Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 0 articles for you...
203
security advisorydenial of servicelocal usersMageia 9: 2025-0129 moderate security issue with atop denial of service
atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop. (CVE-2025-31160) . MGASA-2025-0129 - Updated atop packages fix security vulnerability Publication date: 10 Apr 2025 URL: https://advisories.mageia.org/MGASA-2025-0129.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-31160 atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop. (CVE-2025-31160) References: - https://bugs.mageia.org/show_bug.cgi?id=34139 - https://www.openwall.com/lists/oss-security/2025/03/26/2 - https://www.openwall.com/lists/oss-security/2025/03/26/3 - - https://news.ycombinator.com/item?id=43485980 - https://news.ycombinator.com/item?id=43477057 - https://www.openwall.com/lists/oss-security/2025/03/29/1 - - https://lists.debian.org/debian-security-announce/2025/msg00054.html - https://www.cve.org/CVERecord?id=CVE-2025-31160 SRPMS: - 9/core/atop-2.8.1-1.1.mga9 . Users in the area may take advantage of atop versions prior to 2.11.0, resulting in potential Denial of Service or other unintended consequences. Recommended remedy provided in the notice.. Mageia advisory, atop security issue, denial of service threat, local user exploit. . LinuxSecurity.com Team
Apr 10, 2025
Mageia
100
security advisoryimportantkernelSUSE: 2021:0452-1 Important: Kernel Fixes for Local Users Risk
An update that solves 25 vulnerabilities and has 22 fixes is now available. . SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0452-1 Rating: important References: #1105322 #1105323 #1139944 #1168952 #1173942 #1175306 #1176395 #1176485 #1177440 #1177666 #1178182 #1178272 #1178589 #1178886 #1179107 #1179140 #1179141 #1179204 #1179419 #1179508 #1179509 #1179601 #1179616 #1179663 #1179666 #1179745 #1179877 #1179878 #1179960 #1179961 #1180008 #1180027 #1180028 #1180029 #1180030 #1180031 #1180032 #1180052 #1180086 #1180559 #1180562 #1180815 #1181096 #1181158 #1181349 #1181553 #969755 Cross-References: CVE-2018-10902 CVE-2019-20934 CVE-2020-0444 CVE-2020-0465 CVE-2020-0466 CVE-2020-11668 CVE-2020-15436 CVE-2020-15437 CVE-2020-25211 CVE-2020-25285 CVE-2020-25669 CVE-2020-27068 CVE-2020-27777 CVE-2020-27786 CVE-2020-27825 CVE-2020-27835 CVE-2020-28915 CVE-2020-28974 CVE-2020-29568 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-36158 CVE-2020-4788 CVE-2021-3347 CVSS scores: CVE-2018-10902 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-10902 (SUSE): 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-20934 (NVD) : 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H CVE-2019-20934 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-0444 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-0444 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-0465 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-0465 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-0466 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-0466 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-11668 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2020-11668 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2020-15436 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-15436 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-15437 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2020-15437 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25211 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVE-2020-25211 (SUSE): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2020-25285 (NVD) : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-25285 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-25669 (SUSE): 4.3 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-27068 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2020-27777 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-27777 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-27786 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-27786 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-27825 (NVD) : 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H CVE-2020-27825 (SUSE): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-27835(SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-28915 (NVD) : 5.8 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H CVE-2020-28915 (SUSE): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2020-28974 (NVD) : 5 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H CVE-2020-28974 (SUSE): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2020-29568 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-29568 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-29569 (NVD) : 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-29569 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-29660 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CVE-2020-29660 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-29661 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-29661 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-36158 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-36158 (SUSE): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-4788 (SUSE): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-3347 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-3347 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud 8 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise High Availability 12-SP3 SUSE Enterprise Storage 5 HPE Helion Openstack 8 ______________________________________________________________________________ An update that solves 25 vulnerabilities and has 22 fixes is now available. Description: The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349). - CVE-2020-25211: Fixed a buffer overflow in ctnetlink_parse_tuple_filter() which could be triggered by a local attackers by injecting conntrack netlink configuration (bnc#1176395). - CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878). - CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509). - CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508). - CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031). - CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances (bsc#1177666). - CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141). - CVE-2020-27068: Fixed an out-of-bounds read due to amissing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086). - CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107). - CVE-2020-27786: Fixed an out-of-bounds write in the MIDI implementation (bnc#1179601). - CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745). - CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589). - CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886). - CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182). - CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140). - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559). - CVE-2020-11668: Fixed the mishandling of invalid descriptors in the Xirlink camera USB driver (bnc#1168952). - CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485). - CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA fault statistics were inappropriately freed (bsc#1179663). - CVE-2018-10902: It was found that the raw midi kernel driver did not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation (bnc#1105322). The following non-security bugs were fixed: - cifs: do not revalidate mountpoint dentries (bsc#1177440). - cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944). - cifs: ignore revalidate failures in case of process gets signaled (bsc#1177440). - epoll: Keep a reference on files added to the check list (bsc#1180031). - fix regression in "epoll: Keep a reference on files added to the check list" (bsc#1180031, git-fixes). - futex: Avoid freeing an active timer (bsc#969755). - futex: Avoid violating the 10th rule of futex (bsc#969755). - futex: Change locking rules (bsc#969755). - futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#969755). - futex: Drop hb-> lock before enqueueing on the rtmutex (bsc#969755). - futex: Fix incorrect should_fail_futex() handling (bsc#969755). - futex: Fix more put_pi_state() vs. exit_pi_state_list() races (bsc#969755). - futex: Fix OWNER_DEAD fixup (bsc#969755). - futex: Fix pi_state-> owner serialization (bsc#969755). - futex: Fix small (and harmless looking) inconsistencies (bsc#969755). - futex: Futex_unlock_pi() determinism (bsc#969755). - futex: Handle early deadlock return correctly (bsc#969755). - futex: Handle transient "ownerless" rtmutex state correctly (bsc#969755). - futex: Pull rt_mutex_futex_unlock() out from under hb-> lock (bsc#969755). - futex: Rework futex_lock_pi() to use rt_mutex_*_proxy_lock() (bsc#969755). - futex: Rework inconsistent rt_mutex/futex_q state (bsc#969755). - futex,rt_mutex: Fix rt_mutex_cleanup_proxy_lock() (bsc#969755). - futex,rt_mutex: Introduce rt_mutex_init_waiter() (bsc#969755). - futex,rt_mutex: Provide futex specific rt_mutex API (bsc#969755). - futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock() (bsc#969755). -HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052). - IB/hfi1: Clean up hfi1_user_exp_rcv_setup function (bsc#1179878). - IB/hfi1: Clean up pin_vector_pages() function (bsc#1179878). - IB/hfi1: Fix the bail out code in pin_vector_pages() function (bsc#1179878). - IB/hfi1: Move structure definitions from user_exp_rcv.c to user_exp_rcv.h (bsc#1179878). - IB/hfi1: Name function prototype parameters (bsc#1179878). - IB/hfi1: Use filedata rather than filepointer (bsc#1179878). - locking/futex: Allow low-level atomic operations to return -EAGAIN (bsc#969755). - mm/userfaultfd: do not access vma-> vm_mm after calling handle_userfault() (bsc#1179204). - scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1178272). - Use r3 instead of r13 for l1d fallback flush in do_uaccess_fush (bsc#1181096 ltc#190883). - video: hyperv_fb: include vmalloc.h (bsc#1175306). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-452=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2021-452=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-452=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-452=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-452=1 - SUSE Linux Enterprise High Availability 12-SP3: zypper in -t patch SUSE-SLE-HA-12-SP3-2021-452=1 - SUSE Enterprise Storage 5: zypper in -t patch SUSE-Storage-5-2021-452=1 - HPE Helion Openstack 8: zypper in -t patchHPE-Helion-OpenStack-8-2021-452=1 Package List: - SUSE OpenStack Cloud Crowbar 8 (noarch): kernel-devel-4.4.180-94.138.1 kernel-macros-4.4.180-94.138.1 kernel-source-4.4.180-94.138.1 - SUSE OpenStack Cloud Crowbar 8 (x86_64): kernel-default-4.4.180-94.138.1 kernel-default-base-4.4.180-94.138.1 kernel-default-base-debuginfo-4.4.180-94.138.1 kernel-default-debuginfo-4.4.180-94.138.1 kernel-default-debugsource-4.4.180-94.138.1 kernel-default-devel-4.4.180-94.138.1 kernel-default-kgraft-4.4.180-94.138.1 kernel-syms-4.4.180-94.138.1 kgraft-patch-4_4_180-94_138-default-1-4.3.1 kgraft-patch-4_4_180-94_138-default-debuginfo-1-4.3.1 - SUSE OpenStack Cloud 8 (noarch): kernel-devel-4.4.180-94.138.1 kernel-macros-4.4.180-94.138.1 kernel-source-4.4.180-94.138.1 - SUSE OpenStack Cloud 8 (x86_64): kernel-default-4.4.180-94.138.1 kernel-default-base-4.4.180-94.138.1 kernel-default-base-debuginfo-4.4.180-94.138.1 kernel-default-debuginfo-4.4.180-94.138.1 kernel-default-debugsource-4.4.180-94.138.1 kernel-default-devel-4.4.180-94.138.1 kernel-default-kgraft-4.4.180-94.138.1 kernel-syms-4.4.180-94.138.1 kgraft-patch-4_4_180-94_138-default-1-4.3.1 kgraft-patch-4_4_180-94_138-default-debuginfo-1-4.3.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): kernel-default-4.4.180-94.138.1 kernel-default-base-4.4.180-94.138.1 kernel-default-base-debuginfo-4.4.180-94.138.1 kernel-default-debuginfo-4.4.180-94.138.1 kernel-default-debugsource-4.4.180-94.138.1 kernel-default-devel-4.4.180-94.138.1 kernel-default-kgraft-4.4.180-94.138.1 kernel-syms-4.4.180-94.138.1 kgraft-patch-4_4_180-94_138-default-1-4.3.1 kgraft-patch-4_4_180-94_138-default-debuginfo-1-4.3.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (noarch): kernel-devel-4.4.180-94.138.1 kernel-macros-4.4.180-94.138.1 kernel-source-4.4.180-94.138.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): kernel-default-4.4.180-94.138.1 kernel-default-base-4.4.180-94.138.1 kernel-default-base-debuginfo-4.4.180-94.138.1 kernel-default-debuginfo-4.4.180-94.138.1 kernel-default-debugsource-4.4.180-94.138.1 kernel-default-devel-4.4.180-94.138.1 kernel-syms-4.4.180-94.138.