Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 14 articles for you...
100
security advisorysecurity issuepolicy updateSUSE Linux Micro 6.0: 2025:20042-1 important: SELinux policy patch
* bsc#1210717 * bsc#1215405 * bsc#1225984 * bsc#1227930 * bsc#1228247 . # Security update for selinux-policy Announcement ID: SUSE-SU-2025:20042-1 Release Date: 2025-02-03T08:54:23Z Rating: important References: * bsc#1210717 * bsc#1215405 * bsc#1225984 * bsc#1227930 * bsc#1228247 * bsc#1229132 Affected Products: * SUSE Linux Micro 6.0 An update that has six fixes can now be installed. ## Description: This update for selinux-policy fixes the following issues: Update to version 20230523+git25.ad22dd7f: * Backport wtmpdb label change to have the same wtmpdb label as in SL Micro 6.1 (bsc#1229132) * Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records * Add auth_rw_wtmpdb_login_records to modules * Allow xdm_t to read-write to wtmpdb (bsc#1225984) * Introduce types for wtmpdb and rw interface * Introduce wtmp_file_type attribute * Revert "Add policy for wtmpdb (bsc#1210717)" Update to version 20230523+git18.f44daf8a: * Provide type for sysstat lock files (bsc#1228247) Update to version 20230523+git16.0849f54c: * allow firewalld access to /dev/random and write HW acceleration logs (bsc#1215405, bsc#1227930) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-43=1 ## Package List: * SUSE Linux Micro 6.0 (noarch) * selinux-policy-20230523+git25.ad22dd7f-1.1 * selinux-policy-targeted-20230523+git25.ad22dd7f-1.1 * selinux-policy-devel-20230523+git25.ad22dd7f-1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1210717 * https://bugzilla.suse.com/show_bug.cgi?id=1215405 * https://bugzilla.suse.com/show_bug.cgi?id=1225984 * https://bugzilla.suse.com/show_bug.cgi?id=1227930 * https://bugzilla.suse.com/show_bug.cgi?id=1228247 *https://bugzilla.suse.com/show_bug.cgi?id=1229132 . This notice emphasizes significant enhancements to SELinux policies for SUSE Linux Micro 6.0, focusing on essential corrections.. SUSE Linux Micro, SELinux Policy, Important Updates. . Severity: Important. LinuxSecurity.com Team
Jun 04, 2025
•Important
SuSE
100
security advisoryimportantthreat mitigationSUSE Linux Micro: 2025:20042-1 important selinux-policy patch
* bsc#1210717 * bsc#1215405 * bsc#1225984 * bsc#1227930 * bsc#1228247 . # Security update for selinux-policy Announcement ID: SUSE-SU-2025:20042-1 Release Date: 2025-02-03T08:54:23Z Rating: important References: * bsc#1210717 * bsc#1215405 * bsc#1225984 * bsc#1227930 * bsc#1228247 * bsc#1229132 Affected Products: * SUSE Linux Micro 6.0 An update that has six fixes can now be installed. ## Description: This update for selinux-policy fixes the following issues: Update to version 20230523+git25.ad22dd7f: * Backport wtmpdb label change to have the same wtmpdb label as in SL Micro 6.1 (bsc#1229132) * Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records * Add auth_rw_wtmpdb_login_records to modules * Allow xdm_t to read-write to wtmpdb (bsc#1225984) * Introduce types for wtmpdb and rw interface * Introduce wtmp_file_type attribute * Revert "Add policy for wtmpdb (bsc#1210717)" Update to version 20230523+git18.f44daf8a: * Provide type for sysstat lock files (bsc#1228247) Update to version 20230523+git16.0849f54c: * allow firewalld access to /dev/random and write HW acceleration logs (bsc#1215405, bsc#1227930) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-43=1 ## Package List: * SUSE Linux Micro 6.0 (noarch) * selinux-policy-devel-20230523+git25.ad22dd7f-1.1 * selinux-policy-20230523+git25.ad22dd7f-1.1 * selinux-policy-targeted-20230523+git25.ad22dd7f-1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1210717 * https://bugzilla.suse.com/show_bug.cgi?id=1215405 * https://bugzilla.suse.com/show_bug.cgi?id=1225984 * https://bugzilla.suse.com/show_bug.cgi?id=1227930 * https://bugzilla.suse.com/show_bug.cgi?id=1228247 *https://bugzilla.suse.com/show_bug.cgi?id=1229132 . Important improvement for SUSE Linux Micro's AppArmor configuration tackling various vulnerabilities and upgrades.. SUSE Linux Micro, selinux-policy, security update, policy enhancements, threat mitigation. . Severity: Important. LinuxSecurity.com Team
Jun 04, 2025
•Important
SuSE
172
security advisorydenial of serviceUbuntuUbuntu 16.04 LTS: USN-4008-2 Moderate: AppArmor Policy Update
