Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 50 articles for you...
89
security advisoryfedoralibpngFedora 43: libpng High CVE-2025-66293 Out-of-Bounds Read Advisory
Fixed CVE-2025-66293 (high severity): Out-of-bounds read in png_image_read_composite. Fixed the Paeth filter handling in the RISC-V RVV implementation. Improved the performance of the RISC-V RVV implementation.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-7f360be18f 2025-12-14 00:54:54.980137+00:00 -------------------------------------------------------------------------------- Name : libpng Product : Fedora 43 Version : 1.6.53 Release : 1.fc43 URL : http://www.libpng.org/pub/png/ Summary : A library of functions for manipulating PNG image format files Description : The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng should be installed if you need to manipulate PNG format image files. -------------------------------------------------------------------------------- Update Information: Fixed CVE-2025-66293 (high severity): Out-of-bounds read in png_image_read_composite. Fixed the Paeth filter handling in the RISC-V RVV implementation. Improved the performance of the RISC-V RVV implementation. -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 8 2025 Michal Hlavinka - 2:1.6.53-1 - updated to 1.6.53 (#2418775) * Mon Dec 8 2025 Michal Hlavinka - 2:1.6.52-1 - updated to 1.6.52 (#2418775) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2418747 - CVE-2025-66293 libpng: LIBPNG out-of-bounds read in png_image_read_composite [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2418747 -------------------------------------------------------------------------------- This update can be installedwith the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-7f360be18f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 14, 2025
•Critical
Fedora
89
security advisoryFedorasecurity fixFedora 42: 2025-2ccc1f4ed9 critical: valkey security fix
Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Optimize RDB load performance and fix cluster mode resizing on replica side. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-2ccc1f4ed9 2025-05-03 02:07:27.616692+00:00 -------------------------------------------------------------------------------- Name : valkey Product : Fedora 42 Version : 8.0.3 Release : 1.fc42 URL : https://valkey.io Summary : A persistent key-value database Description : Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. -------------------------------------------------------------------------------- Update Information: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Optimize RDB load performance and fix cluster mode resizing onreplica side (#1199) Fix memory leak in forgotten node ping ext code path (#1574) Fix cluster info sent stats for message with light header (#1563) Fix module LatencyAddSample still work when latency-monitor-threshold is 0 (#1541) Fix potential crash in radix tree recompression of huge keys (#1722) Fix error "SSL routines::bad length" when connTLSWrite is called second time with smaller buffer (#1737) Fix temp file leak druing replication error handling (#1721) Fix ACL LOAD crash on replica since the primary client don't has a user (#1842) Fix RANDOMKEY infinite loop during CLIENT PAUSE (#1850) fix: add samples to stream object consumer trees (#1825) Fix cluster slot stats assertion during promotion of replica (#1950) Fix panic in primary when blocking shutdown after previous block with timeout (#1948) Ignore stale gossip packets that arrive out of order (#1777) Fix incorrect lag reported in XINFO GROUPS (#1952) Avoid shard id update of replica if not matching with primary shard id (#573) Security fixes CVE-2025-21605 Limit output buffer for unauthenticated clients (#1993) -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 24 2025 Remi Collet - 8.0.3-1 - update to 8.0.3 fixes CVE-2025-21605 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-2ccc1f4ed9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