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (ppc64le x86_64): kernel-default-kgraft-4.4.180-94.138.1 kgraft-patch-4_4_180-94_138-default-1-4.3.1 kgraft-patch-4_4_180-94_138-default-debuginfo-1-4.3.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (noarch): kernel-devel-4.4.180-94.138.1 kernel-macros-4.4.180-94.138.1 kernel-source-4.4.180-94.138.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (s390x): kernel-default-man-4.4.180-94.138.1 - SUSE Linux Enterprise Server 12-SP3-BCL (noarch): kernel-devel-4.4.180-94.138.1 kernel-macros-4.4.180-94.138.1 kernel-source-4.4.180-94.138.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): kernel-default-4.4.180-94.138.1 kernel-default-base-4.4.180-94.138.1 kernel-default-base-debuginfo-4.4.180-94.138.1 kernel-default-debuginfo-4.4.180-94.138.1 kernel-default-debugsource-4.4.180-94.138.1 kernel-default-devel-4.4.180-94.138.1 kernel-syms-4.4.180-94.138.1 - SUSE Linux Enterprise High Availability 12-SP3 (ppc64le s390x x86_64): cluster-md-kmp-default-4.4.180-94.138.1 cluster-md-kmp-default-debuginfo-4.4.180-94.138.1 dlm-kmp-default-4.4.180-94.138.1 dlm-kmp-default-debuginfo-4.4.180-94.138.1 gfs2-kmp-default-4.4.180-94.138.1 gfs2-kmp-default-debuginfo-4.4.180-94.138.1 kernel-default-debuginfo-4.4.180-94.138.1 kernel-default-debugsource-4.4.180-94.138.1 ocfs2-kmp-default-4.4.180-94.138.1 ocfs2-kmp-default-debuginfo-4.4.180-94.138.1 - SUSEEnterprise Storage 5 (aarch64 x86_64): kernel-default-4.4.180-94.138.1 kernel-default-base-4.4.180-94.138.1 kernel-default-base-debuginfo-4.4.180-94.138.1 kernel-default-debuginfo-4.4.180-94.138.1 kernel-default-debugsource-4.4.180-94.138.1 kernel-default-devel-4.4.180-94.138.1 kernel-syms-4.4.180-94.138.1 - SUSE Enterprise Storage 5 (noarch): kernel-devel-4.4.180-94.138.1 kernel-macros-4.4.180-94.138.1 kernel-source-4.4.180-94.138.1 - SUSE Enterprise Storage 5 (x86_64): kernel-default-kgraft-4.4.180-94.138.1 kgraft-patch-4_4_180-94_138-default-1-4.3.1 kgraft-patch-4_4_180-94_138-default-debuginfo-1-4.3.1 - HPE Helion Openstack 8 (x86_64): kernel-default-4.4.180-94.138.1 kernel-default-base-4.4.180-94.138.1 kernel-default-base-debuginfo-4.4.180-94.138.1 kernel-default-debuginfo-4.4.180-94.138.1 kernel-default-debugsource-4.4.180-94.138.1 kernel-default-devel-4.4.180-94.138.1 kernel-default-kgraft-4.4.180-94.138.1 kernel-syms-4.4.180-94.138.1 kgraft-patch-4_4_180-94_138-default-1-4.3.1 kgraft-patch-4_4_180-94_138-default-debuginfo-1-4.3.1 - HPE Helion Openstack 8 (noarch): kernel-devel-4.4.180-94.138.1 kernel-macros-4.4.180-94.138.1 kernel-source-4.4.180-94.138.1 References: https://www.suse.com/security/cve/CVE-2018-10902.html https://www.suse.com/security/cve/CVE-2019-20934.html https://www.suse.com/security/cve/CVE-2020-0444.html https://www.suse.com/security/cve/CVE-2020-0465.html https://www.suse.com/security/cve/CVE-2020-0466.html https://www.suse.com/security/cve/CVE-2020-11668.html https://www.suse.com/security/cve/CVE-2020-15436.html https://www.suse.com/security/cve/CVE-2020-15437.html https://www.suse.com/security/cve/CVE-2020-25211.html https://www.suse.com/security/cve/CVE-2020-25285.html https://www.suse.com/security/cve/CVE-2020-25669.html https://www.suse.com/security/cve/CVE-2020-27068.html https://www.suse.com/security/cve/CVE-2020-27777.html https://www.suse.com/security/cve/CVE-2020-27786.html https://www.suse.com/security/cve/CVE-2020-27825.html https://www.suse.com/security/cve/CVE-2020-27835.html https://www.suse.com/security/cve/CVE-2020-28915.html https://www.suse.com/security/cve/CVE-2020-28974.html https://www.suse.com/security/cve/CVE-2020-29568.html https://www.suse.com/security/cve/CVE-2020-29569.html https://www.suse.com/security/cve/CVE-2020-29660.html https://www.suse.com/security/cve/CVE-2020-29661.html https://www.suse.com/security/cve/CVE-2020-36158.html https://www.suse.com/security/cve/CVE-2020-4788.html https://www.suse.com/security/cve/CVE-2021-3347.html https://bugzilla.suse.com/1105322 https://bugzilla.suse.com/1105323 https://bugzilla.suse.com/1139944 https://bugzilla.suse.com/1168952 https://bugzilla.suse.com/1173942 https://bugzilla.suse.com/1175306 https://bugzilla.suse.com/1176395 https://bugzilla.suse.com/1176485 https://bugzilla.suse.com/1177440 