* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351 . # Security update for kernel-livepatch-MICRO-6-0_Update_9 Announcement ID: SUSE-SU-2025:20646-1 Release Date: 2025-09-01T10:47:50Z Rating: important References: * bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351 Cross-References: * CVE-2025-38079 * CVE-2025-38083 * CVE-2025-38494 * CVE-2025-38495 CVSS scores: * CVE-2025-38079 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38079 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38494 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38494 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38495 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38495 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: * CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) * CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) * CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350) * CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247351) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-100=1 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_9-debugsource-3-1.2 *kernel-livepatch-6_4_0-31-default-3-1.2 * kernel-livepatch-6_4_0-31-default-debuginfo-3-1.2 ## References: * https://www.suse.com/security/cve/CVE-2025-38079.html * https://www.suse.com/security/cve/CVE-2025-38083.html * https://www.suse.com/security/cve/CVE-2025-38494.html * https://www.suse.com/security/cve/CVE-2025-38495.html * https://bugzilla.suse.com/show_bug.cgi?id=1245218 * https://bugzilla.suse.com/show_bug.cgi?id=1245350 * https://bugzilla.suse.com/show_bug.cgi?id=1247350 * https://bugzilla.suse.com/show_bug.cgi?id=1247351 . Addresses essential vulnerabilities in SUSE's kernel-livepatch-MICRO-6-0_Update_9 with significant security enhancements.. SUSE Linux, kernel livepatch update, important security patch. . Severity: Important. LinuxSecurity.com Team
Update to 1.8.1.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-858277b967 2016-04-09 10:22:58.046172 -------------------------------------------------------------------------------- Name : fuse-encfs Product : Fedora 23 Version : 1.8.1 Release : 1.fc23 URL : Summary : Encrypted pass-thru filesystem in userspace Description : EncFS implements an encrypted filesystem in userspace using FUSE. FUSE provides a Linux kernel module which allows virtual filesystems to be written in userspace. EncFS encrypts all data and filenames in the filesystem and passes access through to the underlying filesystem. Similar to CFS except that it does not use NFS. -------------------------------------------------------------------------------- Update Information: Update to 1.8.1. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1119122 - fuse-encfs is missing from EPEL 7 https://bugzilla.redhat.com/show_bug.cgi?id=1119122 [ 2 ] Bug #1097540 - fuse-encfs: multiple cryptography issues [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1097540 [ 3 ] Bug #906390 - Man page does not mention ENCFS6_CONFIG variable name. https://bugzilla.redhat.com/show_bug.cgi?id=906390 [ 4 ] Bug #1307518 - fuse-encfs: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1307518 [ 5 ] Bug #1234255 - New version available - 1.8.1 https://bugzilla.redhat.com/show_bug.cgi?id=1234255 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fuse-encfs' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Several security issues were fixed in Python Keyring.. =========================================================================Ubuntu Security Notice USN-1634-1 November 20, 2012 python-keyring vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.10 - Ubuntu 12.04 LTS - Ubuntu 11.10 Summary: Several security issues were fixed in Python Keyring. Software Description: - python-keyring: store and access your passwords safely Details: Dwayne Litzenberger discovered that Python Keyring's CryptedFileKeyring file format used weak cryptography. A local attacker may use this issue to brute-force CryptedFileKeyring keyring files. This issue only affected Ubuntu 11.10 and Ubuntu 12.04 LTS. (CVE-2012-4571) It was discovered that Python Keyring created keyring files with insecure permissions. A local attacker could use this issue to access keyring files belonging to other users. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.10: python-keyring 0.9.2-1ubuntu0.2 python3-keyring 0.9.2-1ubuntu0.2 Ubuntu 12.04 LTS: python-keyring 0.9.2-0ubuntu0.12.04.2 python3-keyring 0.9.2-0ubuntu0.12.04.2 Ubuntu 11.10: python-keyring 0.9.2-0ubuntu0.11.10.2 In general, a standard system update will make all the necessary changes. This update uses a new upstream release, which includes additional bug fixes, and will migrate existing keyring files to the new format upon first use. References: https://ubuntu.com/security/notices/USN-1634-1 CVE-2012-4571, https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1004845 Package Information: https://launchpad.net/ubuntu/+source/python-keyring/0.9.2-1ubuntu0.2 https://launchpad.net/ubuntu/+source/python-keyring/0.9.2-0ubuntu0.12.04.2 https://launchpad.net/ubuntu/+source/python-keyring/0.9.2-0ubuntu0.11.10.2 . Addressed various vulnerabilities in Ubuntu's python-keyring impacting user permissions and encryption. Update advised.. Python Keyring Vulnerabilities, Ubuntu Update Advisory, Security Fixes Recommended. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.