May 03, 2025
•Critical
Fedora
100
security advisorymoderatesecurity issueSUSE 15 SP4: SUSE-SU-2025:0801-1 moderate: pcp security issue
* bsc#1217826 * bsc#1222815 Cross-References: * CVE-2023-6917 . # Security update for pcp Announcement ID: SUSE-SU-2025:0801-1 Release Date: 2025-03-06T14:04:47Z Rating: moderate References: * bsc#1217826 * bsc#1222815 Cross-References: * CVE-2023-6917 CVSS scores: * CVE-2023-6917 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for pcp fixes the following issues: * Version upgrade 6.2.0 (bsc#1217826, PED#8192, CVE-2023-6917). * Performance CoPilot 6 is not starting due to missing pmlogger_daily.timer (bsc#1222815). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-801=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-801=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-801=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-801=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-801=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * perl-PCP-LogSummary-6.2.0-150400.5.12.3 * pcp-system-tools-6.2.0-150400.5.12.3 *perl-PCP-PMDA-debuginfo-6.2.0-150400.5.12.3 * pcp-devel-6.2.0-150400.5.12.3 * pcp-pmda-logger-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-cifs-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-sendmail-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-hacluster-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-shping-debuginfo-6.2.0-150400.5.12.3 * libpcp_mmv1-6.2.0-150400.5.12.3 * libpcp_trace2-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-cifs-6.2.0-150400.5.12.3 * pcp-pmda-cisco-debuginfo-6.2.0-150400.5.12.3 * pcp-gui-6.2.0-150400.5.12.3 * pcp-pmda-hacluster-6.2.0-150400.5.12.3 * pcp-pmda-mailq-debuginfo-6.2.0-150400.5.12.3 * pcp-debugsource-6.2.0-150400.5.12.3 * libpcp3-6.2.0-150400.5.12.3 * pcp-pmda-mounts-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-apache-6.2.0-150400.5.12.3 * pcp-pmda-summary-6.2.0-150400.5.12.3 * pcp-pmda-weblog-6.2.0-150400.5.12.3 * perl-PCP-PMDA-6.2.0-150400.5.12.3 * libpcp3-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-zimbra-6.2.0-150400.5.12.3 * libpcp_gui2-6.2.0-150400.5.12.3 * pcp-devel-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-systemd-6.2.0-150400.5.12.3 * pcp-pmda-weblog-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-debuginfo-6.2.0-150400.5.12.3 * libpcp_mmv1-debuginfo-6.2.0-150400.5.12.3 * libpcp-devel-6.2.0-150400.5.12.3 * pcp-import-collectl2pcp-6.2.0-150400.5.12.3 * pcp-pmda-summary-debuginfo-6.2.0-150400.5.12.3 * pcp-testsuite-debuginfo-6.2.0-150400.5.12.3 * pcp-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-mailq-6.2.0-150400.5.12.3 * pcp-pmda-gfs2-6.2.0-150400.5.12.3 * pcp-pmda-systemd-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-gfs2-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-shping-6.2.0-150400.5.12.3 * pcp-6.2.0-150400.5.12.3 * perl-PCP-LogImport-6.2.0-150400.5.12.3 * libpcp_gui2-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-bash-6.2.0-150400.5.12.3 * perl-PCP-MMV-6.2.0-150400.5.12.3 *pcp-pmda-smart-6.2.0-150400.5.12.3 * pcp-pmda-dm-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-sendmail-6.2.0-150400.5.12.3 * pcp-gui-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-bind2-6.2.0-150400.5.12.3 * pcp-pmda-dm-6.2.0-150400.5.12.3 * pcp-pmda-smart-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-MMV-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-bash-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-6.2.0-150400.5.12.3 * pcp-pmda-nvidia-gpu-debuginfo-6.2.0-150400.5.12.3 * python3-pcp-6.2.0-150400.5.12.3 * pcp-pmda-lustrecomm-debuginfo-6.2.0-150400.5.12.3 * pcp-system-tools-debuginfo-6.2.0-150400.5.12.3 * python3-pcp-debuginfo-6.2.0-150400.5.12.3 * pcp-testsuite-6.2.0-150400.5.12.3 * pcp-import-collectl2pcp-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-apache-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-roomtemp-6.2.0-150400.5.12.3 * pcp-pmda-sockets-6.2.0-150400.5.12.3 * libpcp_trace2-6.2.0-150400.5.12.3 * pcp-pmda-logger-6.2.0-150400.5.12.3 * pcp-pmda-lustrecomm-6.2.0-150400.5.12.3 * libpcp_web1-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-trace-6.2.0-150400.5.12.3 * pcp-pmda-sockets-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-cisco-6.2.0-150400.5.12.3 * pcp-pmda-mounts-6.2.0-150400.5.12.3 * pcp-pmda-roomtemp-debuginfo-6.2.0-150400.5.12.3 * libpcp_web1-6.2.0-150400.5.12.3 * pcp-pmda-trace-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-nvidia-gpu-6.2.0-150400.5.12.3 * pcp-pmda-zimbra-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-docker-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-docker-6.2.0-150400.5.12.3 * openSUSE Leap 15.4 (noarch) * pcp-pmda-json-6.2.0-150400.5.12.3 * pcp-export-pcp2spark-6.2.0-150400.5.12.3 * pcp-conf-6.2.0-150400.5.12.3 * pcp-export-pcp2elasticsearch-6.2.0-150400.5.12.3 * pcp-pmda-haproxy-6.2.0-150400.5.12.3 * pcp-export-pcp2zabbix-6.2.0-150400.5.12.3 * pcp-export-pcp2graphite-6.2.0-150400.5.12.3 * pcp-pmda-slurm-6.2.0-150400.5.12.3 *pcp-pmda-netcheck-6.2.0-150400.5.12.3 * pcp-pmda-lmsensors-6.2.0-150400.5.12.3 * pcp-pmda-lustre-6.2.0-150400.5.12.3 * pcp-pmda-rabbitmq-6.2.0-150400.5.12.3 * pcp-pmda-memcache-6.2.0-150400.5.12.3 * pcp-pmda-oracle-6.2.0-150400.5.12.3 * pcp-pmda-ds389log-6.2.0-150400.5.12.3 * pcp-pmda-openmetrics-6.2.0-150400.5.12.3 * pcp-pmda-gpfs-6.2.0-150400.5.12.3 * pcp-export-pcp2influxdb-6.2.0-150400.5.12.3 * pcp-pmda-bonding-6.2.0-150400.5.12.3 * pcp-import-ganglia2pcp-6.2.0-150400.5.12.3 * pcp-pmda-mysql-6.2.0-150400.5.12.3 * pcp-pmda-ds389-6.2.0-150400.5.12.3 * pcp-pmda-unbound-6.2.0-150400.5.12.3 * pcp-export-pcp2xml-6.2.0-150400.5.12.3 * pcp-pmda-news-6.2.0-150400.5.12.3 * pcp-pmda-zswap-6.2.0-150400.5.12.3 * pcp-pmda-samba-6.2.0-150400.5.12.3 * pcp-pmda-rsyslog-6.2.0-150400.5.12.3 * pcp-import-mrtg2pcp-6.2.0-150400.5.12.3 * pcp-pmda-postfix-6.2.0-150400.5.12.3 * pcp-pmda-snmp-6.2.0-150400.5.12.3 * pcp-pmda-named-6.2.0-150400.5.12.3 * pcp-pmda-activemq-6.2.0-150400.5.12.3 * pcp-pmda-nutcracker-6.2.0-150400.5.12.3 * pcp-doc-6.2.0-150400.5.12.3 * pcp-pmda-nfsclient-6.2.0-150400.5.12.3 * pcp-pmda-openvswitch-6.2.0-150400.5.12.3 * pcp-import-sar2pcp-6.2.0-150400.5.12.3 * pcp-pmda-gpsd-6.2.0-150400.5.12.3 * pcp-pmda-netfilter-6.2.0-150400.5.12.3 * pcp-pmda-pdns-6.2.0-150400.5.12.3 * pcp-pmda-mic-6.2.0-150400.5.12.3 * pcp-zeroconf-6.2.0-150400.5.12.3 * pcp-pmda-dbping-6.2.0-150400.5.12.3 * pcp-import-iostat2pcp-6.2.0-150400.5.12.3 * pcp-pmda-gluster-6.2.0-150400.5.12.3 * pcp-pmda-redis-6.2.0-150400.5.12.3 * pcp-pmda-nginx-6.2.0-150400.5.12.3 * pcp-pmda-elasticsearch-6.2.0-150400.5.12.3 * pcp-export-pcp2json-6.2.0-150400.5.12.3 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64 i586) * pcp-pmda-infiniband-debuginfo-6.2.0-150400.5.12.3 * pcp-pmda-perfevent-6.2.0-150400.5.12.3 * pcp-pmda-perfevent-debuginfo-6.2.0-150400.5.12.3 *pcp-pmda-infiniband-6.2.0-150400.5.12.3 * openSUSE Leap 15.4 (x86_64) * pcp-pmda-resctrl-6.2.0-150400.5.12.3 * pcp-pmda-resctrl-debuginfo-6.2.0-150400.5.12.