https://bugzilla.suse.com/1177666 https://bugzilla.suse.com/1178182 https://bugzilla.suse.com/1178272 https://bugzilla.suse.com/1178589 https://bugzilla.suse.com/1178886 https://bugzilla.suse.com/1179107 https://bugzilla.suse.com/1179140 https://bugzilla.suse.com/1179141 https://bugzilla.suse.com/1179204 https://bugzilla.suse.com/1179419 https://bugzilla.suse.com/1179508 https://bugzilla.suse.com/1179509 https://bugzilla.suse.com/1179601 https://bugzilla.suse.com/1179616 https://bugzilla.suse.com/1179663 https://bugzilla.suse.com/1179666 https://bugzilla.suse.com/1179745 https://bugzilla.suse.com/1179877 https://bugzilla.suse.com/1179878 https://bugzilla.suse.com/1179960 https://bugzilla.suse.com/1179961 https://bugzilla.suse.com/1180008 https://bugzilla.suse.com/1180027 https://bugzilla.suse.com/1180028 https://bugzilla.suse.com/1180029 https://bugzilla.suse.com/1180030 https://bugzilla.suse.com/1180031 https://bugzilla.suse.com/1180032 https://bugzilla.suse.com/1180052 https://bugzilla.suse.com/1180086 https://bugzilla.suse.com/1180559 https://bugzilla.suse.com/1180562 https://bugzilla.suse.com/1180815 https://bugzilla.suse.com/1181096 https://bugzilla.suse.com/1181158 https://bugzilla.suse.com/1181349 https://bugzilla.suse.com/1181553 https://bugzilla.suse.com/969755 . Critical security updates released for SUSE Linux Kernel targeting various vulnerabilities. Users are urged to apply patches promptly.. Linux Kernel Update, SUSE Security Advisory, Kernel Threats, System Fixes. . Severity: Important. LinuxSecurity.com Team
Feb 12, 2021
•Important
SuSE
202
security advisorymoderateinformation leakopenSUSE Leap 15.0: 2018:2019-1 Moderate: Rsyslog File Permissions Issue
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2019-1 Rating: moderate References: #935393 Cross-References: CVE-2015-3243 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rsyslog fixes the following security issue: - CVE-2015-3243: Prevent weak permissions for generated log files, which allowed local users to obtain sensitive information (bsc#935393). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-738=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rsyslog-8.33.1-lp150.2.3.2 rsyslog-debuginfo-8.33.1-lp150.2.3.2 rsyslog-debugsource-8.33.1-lp150.2.3.2 rsyslog-diag-tools-8.33.1-lp150.2.3.2 rsyslog-diag-tools-debuginfo-8.33.1-lp150.2.3.2 rsyslog-doc-8.33.1-lp150.2.3.2 rsyslog-module-dbi-8.33.1-lp150.2.3.2 rsyslog-module-dbi-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-elasticsearch-8.33.1-lp150.2.3.2 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-gcrypt-8.33.1-lp150.2.3.2 rsyslog-module-gcrypt-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-gssapi-8.33.1-lp150.2.3.2 rsyslog-module-gssapi-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-gtls-8.33.1-lp150.2.3.2 rsyslog-module-gtls-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-mmnormalize-8.33.1-lp150.2.3.2 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-mysql-8.33.1-lp150.2.3.2 rsyslog-module-mysql-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-omamqp1-8.33.1-lp150.2.3.2 rsyslog-module-omamqp1-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-omhttpfs-8.33.1-lp150.2.3.2 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-omtcl-8.33.1-lp150.2.3.2 rsyslog-module-omtcl-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-pgsql-8.33.1-lp150.2.3.2 rsyslog-module-pgsql-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-relp-8.33.1-lp150.2.3.2 rsyslog-module-relp-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-snmp-8.33.1-lp150.2.3.2 rsyslog-module-snmp-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-udpspoof-8.33.1-lp150.2.3.2 rsyslog-module-udpspoof-debuginfo-8.33.1-lp150.2.3.2 References: https://www.suse.com/security/cve/CVE-2015-3243.html https://bugzilla.suse.com/935393 -- . A recent patch for openSUSE addresses a vulnerability in rsyslog that impacts the file access rights for local users.. openSUSE security, rsyslog update, file permission vulnerability. . LinuxSecurity.com Team
Jul 20, 2018
OpenSUSE
100
security advisorydenial of servicekernelSUSE: 2017:3300-1 Important: Kernel Live Patching Fixes Issues
