Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
100
security advisorydenial of serviceinput validationSUSE Linux Micro: 2025:20080-1 moderate: podman multiple fixes
* bsc#1231208 * bsc#1231230 * bsc#1231499 * bsc#1231698 . # Security update for podman Announcement ID: SUSE-SU-2025:20080-1 Release Date: 2025-02-03T09:06:01Z Rating: moderate References: * bsc#1231208 * bsc#1231230 * bsc#1231499 * bsc#1231698 Cross-References: * CVE-2024-6104 * CVE-2024-9341 * CVE-2024-9407 * CVE-2024-9675 * CVE-2024-9676 CVSS scores: * CVE-2024-6104 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-6104 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-9341 ( SUSE ): 5.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-9341 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N * CVE-2024-9341 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N * CVE-2024-9341 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2024-9407 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-9407 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2024-9407 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N * CVE-2024-9675 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2024-9675 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-9675 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9676 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-9676 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-9676 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-9676 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2024-9676: Fixed a denial of service via a symlink traversal in the containers/storage library (bsc#1231698) *CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230) * CVE-2024-9675: Fixed caching of arbitrary directory mount (bsc#1231499) * CVE-2024-9407: Fixed improper input validation in bind-propagation option of Dockerfile RUN --mount instruction (bsc#1231208) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-95=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * podman-4.9.5-2.1 * podman-debuginfo-4.9.5-2.1 * podman-remote-debuginfo-4.9.5-2.1 * podman-remote-4.9.5-2.1 * SUSE Linux Micro 6.0 (noarch) * podman-docker-4.9.5-2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-6104.html * https://www.suse.com/security/cve/CVE-2024-9341.html * https://www.suse.com/security/cve/CVE-2024-9407.html * https://www.suse.com/security/cve/CVE-2024-9675.html * https://www.suse.com/security/cve/CVE-2024-9676.html * https://bugzilla.suse.com/show_bug.cgi?id=1231208 * https://bugzilla.suse.com/show_bug.cgi?id=1231230 * https://bugzilla.suse.com/show_bug.cgi?id=1231499 * https://bugzilla.suse.com/show_bug.cgi?id=1231698 . Significant podman upgrade for SUSE Linux Micro 6.0 tackles multiple concerns including service disruption and input sanitation vulnerabilities. podman security advisory, SUSE Linux update, denial of service patch, Linux container security, input validation issues. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
197
security advisorydebianregression fixDebian 10 Buster DLA-3387-2: Udisks2 Regression Fix and Upgrade
A regression was reported that the fix for CVE-2021-3802 broken mounting allow-listed mount option/value pairs, for example errors=remount-ro. For Debian 10 buster, this problem has been fixed in version . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3387-2
Apr 10, 2023
•Important
Debian LTS
100
security advisorymoderatesecurity updateSUSE: 2022:3154-1 Moderate: Udisks2 Mounting Issue Fixed
An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for udisks2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3154-1 Rating: moderate References: #1098797 #1190606 Cross-References: CVE-2021-3802 CVSS scores: CVE-2021-3802 (NVD) : 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H CVE-2021-3802 (SUSE): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for udisks2 fixes the following issues: - CVE-2021-3802: Fixed insecure defaults in user-accessible mount helpers (bsc#1190606). - Fixed vulnerability that allowed mounting ext4 devices over existing entries in fstab (bsc#1098797). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3154=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3154=1 Package List: -openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libudisks2-0-2.8.1-150200.3.3.1 libudisks2-0-debuginfo-2.8.1-150200.3.3.1 libudisks2-0-devel-2.8.1-150200.3.3.1 libudisks2-0_bcache-2.8.1-150200.3.3.1 libudisks2-0_bcache-debuginfo-2.8.1-150200.3.3.1 libudisks2-0_btrfs-2.8.1-150200.3.3.1 libudisks2-0_btrfs-debuginfo-2.8.1-150200.3.3.1 libudisks2-0_lsm-2.8.1-150200.3.3.1 libudisks2-0_lsm-debuginfo-2.8.1-150200.3.3.1 libudisks2-0_lvm2-2.8.1-150200.3.3.1 libudisks2-0_lvm2-debuginfo-2.8.1-150200.3.3.1 libudisks2-0_zram-2.8.1-150200.3.3.1 libudisks2-0_zram-debuginfo-2.8.1-150200.3.3.1 typelib-1_0-UDisks-2_0-2.8.1-150200.3.3.1 udisks2-2.8.1-150200.3.3.1 udisks2-debuginfo-2.8.1-150200.3.3.1 udisks2-debugsource-2.8.1-150200.3.3.1 - openSUSE Leap 15.3 (noarch): udisks2-lang-2.8.1-150200.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libudisks2-0-2.8.1-150200.3.3.1 libudisks2-0-debuginfo-2.8.1-150200.3.3.1 libudisks2-0-devel-2.8.1-150200.3.3.1 typelib-1_0-UDisks-2_0-2.8.1-150200.3.3.1 udisks2-2.8.1-150200.3.3.1 udisks2-debuginfo-2.8.1-150200.3.3.1 udisks2-debugsource-2.8.1-150200.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): udisks2-lang-2.8.1-150200.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-3802.html https://bugzilla.suse.com/1098797 https://bugzilla.suse.com/1190606 . Red Hat provides enhancements addressing a significant vulnerability in lvm2 regarding improper permissions and storage management practices. Update released.. SUSE Linux Security,Udisks2 Patch,Moderate Security Update,Linux Desktop Security. . LinuxSecurity.com Team
Sep 07, 2022
SuSE
89
security advisorycriticalsoftware updateFedora Core 3: 2005-282 Critical Autofs Mounting Issues Fixed
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-282 2005-04-12 ---------------------------------------------------------------------Product : Fedora Core 3 Name : autofs Version : 4.1.3 Release : 114 Summary : A tool for automatically mounting and unmounting filesystems. Description : autofs is a daemon which automatically mounts filesystems when you use them, and unmounts them later when you are not using them. This can include network filesystems, CD-ROMs, floppies, and so forth. ---------------------------------------------------------------------* Wed Mar 23 2005 Chris Feist - 1:4.1.3-114 - Fixed regression causing any entries after a wildcard in an indirect map to be ignored. (bz #151668). - Fixed regression which caused local hosts to be mount instead of --bind local directories. (bz #146887) * Thu Mar 17 2005 Chris Feist - 1:4.1.3-110 - Fixed one off bug in the submount-variable-propagation patch. (bz #143074) - Fixed a bug in the init script which wouldn't find the -browse option if it was preceded by another option. (fz #113494) * Mon Feb 28 2005 Chris Feist - 1:4.1.3-100 - When using ldap if auto.master doesn't exist we now check for auto_master. Addresses bz #130079 - When using an auto.smb map we now remove the leading ':' from the path which caused mount to fail in the past. Addresses bz #147492 - Autofs now checks /etc/nsswitch.conf to determine in what order files & nis are checked when looking up autofs submount maps which don't specify a maptype. Addresses IT #57612. * Fri Feb 11 2005 Jeff Moyer - 1:4.1.3-97 - Program maps can repeat the last character of output. Fix this. Addresses bz #138606 - Return first entry when there are duplicate keys in a map. Addresses bz #140108. - Propagate custom map variables to submounts. Fixes bz #143074. - Create a sysconfig variable to control whether we sourceonly one master map (the way sun does), or source all maps found (which is the default for backwards compatibility). Addresses bz #143126. - Revised version of the get_best_mount patch. (#146887)
Apr 12, 2005
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!