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pcp-system-tools-6.2.0-150400.5.12.3 * perl-PCP-PMDA-debuginfo-6.2.0-150400.5.12.3 * pcp-devel-6.2.0-150400.5.12.3 * libpcp_mmv1-6.2.0-150400.5.12.3 * libpcp_trace2-debuginfo-6.2.0-150400.5.12.3 * pcp-debugsource-6.2.0-150400.5.12.3 * libpcp3-6.2.0-150400.5.12.3 * perl-PCP-PMDA-6.2.0-150400.5.12.3 * libpcp3-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-debuginfo-6.2.0-150400.5.12.3 * libpcp_gui2-6.2.0-150400.5.12.3 * pcp-devel-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-debuginfo-6.2.0-150400.5.12.3 * libpcp_mmv1-debuginfo-6.2.0-150400.5.12.3 * libpcp-devel-6.2.0-150400.5.12.3 * pcp-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-6.2.0-150400.5.12.3 * pcp-6.2.0-150400.5.12.3 * libpcp_gui2-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-MMV-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-6.2.0-150400.5.12.3 * python3-pcp-6.2.0-150400.5.12.3 * pcp-system-tools-debuginfo-6.2.0-150400.5.12.3 * python3-pcp-debuginfo-6.2.0-150400.5.12.3 * libpcp_trace2-6.2.0-150400.5.12.3 * libpcp_web1-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogSummary-6.2.0-150400.5.12.3 * libpcp_web1-6.2.0-150400.5.12.3 * perl-PCP-MMV-6.2.0-150400.5.12.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pcp-import-mrtg2pcp-6.2.0-150400.5.12.3 * pcp-import-sar2pcp-6.2.0-150400.5.12.3 * pcp-conf-6.2.0-150400.5.12.3 * pcp-import-iostat2pcp-6.2.0-150400.5.12.3 * pcp-doc-6.2.0-150400.5.12.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pcp-system-tools-6.2.0-150400.5.12.3 * perl-PCP-PMDA-debuginfo-6.2.0-150400.5.12.3 * pcp-devel-6.2.0-150400.5.12.3 *libpcp_mmv1-6.2.0-150400.5.12.3 * libpcp_trace2-debuginfo-6.2.0-150400.5.12.3 * pcp-debugsource-6.2.0-150400.5.12.3 * libpcp3-6.2.0-150400.5.12.3 * perl-PCP-PMDA-6.2.0-150400.5.12.3 * libpcp3-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-debuginfo-6.2.0-150400.5.12.3 * libpcp_gui2-6.2.0-150400.5.12.3 * pcp-devel-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-debuginfo-6.2.0-150400.5.12.3 * libpcp_mmv1-debuginfo-6.2.0-150400.5.12.3 * libpcp-devel-6.2.0-150400.5.12.3 * pcp-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-6.2.0-150400.5.12.3 * pcp-6.2.0-150400.5.12.3 * libpcp_gui2-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-MMV-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-6.2.0-150400.5.12.3 * python3-pcp-6.2.0-150400.5.12.3 * pcp-system-tools-debuginfo-6.2.0-150400.5.12.3 * python3-pcp-debuginfo-6.2.0-150400.5.12.3 * libpcp_trace2-6.2.0-150400.5.12.3 * libpcp_web1-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogSummary-6.2.0-150400.5.12.3 * libpcp_web1-6.2.0-150400.5.12.3 * perl-PCP-MMV-6.2.0-150400.5.12.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pcp-import-mrtg2pcp-6.2.0-150400.5.12.3 * pcp-import-sar2pcp-6.2.0-150400.5.12.3 * pcp-conf-6.2.0-150400.5.12.3 * pcp-import-iostat2pcp-6.2.0-150400.5.12.3 * pcp-doc-6.2.0-150400.5.12.3 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * pcp-system-tools-6.2.0-150400.5.12.3 * perl-PCP-PMDA-debuginfo-6.2.0-150400.5.12.3 * pcp-devel-6.2.0-150400.5.12.3 * libpcp_mmv1-6.2.0-150400.5.12.3 * libpcp_trace2-debuginfo-6.2.0-150400.5.12.3 * pcp-debugsource-6.2.0-150400.5.12.3 * libpcp3-6.2.0-150400.5.12.3 * perl-PCP-PMDA-6.2.0-150400.5.12.3 * libpcp3-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-debuginfo-6.2.0-150400.5.12.3 * libpcp_gui2-6.2.0-150400.5.12.3 * pcp-devel-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-debuginfo-6.2.0-150400.5.12.3 * libpcp_mmv1-debuginfo-6.2.0-150400.5.12.3 * libpcp-devel-6.2.0-150400.5.12.3 * pcp-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-6.2.0-150400.5.12.3 * pcp-6.2.0-150400.5.12.3 * libpcp_gui2-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-MMV-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-6.2.0-150400.5.12.3 * python3-pcp-6.2.0-150400.5.12.3 * pcp-system-tools-debuginfo-6.2.0-150400.5.12.3 * python3-pcp-debuginfo-6.2.0-150400.5.12.3 * libpcp_trace2-6.2.0-150400.5.12.3 * libpcp_web1-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogSummary-6.2.0-150400.5.12.3 * libpcp_web1-6.2.0-150400.5.12.3 * perl-PCP-MMV-6.2.0-150400.5.12.3 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * pcp-import-mrtg2pcp-6.2.0-150400.5.12.3 * pcp-import-sar2pcp-6.2.0-150400.5.12.3 * pcp-conf-6.2.0-150400.5.12.3 * pcp-import-iostat2pcp-6.2.0-150400.5.12.3 * pcp-doc-6.2.0-150400.5.12.3 * SUSE Linux Enterprise Server 15 SP4 LTSS (ppc64le) * pcp-pmda-perfevent-6.2.0-150400.5.12.3 * pcp-pmda-perfevent-debuginfo-6.2.0-150400.5.12.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pcp-system-tools-6.2.0-150400.5.12.3 * perl-PCP-PMDA-debuginfo-6.2.0-150400.5.12.3 * pcp-devel-6.2.0-150400.5.12.3 * libpcp_mmv1-6.2.0-150400.5.12.3 * libpcp_trace2-debuginfo-6.2.0-150400.5.12.3 * pcp-debugsource-6.2.0-150400.5.12.3 * libpcp3-6.2.0-150400.5.12.3 * perl-PCP-PMDA-6.2.0-150400.5.12.3 * libpcp3-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-debuginfo-6.2.0-150400.5.12.3 * libpcp_gui2-6.2.0-150400.5.12.3 * pcp-devel-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-debuginfo-6.2.0-150400.5.12.3 * libpcp_mmv1-debuginfo-6.2.0-150400.5.12.3 * libpcp-devel-6.2.0-150400.5.12.3 * pcp-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogImport-6.2.0-150400.5.12.3 * pcp-6.2.0-150400.5.12.3 * libpcp_gui2-debuginfo-6.2.0-150400.5.12.3 *perl-PCP-MMV-debuginfo-6.2.0-150400.5.12.3 * libpcp_import1-6.2.0-150400.5.12.3 * python3-pcp-6.2.0-150400.5.12.3 * pcp-system-tools-debuginfo-6.2.0-150400.5.12.3 * python3-pcp-debuginfo-6.2.0-150400.5.12.3 * libpcp_trace2-6.2.0-150400.5.12.3 * libpcp_web1-debuginfo-6.2.0-150400.5.12.3 * perl-PCP-LogSummary-6.2.0-150400.5.12.3 * libpcp_web1-6.2.0-150400.5.12.3 * perl-PCP-MMV-6.2.0-150400.5.12.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pcp-import-mrtg2pcp-6.2.0-150400.5.12.3 * pcp-import-sar2pcp-6.2.0-150400.5.12.3 * pcp-conf-6.2.0-150400.5.12.3 * pcp-import-iostat2pcp-6.2.0-150400.5.12.3 * pcp-doc-6.2.0-150400.5.12.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le) * pcp-pmda-perfevent-6.2.0-150400.5.12.3 * pcp-pmda-perfevent-debuginfo-6.2.0-150400.5.12.3 ## References: * https://www.suse.com/security/cve/CVE-2023-6917.html * https://bugzilla.suse.com/show_bug.cgi?id=1217826 * https://bugzilla.suse.com/show_bug.cgi?id=1222815 . A new release for pcp tackles a vulnerability within SUSE offerings, enhancing overall stability and operational efficiency. Vital updates have been integrated.. pcp update, SUSE security, performance improvement, system stability, threat mitigation. . LinuxSecurity.com Team
Mar 06, 2025
SuSE
202
security advisorysecurity issuekernel updateopenSUSE Leap 15.4: SUSE-SU-2025:0251-1 important kernel update
An update that solves 32 vulnerabilities and has one security fix can now be installed.. # Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4) Announcement ID: SUSE-SU-2025:0251-1 Release Date: 2025-01-27T13:03:46Z Rating: important References: * bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225733 * bsc#1225739 * bsc#1225819 * bsc#1226324 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1229553 * bsc#1231353 * bsc#1232637 * bsc#1233712 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2022-48956 * CVE-2023-52502 * CVE-2023-52752 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36904 * CVE-2024-36964 * CVE-2024-36971 * CVE-2024-40954 * CVE-2024-41059 * CVE-2024-43861 * CVE-2024-50264 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48956 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48956 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26610 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26828 ( NVD ): 6.