An update that solves two vulnerabilities and has two fixes An update that solves two vulnerabilities and has two fixes An update that solves two vulnerabilities and has two fixes is now available. is now available.. SUSE Security Update: Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP2) ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:3300-1 Rating: important References: #1055567 #1062847 #1069708 #1070307 Cross-References: CVE-2017-1000405 CVE-2017-16939 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for the Linux Kernel 4.4.74-92_29 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmd_mkdirty() in the touch_pmd() function allowed users to overwrite read-only huge pages (e.g. the zero huge page and sealed shmem files) (bsc#1070307). - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrm_user.c kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708). This non-security issue was fixed: - bsc#1062847: Enable proper shut down if NIC teaming is enabled Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2017-2069=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-4_4_74-92_29-default-6-2.1 References: https://www.suse.com/security/cve/CVE-2017-1000405.html https://www.suse.com/security/cve/CVE-2017-16939.html https://bugzilla.suse.com/1055567 https://bugzilla.suse.com/1062847 https://bugzilla.suse.com/1069708 https://bugzilla.suse.com/1070307 . The Ubuntu Security Patch resolves vulnerabilities in the kernel, providing essential updates to improve both system performance and safety.. Linux Kernel Patch, System Security, SUSE Live Patching, Security Update. . Severity: Important. LinuxSecurity.com Team
Dec 14, 2017
•Important
SuSE
197
security advisorymoderatesoftware updateDebian 7: DLA-1069-1 Moderate: Tenshi Process Control Flaw
Tenshi creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modification before a root script executes a "kill `cat /pathname/tenshi.pid`" command. . Hash: SHA512 Package : tenshi Version : 0.13-2+deb7u1 CVE ID : CVE-2017-11746 Debian Bug : 871321 Tenshi creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modification before a root script executes a "kill `cat /pathname/tenshi.pid`" command. For Debian 7 "Wheezy", these problems have been fixed in version 0.13-2+deb7u1. We recommend that you upgrade your tenshi packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Tenshi patch enhances system management defects in Debian 7. Upgrade to version 0.13-2+deb7u1 to ensure safety.. Tenshi Security Update, Debian LTS, Process Control Issues. . LinuxSecurity.com Team
Aug 27, 2017
Debian LTS
100
security advisoryDoSkernel patchSUSE: 2021:0145-1 Critical: Resolution for Linux Kernel Denial of Service
An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one errata is now available. errata is now available.. SUSE Security Update: Security update for Linux Kernel Live Patch 7 for SLE 12 SP1 ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0226-1 Rating: important References: #1012852 #1013543 #1013604 #1014271 Cross-References: CVE-2016-8632 CVE-2016-9576 CVE-2016-9794 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for the Linux Kernel 3.12.62-60_62 fixes several issues. The following security bugs were fixed: - CVE-2016-9794: Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command (bsc#1013543). - CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability (bsc#1012852). - CVE-2016-9576: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel did not properly restrict the type of iterator, which allowed local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device (bsc#1014271). Patch Instructions: To installthis SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2017-112=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_62-60_62-default-5-2.1 kgraft-patch-3_12_62-60_62-xen-5-2.1 References: https://www.suse.com/security/cve/CVE-2016-8632.html https://www.suse.com/security/cve/CVE-2016-9576.html https://www.suse.com/security/cve/CVE-2016-9794.html https://bugzilla.suse.com/1012852 https://bugzilla.suse.com/1013543 https://bugzilla.suse.com/1013604 https://bugzilla.suse.com/1014271 . An upgrade addresses numerous challenges in Linux Kernel Live Patch version 7 for SUSE SLE 12 SP1. Essential corrections are now offered.. Linux Kernel Patch, SUSE Security Update, Patching, DoS Attack, Heap Overflow. . Severity: Critical. LinuxSecurity.com Team
