Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 24 articles for you...
100
security advisorymoderatepatchSUSE Linux: 2025:20180-1 moderate: procps CVE-2023-4016 fix
* bsc#1236842 Cross-References: * CVE-2023-4016 . # Security update for procps Announcement ID: SUSE-SU-2025:20180-1 Release Date: 2025-04-08T07:59:48Z Rating: moderate References: * bsc#1236842 Cross-References: * CVE-2023-4016 CVSS scores: * CVE-2023-4016 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-4016 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for procps fixes the following issues: * Fixed regression introduced with the CVE-2023-4016 fix. The ps command segfaults when pid argument has a leading space (bsc#1236842). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-279=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * procps-debuginfo-3.3.17-5.1 * libprocps8-3.3.17-5.1 * procps-debugsource-3.3.17-5.1 * procps-3.3.17-5.1 * libprocps8-debuginfo-3.3.17-5.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4016.html * https://bugzilla.suse.com/show_bug.cgi?id=1236842 . Update for SUSE procps resolves CVE-2023-4016 regression, rating classified as moderate. Instructions available for applying the patch.. SUSE procps update, CVE-2023-4016, Linux security update, SUSE Linux patch. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
100
security advisorymoderatesecurity updateSUSE Linux Micro 6.0: 2025:20180-1 moderate: procps segfault issue
* bsc#1236842 Cross-References: * CVE-2023-4016 . # Security update for procps Announcement ID: SUSE-SU-2025:20180-1 Release Date: 2025-04-08T07:59:48Z Rating: moderate References: * bsc#1236842 Cross-References: * CVE-2023-4016 CVSS scores: * CVE-2023-4016 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-4016 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for procps fixes the following issues: * Fixed regression introduced with the CVE-2023-4016 fix. The ps command segfaults when pid argument has a leading space (bsc#1236842). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-279=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * procps-debugsource-3.3.17-5.1 * libprocps8-debuginfo-3.3.17-5.1 * libprocps8-3.3.17-5.1 * procps-debuginfo-3.3.17-5.1 * procps-3.3.17-5.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4016.html * https://bugzilla.suse.com/show_bug.cgi?id=1236842 . This security bulletin pertains to a notable upgrade for openSUSE Leap 15.3 aimed at resolving a segmentation fault issue within systemd utilities.. SUSE Linux, procps, security update, segfault, Linux patches. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
202
security advisoryupdatesoftware updateopenSUSE 2025:0741-1 Critical: procps segmentation fault issue
An update that solves one vulnerability and has one security fix can now be installed.. # Security update for procps Announcement ID: SUSE-SU-2025:0741-1 Release Date: 2025-02-28T10:17:02Z Rating: important References: * bsc#1214290 * bsc#1236842 Cross-References: * CVE-2023-4016 CVSS scores: * CVE-2023-4016 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-4016 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSEManager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for procps fixes the following issues: * Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space (bsc#1236842, bsc#1214290). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-741=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-741=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-741=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-741=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-741=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-741=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-741=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-741=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-741=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-741=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-741=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-741=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -tpatch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-741=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-741=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-741=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-741=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-741=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-741=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-741=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-741=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-741=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-741=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-741=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-741=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-741=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * openSUSE Leap 15.6 (noarch) * procps-lang-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 *libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 *procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 *libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Manager Proxy 4.3 (x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 *procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4016.html * https://bugzilla.suse.com/show_bug.cgi?id=1214290 * https://bugzilla.suse.com/show_bug.cgi?id=1236842 . Critical security patch released for procps resolves a segmentation fault vulnerability in openSUSE, bolstering overall system security.. openSUSE Security Update,procps Patch Release,Linux Software Fix. . Severity: Important. LinuxSecurity.com Team