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36904 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-43861 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43861 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50264 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H *CVE-2024-50264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 32 vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: * CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). * CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-> trans (bsc#1233712). * CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1232637). * CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). * CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). *CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev-> mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha-> vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb-> mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patchSUSE-2025-251=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-251=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-11-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_24-debugsource-11-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-11-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-11-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_24-debugsource-11-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-11-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2022-48956.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html *https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36904.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-36971.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://www.suse.com/security/cve/CVE-2024-43861.html * https://www.suse.com/security/cve/CVE-2024-50264.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225733 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226324 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 *https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1229553 * https://bugzilla.suse.com/show_bug.cgi?id=1231353 * https://bugzilla.suse.com/show_bug.cgi?id=1232637 * https://bugzilla.suse.com/show_bug.cgi?id=1233712 . Address important security updates for the Linux Kernel in openSUSE, solving multiple critical issues.. openSUSE Kernel Security, Important Security Fix, Live Patching. . Severity: Important. LinuxSecurity.com Team
Jan 27, 2025
•Important
OpenSUSE
89
security advisorysecurity updateintrusion detectionFedora 40 Update: suricata 2025-aa783e1cbd critical security advisory
Various security, performance, accuracy, and stability issues have been fixed.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-aa783e1cbd 2025-01-12 01:42:08.024032+00:00 -------------------------------------------------------------------------------- Name : suricata Product : Fedora 40 Version : 7.0.8 Release : 1.fc40 URL : / Summary : Intrusion Detection System Description : The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic Protocol Detection (IP, TCP, UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP Matching, and GeoIP identification. -------------------------------------------------------------------------------- Update Information: Various security, performance, accuracy, and stability issues have been fixed. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 3 2025 Steve Grubb 7.0.8-1 - New security and bugfix release * Tue Oct 22 2024 Richard W.M. Jones - 7.0.7-2 - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/
