginfo-254.25-1.1 * libsystemd0-debuginfo-254.25-1.1 * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * systemd-debugsource-254.25-1.1 * systemd-devel-254.25-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4598.html * https://bugzilla.suse.com/show_bug.cgi?id=1236177 * https://bugzilla.suse.com/show_bug.cgi?id=1237496 * https://bugzilla.suse.com/show_bug.cgi?id=1241190 * https://bugzilla.suse.com/show_bug.cgi?id=1242938 . The latest systemd update tackles coredump problems, implementing essential enhancements to boost performance on SUSE platforms.. systemd update,coredump fix,SUSE security update,security advisory. . LinuxSecurity.com Team
Jun 17, 2025
SuSE
217
security advisoryupdatecriticalOracle Linux 9 ELSA-2025-20344 critical: systemd coredump
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-20344 http://linux.oracle.com/errata/ELSA-2025-20344.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: systemd-252-51.0.2.el9.i686.rpm systemd-252-51.0.2.el9.x86_64.rpm systemd-devel-252-51.0.2.el9.i686.rpm systemd-devel-252-51.0.2.el9.x86_64.rpm systemd-libs-252-51.0.2.el9.i686.rpm systemd-libs-252-51.0.2.el9.x86_64.rpm systemd-resolved-252-51.0.2.el9.x86_64.rpm systemd-boot-unsigned-252-51.0.2.el9.x86_64.rpm rhel-net-naming-sysattrs-252-51.0.2.el9.noarch.rpm systemd-container-252-51.0.2.el9.i686.rpm systemd-container-252-51.0.2.el9.x86_64.rpm systemd-oomd-252-51.0.2.el9.x86_64.rpm systemd-pam-252-51.0.2.el9.x86_64.rpm systemd-rpm-macros-252-51.0.2.el9.noarch.rpm systemd-udev-252-51.0.2.el9.x86_64.rpm systemd-journal-remote-252-51.0.2.el9.x86_64.rpm systemd-ukify-252-51.0.2.el9.noarch.rpm aarch64: systemd-252-51.0.2.el9.aarch64.rpm systemd-libs-252-51.0.2.el9.aarch64.rpm systemd-resolved-252-51.0.2.el9.aarch64.rpm systemd-boot-unsigned-252-51.0.2.el9.aarch64.rpm rhel-net-naming-sysattrs-252-51.0.2.el9.noarch.rpm systemd-container-252-51.0.2.el9.aarch64.rpm systemd-oomd-252-51.0.2.el9.aarch64.rpm systemd-pam-252-51.0.2.el9.aarch64.rpm systemd-rpm-macros-252-51.0.2.el9.noarch.rpm systemd-udev-252-51.0.2.el9.aarch64.rpm systemd-devel-252-51.0.2.el9.aarch64.rpm systemd-journal-remote-252-51.0.2.el9.aarch64.rpm systemd-ukify-252-51.0.2.el9.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//systemd-252-51.0.2.el9.src.rpm Related CVEs: CVE-2025-4598 Description of changes: [252-51.0.2] - coredump: use %d in kernel core pattern - CVE-2025-4598 _______________________________________________ El-errata mailing list
May 30, 2025
•Critical
Oracle
100
security advisorymoderateaccess issueSUSE: 2023:114-2 Important: NetworkManager Vulnerability Exploit
The container suse/sles12sp5 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles12sp5 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:113-1 Container Tags : suse/sles12sp5:6.5.424 , suse/sles12sp5:latest Container Release : 6.5.424 Severity : moderate Type : security References : 1181636 1205000 CVE-2022-4415 ----------------------------------------------------------------- The container suse/sles12sp5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:58-1 Released: Tue Jan 10 09:15:27 2023 Summary: Security update for systemd Type: security Severity: moderate References: 1181636,1205000,CVE-2022-4415 This update for systemd fixes the following issues: Fixing the following issues: - units: restore RemainAfterExit=yes in systemd-vconsole-setup.service - vconsole-setup: don't concat strv if we don't need to (i.e. not in debug log mode) - vconsole-setup: add more log messages - units: restore Before dependencies for systemd-vconsole-setup.service - vconsole-setup: add lots of debug messages - Add enable_disable() helper - vconsole: correct kernel command line namespace - vconsole: Don't do static installation under sysinit.target - vconsole: use KD_FONT_OP_GET/SET to handle copying (bsc#1181636) - vconsole: updates of keyboard/font loading functions - vconsole: Add generic is_*() functions - vconsole: add two new toggle functions, remove old enable/disable ones - vconsole: copy font to 63 consoles instead of 15 - vconsole: add log_oom() where appropriate - vconsole-setup: Store fonts on heap (#3268) - errno-util: add new errno_or_else() helper The following fix is now integrated upstream: - CVE-2022-4415: coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000). Thefollowing package changes have been done: - libsystemd0-228-157.49.1 updated - libudev1-228-157.49.1 updated . SUSE security notice regarding systemd updates in the suse/sles12sp5 container. Emphasizes significant severity improvements.. SUSE Container Update,Systemd Security,Container Advisory,Patch Management. . Severity: Important. LinuxSecurity.com Team
Jan 11, 2023
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!