Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 21 articles for you...
202
security advisoryimportantmemory leakopenSUSE Leap: 2025:1509-1 important: libsoup2 memory issues
An update that solves eight vulnerabilities can now be installed.. # Security update for libsoup2 Announcement ID: SUSE-SU-2025:1509-1 Release Date: 2025-05-07T14:37:39Z Rating: important References: * bsc#1240750 * bsc#1240752 * bsc#1240756 * bsc#1240757 * bsc#1241164 * bsc#1241222 * bsc#1241686 * bsc#1241688 Cross-References: * CVE-2025-2784 * CVE-2025-32050 * CVE-2025-32052 * CVE-2025-32053 * CVE-2025-32907 * CVE-2025-32914 * CVE-2025-46420 * CVE-2025-46421 CVSS scores: * CVE-2025-2784 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-2784 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2025-2784 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2025-32050 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-32050 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-32050 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-32052 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-32052 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-32052 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-32053 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-32053 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-32053 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-32907 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-32907 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-32907 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-32914 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-32914 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2025-46420 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-46420 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-46420 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-46421 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-46421 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves eight vulnerabilities can now be installed. ## Description: This update for libsoup2 fixes the following issues: * CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) * CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) * CVE-2025-32052: Fixed heap buffer overflow in sniff_unknown() (bsc#1240756) * CVE-2025-32053: Fixed heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757) * CVE-2025-32907: Fixed excessive memory consumption in server when client requests a large amountof overlapping ranges in a single HTTP request (bsc#1241222) * CVE-2025-32914: Fixed out of bounds read in `soup_multipart_new_from_message()` (bsc#1241164) * CVE-2025-46420: Fixed memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686) * CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-1509=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-1509=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1509=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1509=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1509=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1509=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1509=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1509=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1509=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1509=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1509=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1509=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1509=1 * SUSE LinuxEnterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1509=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1509=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1509=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1509=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Manager Proxy 4.3 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Manager Server 4.3 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * openSUSE Leap 15.4 (x86_64) * libsoup-2_4-1-32bit-2.74.2-150400.3.6.1 * libsoup-2_4-1-32bit-debuginfo-2.74.2-150400.3.6.1 * libsoup2-devel-32bit-2.74.2-150400.3.6.1 * openSUSE Leap 15.4(noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-2_4-1-64bit-2.74.2-150400.3.6.1 * libsoup-2_4-1-64bit-debuginfo-2.74.2-150400.3.6.1 * libsoup2-devel-64bit-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsoup-2_4-1-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsoup-2_4-1-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsoup-2_4-1-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsoup-2_4-1-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15SP4 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Server for SAPApplications 15 SP4 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsoup-2_4-1-debuginfo-2.74.2-150400.3.6.1 * libsoup-2_4-1-2.74.2-150400.3.6.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.6.1 * libsoup2-debugsource-2.74.2-150400.3.6.1 * libsoup2-devel-2.74.2-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libsoup2-lang-2.74.2-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2784.html * https://www.suse.com/security/cve/CVE-2025-32050.html * https://www.suse.com/security/cve/CVE-2025-32052.html * https://www.suse.com/security/cve/CVE-2025-32053.html * https://www.suse.com/security/cve/CVE-2025-32907.html * https://www.suse.com/security/cve/CVE-2025-32914.html * https://www.suse.com/security/cve/CVE-2025-46420.html * https://www.suse.com/security/cve/CVE-2025-46421.html * https://bugzilla.suse.com/show_bug.cgi?id=1240750 * https://bugzilla.suse.com/show_bug.cgi?id=1240752 * https://bugzilla.suse.com/show_bug.cgi?id=1240756 * https://bugzilla.suse.com/show_bug.cgi?id=1240757 * https://bugzilla.suse.com/show_bug.cgi?id=1241164 * https://bugzilla.suse.com/show_bug.cgi?id=1241222 * https://bugzilla.suse.com/show_bug.cgi?id=1241686 * https://bugzilla.suse.com/show_bug.cgi?id=1241688 . The latest update to libsoup2 for openSUSE addresses critical issues like memory leaks and buffer overflows, improving stability and security for users.. libsoup2 update, openSUSE security, memory leak fix, security vulnerabilities. . Severity: Important. LinuxSecurity.com Team