Jan 12, 2025
•Critical
Fedora
217
security advisorycritical updateperformance improvementOracle Linux 7 ELSA-2024-3741 Critical: Bind And DHCP Security Fixes
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-3741 http://linux.oracle.com/errata/ELSA-2024-3741.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: aarch64: bind-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-chroot-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-libs-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-export-libs-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-libs-lite-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-license-9.11.4-26.P2.el7_9.16.noarch.rpm bind-pkcs11-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-utils-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-export-devel-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-devel-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-lite-devel-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-sdb-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-sdb-chroot-9.11.4-26.P2.el7_9.16.aarch64.rpm bind-dyndb-ldap-11.1-7.el7_9.1.aarch64.rpm dhclient-4.2.5-83.0.3.el7_9.2.aarch64.rpm dhcp-4.2.5-83.0.3.el7_9.2.aarch64.rpm dhcp-common-4.2.5-83.0.3.el7_9.2.aarch64.rpm dhcp-libs-4.2.5-83.0.3.el7_9.2.aarch64.rpm dhcp-devel-4.2.5-83.0.3.el7_9.2.aarch64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates//bind-9.11.4-26.P2.el7_9.16.src.rpm http://oss.oracle.com/ol7/SRPMS-updates//bind-dyndb-ldap-11.1-7.el7_9.1.src.rpm http://oss.oracle.com/ol7/SRPMS-updates//dhcp-4.2.5-83.0.3.el7_9.2.src.rpm Related CVEs: CVE-2023-4408 CVE-2023-50387 CVE-2023-50868 Description of changes: bind [32:9.11.4-26.P2.16] - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers bind-dyndb-ldap [11.1-7.1] - Rebuild required for BIND changes for KeyTrap change(CVE-2023-50387) dhcp [12:4.2.5-83.0.3.2] - Update bug reporting URL [Orabug: 35496820] - Direct users to Oracle Linux support site. [12:4.2.5-83.2] - Rebuild because of bind ABI changes related to CVE-2023-50387 _______________________________________________ El-errata mailing list
Jun 13, 2024
•Critical
Oracle
89
security advisorysoftware updateFedoraFedora 40: FEDORA-2024-5e8ae0def0 Moderate: PHP Memory Leak Fixes
PHP version 8.3.6 (11 Apr 2024) Core: Fixed GH-13569 (GC buffer unnecessarily grows up to GC_MAX_BUF_SIZE when scanning WeakMaps). (Arnaud) Fixed bug GH-13612 (Corrupted memory in destructor with weak references).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-5e8ae0def0 2024-04-19 21:20:20.799081 -------------------------------------------------------------------------------- Name : php Product : Fedora 40 Version : 8.3.6 Release : 1.fc40 URL : http://www.php.net/ Summary : PHP scripting language for creating dynamic web sites Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. -------------------------------------------------------------------------------- Update Information: PHP version 8.3.6 (11 Apr 2024) Core: Fixed GH-13569 (GC buffer unnecessarily grows up to GC_MAX_BUF_SIZE when scanning WeakMaps). (Arnaud) Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13446 (Restore exception handler after it finishes). (ilutov) Fixed bug GH-13784 (AX_GCC_FUNC_ATTRIBUTE failure). (Remi) Fixed bug GH-13670 (GC does not scale well with a lot of objects created in destructor). (Arnaud) DOM: Add some missing ZPP checks. (nielsdos) Fix potential