Several policy updates were made for running under the recently updated Linux kernel.. =========================================================================Ubuntu Security Notice USN-4008-2 June 05, 2019 apparmor update ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several policy updates were made for running under the recently updated Linux kernel. Software Description: - apparmor: Linux security system Details: USN-4008-1 fixed multiple security issues in the Linux kernel. This update provides the corresponding changes to AppArmor policy for correctly operating under the Linux kernel with fixes for CVE-2019-11190. Without these changes, some profile transitions may be unintentionally denied due to missing mmap ('m') rules. Original advisory details: Robert Święcki discovered that the Linux kernel did not properly apply Address Space Layout Randomization (ASLR) in some situations for setuid elf binaries. A local attacker could use this to improve the chances of exploiting an existing vulnerability in a setuid elf binary. (CVE-2019-11190) It was discovered that a null pointer dereference vulnerability existed in the LSI Logic MegaRAID driver in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2019-11810) It was discovered that a race condition leading to a use-after-free existed in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel. The RDS protocol is blacklisted by default in Ubuntu. If enabled, a local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-11815) Federico Manuel Bento discovered that the Linux kernel did not properly apply Address Space Layout Randomization (ASLR) in some situations for setuid a.out binaries. A local attacker could usethis to improve the chances of exploiting an existing vulnerability in a setuid a.out binary. (CVE-2019-11191) As a hardening measure, this update disables a.out support. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: apparmor-profiles 2.10.95-0ubuntu2.11 python3-apparmor 2.10.95-0ubuntu2.11 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4008-2 https://ubuntu.com/security/notices/USN-4008-1 CVE-2019-11190 Package Information: https://launchpad.net/ubuntu/+source/apparmor/2.10.95-0ubuntu2.11 . The latest AppArmor upgrade in Ubuntu addresses vulnerabilities impacting system policies and overall stability alongside the updated kernel. Discover additional details here.. Ubuntu Security, AppArmor Update, System Policies, Security Patches. . LinuxSecurity.com Team
Jun 05, 2019
Ubuntu
89
security advisoryFedoraaccess controlFedora 26 SELinux-Policy Security Update: Access Control Fixes
More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=982578. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-88b6a06bce 2017-10-17 17:00:53.917466 --------------------------------------------------------------------------------Name : selinux-policy Product : Fedora 26 Version : 3.13.1 Release : 260.13.fc26 URL : https://github.com/OwlCyberDefense/refpolicy/wiki Summary : SELinux policy configuration Description : SELinux Base package for SELinux Reference Policy - modular. Based off of reference policy: Checked out revision 2.20091117 --------------------------------------------------------------------------------Update Information: More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=982578 --------------------------------------------------------------------------------References: [ 1 ] Bug #1497507 - Postfix (SMTP): SELinux is preventing smtpd from read, write access on the Datei inet.smtp. https://bugzilla.redhat.com/show_bug.cgi?id=1497507 [ 2 ] Bug #1491427 - SELinux is preventing postgres from unix_read, unix_write access on the shared memory Unknown. https://bugzilla.redhat.com/show_bug.cgi?id=1491427 [ 3 ] Bug #1487044 - SELinux is preventing systemd-logind from 'getattr' accesses on the file /dev/shm/PostgreSQL.188495196. https://bugzilla.redhat.com/show_bug.cgi?id=1487044 [ 4 ] Bug #1471545 - SElinux prevents postfix from reading /run/systemd/resolve/resolv.conf https://bugzilla.redhat.com/show_bug.cgi?id=1471545 [ 5 ] Bug #1436026 - selinux prevents postfix cleanup from accessing socket based non_smtpd_milters https://bugzilla.redhat.com/show_bug.cgi?id=1436026 [ 6 ] Bug #1398907 - postfix chroot-update has incorrect SELinux label https://bugzilla.redhat.com/show_bug.cgi?id=1398907 [ 7 ] Bug #1500820 - multiple 'systemd' AVC denials related to 'sysfs' https://bugzilla.redhat.com/show_bug.cgi?id=1500820 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade selinux-policy' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Oct 17, 2017