Feb 28, 2025
•Important
OpenSUSE
100
security advisoryupdatesoftware updateSUSE 15.6 Important Advisory: procps segmentation fault exploit
* bsc#1214290 * bsc#1236842 Cross-References: * CVE-2023-4016 . # Security update for procps Announcement ID: SUSE-SU-2025:0741-1 Release Date: 2025-02-28T10:17:02Z Rating: important References: * bsc#1214290 * bsc#1236842 Cross-References: * CVE-2023-4016 CVSS scores: * CVE-2023-4016 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-4016 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 *SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for procps fixes the following issues: * Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space (bsc#1236842, bsc#1214290). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-741=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-741=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-741=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-741=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-741=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-741=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-741=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-741=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-741=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-741=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-741=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-741=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patchSUSE-SLE-Product-SLES-15-SP3-LTSS-2025-741=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-741=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-741=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-741=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-741=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-741=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-741=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-741=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-741=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-741=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-741=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-741=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-741=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * openSUSE Leap 15.6 (noarch) * procps-lang-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 *libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 *procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 *libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Manager Proxy 4.3 (x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 *procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * procps-devel-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * procps-3.3.17-150000.7.42.1 * procps-debugsource-3.3.17-150000.7.42.1 * procps-debuginfo-3.3.17-150000.7.42.1 * libprocps8-debuginfo-3.3.17-150000.7.42.1 * libprocps8-3.3.17-150000.7.42.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4016.html * https://bugzilla.suse.com/show_bug.cgi?id=1214290 * https://bugzilla.suse.com/show_bug.cgi?id=1236842 . SUSE has released an important security patch for procps, addressing segmentation violations triggered by an integer overflow vulnerability.. procps security update,SUSE vulnerabilities,important updates,security fixes. . Severity: Important. LinuxSecurity.com Team
Feb 28, 2025
•Important
SuSE
100
security advisoryimportantinteger overflowSUSE 12 SP5: 2025:0725-1 Important: procps Integer Overflow Fix
* bsc#1214290 * bsc#1236842 Cross-References: * CVE-2023-4016 . # Security update for procps Announcement ID: SUSE-SU-2025:0725-1 Release Date: 2025-02-26T13:36:47Z Rating: important References: * bsc#1214290 * bsc#1236842 Cross-References: * CVE-2023-4016 CVSS scores: * CVE-2023-4016 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-4016 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for procps fixes the following issues: * Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space (bsc#1236842, bsc#1214290). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2025-725=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-725=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * procps-devel-3.3.9-11.33.1 * libprocps3-debuginfo-3.3.9-11.33.1 * procps-3.3.9-11.33.1 * procps-debugsource-3.3.9-11.33.1 * libprocps3-3.3.9-11.33.1 * procps-debuginfo-3.3.9-11.33.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * procps-devel-3.3.9-11.33.1 * libprocps3-debuginfo-3.3.9-11.33.1 * procps-3.3.9-11.33.1 *procps-debugsource-3.3.9-11.33.1 * libprocps3-3.3.9-11.33.1 * procps-debuginfo-3.3.9-11.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4016.html * https://bugzilla.suse.com/show_bug.cgi?id=1214290 * https://bugzilla.suse.com/show_bug.cgi?id=1236842 . Critical security patch released for procps to resolve severe integer overflow vulnerabilities on SUSE platforms. Ensure immediate installation for enhanced protection.. procps Security, SUSE Important Advisory, Integer Overflow Fix. . Severity: Important. LinuxSecurity.com Team
Feb 26, 2025
•Important
SuSE
100
security advisorymoderate severitypatchSUSE 5.1 Toolbox Security Update SUSE-CU-2023:2863-1 Moderate Threats