memory leak in XPath evaluation results. (nielsdos) FPM: Fixed GH-11086 (FPM: config test runs twice in daemonised mode). (Jakub Zelenka) Fix incorrect check in fpm_shm_free(). (nielsdos) GD: Fixed bug GH-12019 (add GDLIB_CFLAGS in feature tests). (Michael Orlitzky) Gettext: Fixed sigabrt raised with dcgettext/dcngettext calls withgettext 0.22.5 with category set to LC_ALL. (David Carlier) MySQLnd: Fix GH-13452 (Fixed handshake response [mysqlnd]). (Saki Takamachi) Fix incorrect charset length in check_mb_eucjpms(). (nielsdos) Opcache: Fixed GH-13508 (JITed QM_ASSIGN may be optimized out when op1 is null). (Arnaud, Dmitry) Fixed GH-13712 (Segmentation fault for enabled observers when calling trait method of internal trait when opcache is loaded). (Bob) Random: Fixed bug GH-13544 (Pre-PHP 8.2 compatibility for mt_srand with unknown modes). (timwolla) Fixed bug GH-13690 (Global Mt19937 is not properly reset in-between requests when MT_RAND_PHP is used). (timwolla) Session: Fixed bug GH-13680 (Segfault with session_decode and compilation error). (nielsdos) SPL: Fixed bug GH-13685 (Unexpected null pointer in zend_string.h). (nielsdos) Standard: Fixed bug GH-11808 (Live filesystem modified by tests). (nielsdos) Fixed GH-13402 (Added validation of \n in $additional_headers of mail()). (SakiTakamachi) Fixed bug GH-13203 (file_put_contents fail on strings over 4GB on Windows). (divinity76) Fixed bug GHSA-pc52-254m-w9w7 (Command injection via array-ish $command parameter of proc_open). (CVE-2024-1874) (Jakub Zelenka) Fixed bug GHSA-wpj3-hf5j-x4v4 (__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix). (CVE-2024-2756) (nielsdos) Fixed bug GHSA-h746-cjrr-wfmr (password_verify can erroneously return true, opening ATO risk). (CVE-2024-3096) (Jakub Zelenka) Fixed bug GHSA-fjp9-9hwx-59fq (mb_encode_mimeheader runs endlessly for some inputs). (CVE-2024-2757) (Alex Dowad) Fix bug GH-13932 (Attempt to fix mbstring on windows build) (msvc). (David Carlier) -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 10 2024 Remi Collet - 8.3.6-1 - Update to 8.3.6 - http://www.php.net/releases/8_3_6.php * Wed Apr 10 2024 Remi Collet - 8.3.5-1 - Update to 8.3.5 -https://www.php.net/manual-lookup.php?pattern=releases%2F8_3_5.php&lang=en&scope=404quickref -------------------------------------------------------------------------------- References: [ 1 ] Bug #2275058 - CVE-2024-2756 php: host/secure cookie bypass due to partial CVE-2022-31629 fix https://bugzilla.redhat.com/show_bug.cgi?id=2275058 [ 2 ] Bug #2275061 - CVE-2024-3096 php: password_verify can erroneously return true, opening ATO risk https://bugzilla.redhat.com/show_bug.cgi?id=2275061 [ 3 ] Bug #2275068 - CVE-2024-2757 php: mb_encode_mimeheader runs endlessly for some inputs https://bugzilla.redhat.com/show_bug.cgi?id=2275068 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-5e8ae0def0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 19, 2024
Fedora
89
security advisorysoftware updateFedoraFedora 39: FEDORA-2024-113454b56b Moderate: Firefox Update 124.0
Updated to 124.0. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-113454b56b 2024-03-20 02:03:35.721055 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 39 Version : 124.0 Release : 1.fc39 URL : https://www.firefox.com/en-US/?redirect_source=mozilla-org Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: Updated to 124.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 13 2024 Martin Stransky - 124.0-1 - Updated to 124.0 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-113454b56b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 20, 2024
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!