Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
100
security advisoryupdatedenial serviceSUSE: 2024:1684-1 Important: Ucode-Intel Processor Issues Resolved
* bsc#1224277 Cross-References: * CVE-2023-45733 * CVE-2023-45745 . # Security update for ucode-intel Announcement ID: SUSE-SU-2024:1684-1 Rating: important References: * bsc#1224277 Cross-References: * CVE-2023-45733 * CVE-2023-45745 * CVE-2023-46103 * CVE-2023-47855 CVSS scores: * CVE-2023-45733 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N * CVE-2023-45745 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N * CVE-2023-46103 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47855 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240514 release (bsc#1224277) * CVE-2023-45733: Fixed a potential security vulnerability in some Intel® Processors that may have allowed information disclosure. * CVE-2023-46103: Fixed a potential security vulnerability in Intel® Core⢠Ultra Processors that may have allowed denial of service. * CVE-2023-45745,CVE-2023-47855: Fixed a potential security vulnerabilities in some Intel® Trust Domain Extensions (TDX) module software that may have allowed escalation of privilege. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1684=1 * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1684=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patchSUSE-SLE-SERVER-12-SP5-2024-1684=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64) * ucode-intel-debuginfo-20240514-137.1 * ucode-intel-20240514-137.1 * ucode-intel-debugsource-20240514-137.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64) * ucode-intel-debuginfo-20240514-137.1 * ucode-intel-20240514-137.1 * ucode-intel-debugsource-20240514-137.1 * SUSE Linux Enterprise Server 12 SP5 (x86_64) * ucode-intel-debuginfo-20240514-137.1 * ucode-intel-20240514-137.1 * ucode-intel-debugsource-20240514-137.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45733.html * https://www.suse.com/security/cve/CVE-2023-45745.html * https://www.suse.com/security/cve/CVE-2023-46103.html * https://www.suse.com/security/cve/CVE-2023-47855.html * https://bugzilla.suse.com/show_bug.cgi?id=1224277 . Users of SUSE Linux Enterprise have the option to apply the latest ucode-intel security patches to address severe vulnerabilities found in Intel processors.. ucode-intel Security, Intel Processor Threats, SUSE Security Update. . Severity: Important. LinuxSecurity.com Team
May 20, 2024
•Important
SuSE
100
security advisorypatchimportantSUSE Linux Kernel Live Patch 25: Important Security Update for SLE 12 SP5
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5) ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:4021-1 Rating: important References: #1191813 #1192042 #1192048 Cross-References: CVE-2021-0935 CVE-2021-0941 CVE-2021-20322 CVSS scores: CVE-2021-0935 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-0941 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20322 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: SUSE Linux Enterprise Live Patching 12-SP5 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for the Linux Kernel 4.12.14-122_98 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045). - CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790) - CVE-2021-0935: In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. (bsc#1192032) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: -SUSE Linux Enterprise Live Patching 12-SP5: zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2021-4021=1 Package List: - SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64): kgraft-patch-4_12_14-122_98-default-2-2.1 References: https://www.suse.com/security/cve/CVE-2021-0935.html https://www.suse.com/security/cve/CVE-2021-0941.html https://www.suse.com/security/cve/CVE-2021-20322.html https://bugzilla.suse.com/1191813 https://bugzilla.suse.com/1192042 https://bugzilla.suse.com/1192048 . Addresses critical vulnerabilities in SUSE Linux Kernel (SLE 12 SP5) with vital update guidelines provided.. SUSE Linux Kernel, Live Patch, Security Update, System Privilege, Patch Instructions. . Severity: Important. LinuxSecurity.com Team
Dec 14, 2021
•Important
SuSE
100
security advisorynetwork securityimportantSUSE Enterprise 12 SP2: 2021:1148-1 Important: Kernel Escalation Privilege