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sle-micro/5.1/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2863-1 Container Tags : suse/sle-micro/5.1/toolbox:12.1 , suse/sle-micro/5.1/toolbox:12.1-2.2.451 , suse/sle-micro/5.1/toolbox:latest Container Release : 2.2.451 Severity : moderate Type : security References : 1103893 1112183 1158763 1210740 1213231 1213557 1213673 1214025 1214071 1214290 CVE-2023-4016 CVE-2023-4156 ----------------------------------------------------------------- The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3440-1 Released: Mon Aug 28 08:57:10 2023 Summary: Security update for gawk Type: security Severity: low References: 1214025,CVE-2023-4156 This update for gawk fixes the following issues: - CVE-2023-4156: Fix a heap out of bound read by validating the index into argument list. (bsc#1214025) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3466-1 Released: Tue Aug 29 07:33:16 2023 Summary: Recommended update for icu Type: recommended Severity: moderate References: 1103893,1112183 This update for icu fixes the following issues: - Japanese era Reiwa (bsc#1112183, bsc#1103893, fate570, fate#325570, fate#325419) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3472-1 Released: Tue Aug 29 10:55:16 2023 Summary: Security update for procps Type: security Severity: low References: 1214290,CVE-2023-4016 This update for procps fixes the following issues: - CVE-2023-4016: Fixed ps buffer overflow(bsc#1214290). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3487-1 Released: Tue Aug 29 14:28:35 2023 Summary: Recommended update for lvm2 Type: recommended Severity: moderate References: 1214071 This update for lvm2 fixes the following issues: - blkdeactivate calls wrong mountpoint cmd (bsc#1214071) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3515-1 Released: Fri Sep 1 15:54:25 2023 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate References: 1158763,1210740,1213231,1213557,1213673 This update for libzypp, zypper fixes the following issues: - Fix occasional isue with downloading very small files (bsc#1213673) - Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231) - Fix OES synchronization issues when cookie file has mode 0600 (bsc#1158763) - Don't cleanup orphaned dirs if read-only mode was promised (bsc#1210740) - Revised explanation of --force-resolution in man page (bsc#1213557) - Print summary hint if policies were violated due to --force-resolution (bsc#1213557) The following package changes have been done: - gawk-4.2.1-150000.3.3.1 updated - libdevmapper1_03-2.03.05_1.02.163-150200.8.52.1 updated - libicu-suse65_1-65.1-150200.4.8.1 updated - libicu65_1-ledata-65.1-150200.4.8.1 updated - libprocps7-3.3.15-150000.7.34.1 updated - libzypp-17.31.20-150200.75.1 updated - procps-3.3.15-150000.7.34.1 updated - zypper-1.14.63-150200.59.1 updated - container:sles15-image-15.0.0-17.20.177 updated . Debian upgrades for debian/bullseye/11.6/consoles feature critical fixes for essential utilities such as sed and net-tools.. SUSE Container Update, Toolbox Security, Gawk Update, Procps Patch. . LinuxSecurity.com Team
Sep 06, 2023
SuSE
100
security advisorymoderateopensslSUSE: 2023:2858-1 Moderate: Update For Toolbox Container Security
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sle-micro/5.3/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2858-1 Container Tags : suse/sle-micro/5.3/toolbox:12.1 , suse/sle-micro/5.3/toolbox:12.1-5.2.201 , suse/sle-micro/5.3/toolbox:latest Container Release : 5.2.201 Severity : moderate Type : security References : 1103893 1112183 1158763 1186606 1194609 1201519 1204844 1208194 1209741 1210702 1210740 1211576 1212434 1213185 1213231 1213517 1213557 1213575 1213673 1213853 1213873 1214025 1214071 1214290 CVE-2023-3817 CVE-2023-4016 CVE-2023-4156 ----------------------------------------------------------------- The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3397-1 Released: Wed Aug 23 18:35:56 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1213517,1213853,CVE-2023-3817 This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) - Don't pass zero length input to EVP_Cipher because s390x assembler optimized AES cannot handle zero size. (bsc#1213517) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3410-1 Released: Thu Aug 24 06:56:32 2023 Summary: Recommended update for audit Type: recommended Severity: moderate References: 1201519,1204844 This update for audit fixes the following issues: - Create symbolic link from /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519) - Fix rules not loaded when restarting auditd.service(bsc#1204844) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3440-1 Released: Mon Aug 28 08:57:10 2023 Summary: Security update for gawk Type: security Severity: low References: 1214025,CVE-2023-4156 This update for gawk fixes the following issues: - CVE-2023-4156: Fix a heap out of bound read by validating the index into argument list. (bsc#1214025) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3451-1 Released: Mon Aug 28 12:15:22 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate References: 1186606,1194609,1208194,1209741,1210702,1211576,1212434,1213185,1213575,1213873 This update for systemd fixes the following issues: - Fix reboot and shutdown issues by getting only active MD arrays (bsc#1211576, bsc#1212434, bsc#1213575) - Decrease devlink priority for iso disks (bsc#1213185) - Do not ignore mount point paths longer than 255 characters (bsc#1208194) - Refuse hibernation if there's no possible way to resume (bsc#1186606) - Update 