Jan 20, 2017
•Critical
SuSE
87
security advisorysecurity updatecriticalDebian Jessie DSA-3701-1 Critical: Nginx Privilege Escalation Fix
Dawid Golunski reported the nginx web server packages in Debian suffered from a privilege escalation vulnerability (www-data to root) due to the way log files are handled. This security update changes ownership of the /var/log/nginx directory root. In addition, . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3701-1
Oct 25, 2016
•Critical
Debian
100
security advisorydenial of servicekernel patchSUSE: 2016:2001-1 Important: Kernel Live Patch Issues Resolved
An update that solves 7 vulnerabilities and has one errata An update that solves 7 vulnerabilities and has one errata An update that solves 7 vulnerabilities and has one errata is now available. is now available.. SUSE Security Update: Security update for Linux Kernel Live Patch 13 for SLE 12 ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:2001-1 Rating: important References: #955837 #971793 #973570 #979064 #979074 #980856 #980883 #984764 Cross-References: CVE-2013-7446 CVE-2015-8816 CVE-2016-0758 CVE-2016-2053 CVE-2016-3134 CVE-2016-4470 CVE-2016-4565 Affected Products: SUSE Linux Enterprise Server for SAP 12 SUSE Linux Enterprise Server 12-LTSS ______________________________________________________________________________ An update that solves 7 vulnerabilities and has one errata is now available. Description: This update for the Linux Kernel 3.12.55-52_45 fixes several issues. The following security bugs were fixed: - CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bsc#984764). - CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel incorrectly relied on the write system call, which allowed local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface (bsc#980883). - CVE-2016-0758: Integer overflow in lib/asn1_decoder.c in the Linux kernel allowed local users to gain privileges via crafted ASN.1 data (bsc#980856). - CVE-2016-2053: The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel allowed attackers to cause adenial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c (bsc#979074). - CVE-2015-8816: The hub_activate function in drivers/usb/core/hub.c in the Linux kernel did not properly maintain a hub-interface data structure, which allowed physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device (bsc#979064). - CVE-2016-3134: The netfilter subsystem in the Linux kernel did not validate certain offset fields, which allowed local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call (bsc#971793). - CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel allowed local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls (bsc#973570, bsc#955837). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12: zypper in -t patch SUSE-SLE-SAP-12-2016-1172=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2016-1172=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for SAP 12 (x86_64): kgraft-patch-3_12_55-52_45-default-2-2.3 kgraft-patch-3_12_55-52_45-xen-2-2.3 - SUSE Linux Enterprise Server 12-LTSS (x86_64): kgraft-patch-3_12_55-52_45-default-2-2.3 kgraft-patch-3_12_55-52_45-xen-2-2.3 References: https://www.suse.com/security/cve/CVE-2013-7446.html https://www.suse.com/security/cve/CVE-2015-8816.html https://www.suse.com/security/cve/CVE-2016-0758.html https://www.suse.com/security/cve/CVE-2016-2053.html https://www.suse.com/security/cve/CVE-2016-3134.html https://www.suse.com/security/cve/CVE-2016-4470.html https://www.suse.com/security/cve/CVE-2016-4565.html https://bugzilla.suse.com/955837 https://bugzilla.suse.com/971793 https://bugzilla.suse.com/973570 https://bugzilla.suse.com/979064 https://bugzilla.suse.com/979074 https://bugzilla.suse.com/980856 https://bugzilla.suse.com/980883 https://bugzilla.suse.com/984764 . SUSE has released Kernel Live Patch 13 for SLE 12, resolving 7 security flaws, with significant improvements to safeguard the system.. Linux Kernel Patch, SUSE Update, Linux Server, Security Issues, System Integrity. . Severity: Important. LinuxSecurity.com Team
Aug 09, 2016
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!