•Critical
Fedora
200
security advisorylow severitypolicy updateScientific Linux: Low Severity SELinux-Policy Bug Fix Update
Low: selinux-policy bug fix update. Date: Wed, 12 Jun 2013 11:36:42 -0500 Reply-To: Bonnie King Sender: Security Errata for Scientific Linux From: Bonnie King Subject: Security ERRATA Low: selinux-policy bug fix update on SL6.x i386/x86_64 Comments: To:
Jun 12, 2013
•Low
Scientific Linux
200
security advisorylow severitypolicy updateScientific Linux: 2012-11-12 Low Severity SELinux Policy Enhancements
Low: selinux-policy enhancement update. Date: Tue, 13 Nov 2012 08:14:09 -0600 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Low: selinux-policy enhancement update on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Low: selinux-policy enhancement update Issue date: 2012-11-12 This update adds the following enhancements: * Previously, SELinux was blocking the /usr/libexec/qemu-kvm utility during a migration of a virtual machine from Red Hat Enterprise Virtualization Manager. Consequently, such a migration attempt failed and AVC messages were returned. This update fixes the virt_use_fusefs boolean and adds the sanlock_use_fusefs boolean, thus allowing the migration to succeed in the described scenario. * When trying to start a virtual machine on a POSIX-compliant file system, SELinux denied the operation and returned AVC messages. This update amends the SELinux policy to allow the described scenario to succeed. This update has been placed in the security tree to avoid selinux bugs. SL6.x SRPMS: selinux-policy-3.7.19-155.el6_3.6.src.rpm i386: selinux-policy-3.7.19-155.el6_3.6.noarch.rpm selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm x86_64: selinux-policy-3.7.19-155.el6_3.6.noarch.rpm selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm . Improvement release for SELinux configuration aimed at fixing virtual machine transfer challenges on Scientific Linux.. SELinux Policy, Enhancement Update, Scientific Linux, Security Errata, Migration Fix. . Severity: Low. LinuxSecurity.com Team
Nov 13, 2012
•Low
Scientific Linux
200
security advisorypolicy updateservice errorScientific Linux: Errata 14-46-20 Low Severity SELinux-Policy Update
Low: selinux-policy enhancement update. Date: Thu, 8 Mar 2012 14:46:20 -0600 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Low: selinux-policy on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Low: selinux-policy enhancement update Issue date: 2012-03-07 This update fixes the following bugs: * An incorrect SELinux policy prevented the qpidd service from connecting to the AMQP (Advanced Message Queuing Protocol) port when the qpidd daemon was configured with Corosync clustering. These selinux-policy packages contain updated SELinux rules, which allow the qpidd service to be started correctly. * With SELinux in enforcing mode, an OpenMPI job submitted to the parallel universe environment failed on ssh keys generation. This happened because the ssh-keygen utility was not able to read from and write to the "/var/lib/condor/" directory". With this update, a new SELinux policy has been added for the "/var/lib/condor/" directory, which allows the ssh-keygen utility to read from and write to this directory.SL6.x SRPMS: selinux-policy-3.7.19-126.el6_2.10.src.rpm i386: selinux-policy-3.7.19-126.el6_2.10.noarch.rpm selinux-policy-doc-3.7.19-126.el6_2.10.noarch.rpm selinux-policy-minimum-3.7.19-126.el6_2.10.noarch.rpm selinux-policy-mls-3.7.19-126.el6_2.10.noarch.rpm selinux-policy-targeted-3.7.19-126.el6_2.10.noarch.rpm x86_64: selinux-policy-3.7.19-126.el6_2.10.noarch.rpm selinux-policy-doc-3.7.19-126.el6_2.10.noarch.rpm selinux-policy-minimum-3.7.19-126.el6_2.10.noarch.rpm selinux-policy-mls-3.7.19-126.el6_2.10.noarch.rpm selinux-policy-targeted-3.7.19-126.el6_2.10.noarch.rpm . SELinux configuration revised to resolve connectivity problems and access rights for OpenMPI tasks in Scientific Linux.. SELinux Policy Update, Scientific Linux Security, AMQP Service Fix. . Severity: Low. LinuxSecurity.com Team
Mar 08, 2012
•Low
Scientific Linux
200
security advisoryaccess controlpolicy updateScientific Linux: Low Errata 16-36-31 for SELinux Policy on SL6.x
Low: selinux-policy bug fix update. Date: Wed, 24 Aug 2011 16:36:31 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Low: selinux-policy on SL6.x i386/x86_64 Comments: To: "
Aug 24, 2011
•Low
Scientific Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!