An update that fixes 6 vulnerabilities is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP2) ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1148-1 Rating: important References: #1165631 #1176931 #1177513 #1182717 #1183120 #1183491 Cross-References: CVE-2020-0429 CVE-2020-1749 CVE-2020-25645 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVSS scores: CVE-2020-0429 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-1749 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-25645 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-25645 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-27363 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVE-2021-27363 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2021-27364 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2021-27364 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2021-27365 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-27365 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Server 12-SP2-LTSS-SAP SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for the Linux Kernel 4.4.121-92_152 fixes several issues. The following security issues were fixed: - CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed thePAGE_SIZE value (bsc#1183491). - CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120). - CVE-2021-27364: Fixed an issue where an unprivileged user could craft Netlink messages (bsc#1182717). - CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bsc#1177513). - CVE-2020-0429: Fixed a memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges needed (bsc#1176931). - CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165631). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP2-LTSS-SAP: zypper in -t patch SUSE-SLE-SERVER-12-SP2-LTSS-SAP-2021-1148=1 - SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON: zypper in -t patch SUSE-SLE-SERVER-12-SP2-LTSS-ERICSSON-2021-1148=1 Package List: - SUSE Linux Enterprise Server 12-SP2-LTSS-SAP (x86_64): kgraft-patch-4_4_121-92_152-default-2-2.2 - SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON (x86_64): kgraft-patch-4_4_121-92_152-default-2-2.2 References: https://www.suse.com/security/cve/CVE-2020-0429.html https://www.suse.com/security/cve/CVE-2020-1749.html https://www.suse.com/security/cve/CVE-2020-25645.html https://www.suse.com/security/cve/CVE-2021-27363.html https://www.suse.com/security/cve/CVE-2021-27364.html https://www.suse.com/security/cve/CVE-2021-27365.html https://bugzilla.suse.com/1165631 https://bugzilla.suse.com/1176931 https://bugzilla.suse.com/1177513 https://bugzilla.suse.com/1182717 https://bugzilla.suse.com/1183120 https://bugzilla.suse.com/1183491 . Critical security patchreleased for the Linux Kernel on SUSE Linux Enterprise addressing several vulnerabilities.. Linux Kernel Patch, SUSE Update, Escalation Privilege, Network Security, Kernel Issues. . Severity: Important. LinuxSecurity.com Team
Apr 12, 2021
•Important
SuSE
100
security advisorymemory corruptionkernel patchSUSE: 2021:1074-1 Important Update on Kernel Live Patch for SLE 12 SP3
An update that fixes 6 vulnerabilities is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1074-1 Rating: important References: #1165631 #1176931 #1177513 #1182717 #1183120 #1183491 Cross-References: CVE-2020-0429 CVE-2020-1749 CVE-2020-25645 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVSS scores: CVE-2020-0429 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-1749 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-25645 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-25645 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-27363 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVE-2021-27363 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2021-27364 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2021-27364 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2021-27365 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-27365 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server 12-SP3-LTSS ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for the Linux Kernel 4.4.180-94_141 fixes several issues. The following security issues were fixed: - CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491). - CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120). - CVE-2021-27364: Fixed an issue where an unprivileged user could craft Netlink messages (bsc#1182717). - CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bsc#1177513). - CVE-2020-0429: Fixed a memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges needed (bsc#1176931). - CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165631). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-1074=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-1074=1 Package List: - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): kgraft-patch-4_4_180-94_141-default-2-2.2 kgraft-patch-4_4_180-94_141-default-debuginfo-2-2.2 - SUSE Linux Enterprise Server 12-SP3-LTSS (ppc64le x86_64): kgraft-patch-4_4_180-94_141-default-2-2.2 kgraft-patch-4_4_180-94_141-default-debuginfo-2-2.2 References: https://www.suse.com/security/cve/CVE-2020-0429.html https://www.suse.com/security/cve/CVE-2020-1749.html https://www.suse.com/security/cve/CVE-2020-25645.html https://www.suse.com/security/cve/CVE-2021-27363.html https://www.suse.com/security/cve/CVE-2021-27364.html https://www.suse.com/security/cve/CVE-2021-27365.html https://bugzilla.suse.com/1165631 https://bugzilla.suse.com/1176931 https://bugzilla.suse.com/1177513 https://bugzilla.suse.com/1182717 https://bugzilla.suse.com/1183120 https://bugzilla.suse.com/1183491 . A recent update to the Linux Kernel fixes five security flaws, bolstering the safety of Red Hat Enterprise Linux.. Linux Kernel Update, SUSE Patch, Security Issues, Important Linux Update. . Severity: Important. LinuxSecurity.com Team
Apr 07, 2021
•Important
SuSE
100
security advisoryimportantmemory issueSUSE SLE 15: 2019:1581-1 Important: Kernel Live Patch Update
An update that fixes 5 vulnerabilities is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 3 for SLE 15) ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:1581-1 Rating: important References: #1133191 #1135280 #1136446 #1136935 #1137597 Cross-References: CVE-2019-11085 CVE-2019-11477 CVE-2019-11478 CVE-2019-11487 CVE-2019-3846 Affected Products: SUSE Linux Enterprise Module for Live Patching 15 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for the Linux Kernel 4.12.14-25_13 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bsc#1136446). - CVE-2019-11477: A sequence of SACKs may have been crafted by a remote attacker such that one can trigger an integer overflow, leading to a kernel panic. (bsc#1137586). - CVE-2019-11478: It was possible to send a crafted sequence of SACKs which would fragment the TCP retransmission queue. A remote attacker may have been able to further exploit the fragmented queue to cause an expensive linked-list walk for subsequent SACKs received for that same TCP connection. (bsc#1137586) - CVE-2019-11487: The Linux kernel allowed page-> _refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests (bsc#1133191). - CVE-2019-11085: Insufficient input validation in KernelMode Driver in Intel(R) i915 Graphics may allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1135280). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Live Patching 15: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-2019-1579=1 SUSE-SLE-Module-Live-Patching-15-2019-1581=1 SUSE-SLE-Module-Live-Patching-15-2019-1582=1 SUSE-SLE-Module-Live-Patching-15-2019-1583=1 SUSE-SLE-Module-Live-Patching-15-2019-1584=1 SUSE-SLE-Module-Live-Patching-15-2019-1585=1 SUSE-SLE-Module-Live-Patching-15-2019-1586=1 SUSE-SLE-Module-Live-Patching-15-2019-1587=1 Package List: - SUSE Linux Enterprise Module for Live Patching 15 (ppc64le x86_64): kernel-livepatch-4_12_14-25_13-default-7-2.1 kernel-livepatch-4_12_14-25_13-default-debuginfo-7-2.1 kernel-livepatch-4_12_14-25_16-default-6-2.1 kernel-livepatch-4_12_14-25_16-default-debuginfo-6-2.1 kernel-livepatch-4_12_14-25_19-default-6-2.1 kernel-livepatch-4_12_14-25_19-default-debuginfo-6-2.1 kernel-livepatch-4_12_14-25_22-default-5-2.1 kernel-livepatch-4_12_14-25_22-default-debuginfo-5-2.1 kernel-livepatch-4_12_14-25_25-default-4-2.1 kernel-livepatch-4_12_14-25_25-default-debuginfo-4-2.1 kernel-livepatch-4_12_14-25_28-default-3-2.1 kernel-livepatch-4_12_14-25_28-default-debuginfo-3-2.1 kernel-livepatch-4_12_14-25_3-default-10-2.1 kernel-livepatch-4_12_14-25_3-default-debuginfo-10-2.1 kernel-livepatch-4_12_14-25_6-default-9-2.1 kernel-livepatch-4_12_14-25_6-default-debuginfo-9-2.1 References: https://www.suse.com/security/cve/CVE-2019-11085.html https://www.suse.com/security/cve/CVE-2019-11477.html https://www.suse.com/security/cve/CVE-2019-11478.html https://www.suse.com/security/cve/CVE-2019-11487.html https://www.suse.com/security/cve/CVE-2019-3846.html https://bugzilla.suse.com/1133191 https://bugzilla.suse.com/1135280 https://bugzilla.suse.com/1136446 https://bugzilla.suse.com/1136935 https://bugzilla.suse.com/1137597 _______________________________________________ sle-security-updates mailing list
Jun 20, 2019
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!