'korean' and 'arabic' keyboard layouts (bsc#1210702) - Drop some entries no longer needed by YaST (bsc#1194609) - The 'systemd --user' instances get their own session keyring instead of the user default one (bsc#1209741) - Dynamically allocate receive buffer to handle large amount of mounts (bsc#1213873) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3466-1 Released: Tue Aug 29 07:33:16 2023 Summary: Recommended update for icu Type: recommended Severity: moderate References: 1103893,1112183 This update for icu fixes the following issues: - Japanese era Reiwa (bsc#1112183, bsc#1103893, fate570, fate#325570, fate#325419) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3472-1 Released: Tue Aug 29 10:55:16 2023 Summary: Security update for procps Type: security Severity: low References: 1214290,CVE-2023-4016 This update for procps fixes the following issues: - CVE-2023-4016: Fixed ps buffer overflow (bsc#1214290). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3486-1 Released: Tue Aug 29 14:25:23 2023 Summary: Recommended update for lvm2 Type: recommended Severity: moderate References: 1214071 This update for lvm2 fixes the following issues: - blkdeactivate calls wrong mountpoint cmd (bsc#1214071) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3514-1 Released: Fri Sep 1 15:48:52 2023 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate References: 1158763,1210740,1213231,1213557,1213673 This update for libzypp, zypper fixes the following issues: - Fix occasional isue with downloading very small files (bsc#1213673) - Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231) - Fix OES synchronization issues when cookie file has mode 0600 (bsc#1158763) - Don't cleanup orphaned dirs if read-only mode was promised (bsc#1210740) - Revised explanation of --force-resolution in man page (bsc#1213557) - Print summary hint if policies were violated due to --force-resolution (bsc#1213557) The following package changes have been done: - gawk-4.2.1-150000.3.3.1 updated - libaudit1-3.0.6-150400.4.13.1 updated - libdevmapper1_03-2.03.05_1.02.163-150400.188.1 updated - libicu-suse65_1-65.1-150200.4.8.1 updated - libicu65_1-ledata-65.1-150200.4.8.1 updated - libopenssl1_1-hmac-1.1.1l-150400.7.53.1 updated - libopenssl1_1-1.1.1l-150400.7.53.1 updated - libprocps7-3.3.15-150000.7.34.1 updated - libsystemd0-249.16-150400.8.33.1 updated - libudev1-249.16-150400.8.33.1 updated - libzypp-17.31.20-150400.3.40.1 updated - openssl-1_1-1.1.1l-150400.7.53.1 updated - procps-3.3.15-150000.7.34.1 updated - systemd-249.16-150400.8.33.1 updated - zypper-1.14.63-150400.3.29.1 updated - container:sles15-image-15.0.0-27.14.94 updated . SUSE MicroOSContainer Update Notice for suse/microos/5.3/cli-toolbox provides enhancements for gnutls, sed, and additional packages.. SUSE Container Update, Toolbox Security Patch, Openssl Issues, Systemd Fix. . LinuxSecurity.com Team
Sep 06, 2023
SuSE
100
security advisoryDoSimportantSUSE: 2023:2817-1 Important Security Update for krb5 and procps
The container suse/sles12sp5 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles12sp5 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2817-1 Container Tags : suse/sles12sp5:6.5.507 , suse/sles12sp5:latest Container Release : 6.5.507 Severity : important Type : security References : 1214054 1214248 1214290 CVE-2023-36054 CVE-2023-4016 ----------------------------------------------------------------- The container suse/sles12sp5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3398-1 Released: Wed Aug 23 18:48:55 2023 Summary: Security update for krb5 Type: security Severity: important References: 1214054,CVE-2023-36054 This update for krb5 fixes the following issues: - CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3405-1 Released: Wed Aug 23 19:17:49 2023 Summary: Security update for ca-certificates-mozilla Type: security Severity: important References: 1214248 This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248) Added: - Atos TrustedRoot Root CA ECC G2 2020 - Atos TrustedRoot Root CA ECC TLS 2021 - Atos TrustedRoot Root CA RSA G2 2020 - Atos TrustedRoot Root CA RSA TLS 2021 - BJCA Global Root CA1 - BJCA Global Root CA2 - LAWtrust Root CA2 (4096) - Sectigo Public Email Protection Root E46 - Sectigo Public Email Protection Root R46 - Sectigo Public Server Authentication Root E46 - Sectigo Public Server Authentication Root R46 - SSL.com Client ECC Root CA 2022 - SSL.com Client RSA Root CA 2022 - SSL.com TLS ECC Root CA 2022 - SSL.com TLS RSA RootCA 2022 Removed CAs: - Chambers of Commerce Root - E-Tugra Certification Authority - E-Tugra Global Root CA ECC v3 - E-Tugra Global Root CA RSA v3 - Hongkong Post Root CA 1 ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3471-1 Released: Tue Aug 29 10:53:48 2023 Summary: Security update for procps Type: security Severity: low References: 1214290,CVE-2023-4016 This update for procps fixes the following issues: - CVE-2023-4016: Fixed ps buffer overflow (bsc#1214290). The following package changes have been done: - ca-certificates-mozilla-2.62-12.43.1 updated - krb5-1.12.5-40.52.1 updated - libprocps3-3.3.9-11.27.1 updated - procps-3.3.9-11.27.1 updated . The SUSE Container Announcement SUSE-CU-2023:2817-2 features critical security patches for openldap and bash updates.. SUSE Container Update,SUSE Security,Patches,DoS Attack,Process Management. . Severity: Important. LinuxSecurity.com Team
Sep 02, 2023
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!