May 07, 2025
•Important
OpenSUSE
100
security advisorysecurity updatecriticalSUSE: 2025:0489-1 important: Linux Kernel Live Patching Update
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993 . # Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) Announcement ID: SUSE-SU-2025:0489-1 Release Date: 2025-02-12T19:03:55Z Rating: important References: * bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993 Cross-References: * CVE-2022-48912 * CVE-2022-48923 * CVE-2024-45016 * CVE-2024-47684 CVSS scores: * CVE-2022-48912 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48923 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2022-48923 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48923 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-45016 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-47684 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-47684 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-47684 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for theLinux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: * CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). * CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641) * CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662) * CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-489=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-489=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-496=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2025-496=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_28-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_125-default-debuginfo-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_125-default-6-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_28-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_125-default-debuginfo-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_125-default-6-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_10-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_49-default-14-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_10-debugsource-14-150500.2.1 *kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_49-default-14-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48912.html * https://www.suse.com/security/cve/CVE-2022-48923.html * https://www.suse.com/security/cve/CVE-2024-45016.html * https://www.suse.com/security/cve/CVE-2024-47684.html * https://bugzilla.suse.com/show_bug.cgi?id=1229644 * https://bugzilla.suse.com/show_bug.cgi?id=1229663 * https://bugzilla.suse.com/show_bug.cgi?id=1230998 * https://bugzilla.suse.com/show_bug.cgi?id=1231993 . Critical enhancements rolled out for the Linux Kernel targeting various vulnerabilities, complete with guidance for users on applying the necessary patches.. SUSE Linux Kernel Update, Security Advisory, Live Patching Issues. . Severity: Important. LinuxSecurity.com Team
Feb 12, 2025
•Important
SuSE
100
security advisoryimportantserver patchSUSE 12 SP5: 2024:3820-1 Important: Kernel Issues Fixed
* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1222685 * bsc#1223059 . # Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5) Announcement ID: SUSE-SU-2024:3820-1 Release Date: 2024-10-30T17:34:25Z Rating: important References: * bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1222685 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225819 * bsc#1226325 * bsc#1228573 Cross-References: * CVE-2021-46955 * CVE-2021-47378 * CVE-2021-47383 * CVE-2022-48651 * CVE-2023-1829 * CVE-2023-52752 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev-> mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha-> vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb-> mac_header (bsc#1223514). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2024-3820=1 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_201-default-9-8.10.1 ## References: *https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 *https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 . Essential safety patch for Linux Kernel Live Update 54 addresses 20 vulnerabilities in SUSE Enterprise 12 SP5, maintaining system integrity.. Linux Kernel Update, Live Patching Fixes, Kernel Security Update. . Severity: Important. LinuxSecurity.com Team
Oct 30, 2024
•Important
SuSE
100
security advisoryimportantserver patchSUSE: 2024:2413-1 Important: Tomcat10 Improper Handling
* bsc#1227399 Cross-References: * CVE-2024-34750 . # Security update for tomcat10 Announcement ID: SUSE-SU-2024:2413-1 Rating: important References: * bsc#1227399 Cross-References: * CVE-2024-34750 CVSS scores: * CVE-2024-34750 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP5 * Web and Scripting Module 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for tomcat10 fixes the following issues: * CVE-2024-34750: Fixed an improper handling of exceptional conditions (bsc#1227399). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2413=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2413=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-2413=1 * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2024-2413=1 ## Package List: * openSUSE Leap 15.5 (noarch) * tomcat10-admin-webapps-10.1.25-150200.5.25.1 * tomcat10-servlet-6_0-api-10.1.25-150200.5.25.1 * tomcat10-10.1.25-150200.5.25.1 * tomcat10-lib-10.1.25-150200.5.25.1 * tomcat10-docs-webapp-10.1.25-150200.5.25.1 * tomcat10-jsp-3_1-api-10.1.25-150200.5.25.1 * tomcat10-jsvc-10.1.25-150200.5.25.1 * tomcat10-embed-10.1.25-150200.5.25.1 * tomcat10-webapps-10.1.25-150200.5.25.1 * tomcat10-el-5_0-api-10.1.25-150200.5.25.1 * openSUSE Leap 15.6 (noarch) * tomcat10-admin-webapps-10.1.25-150200.5.25.1 * tomcat10-servlet-6_0-api-10.1.25-150200.5.25.1 * tomcat10-10.1.25-150200.5.25.1 * tomcat10-lib-10.1.25-150200.5.25.1 * tomcat10-docs-webapp-10.1.25-150200.5.25.1 * tomcat10-doc-10.1.25-150200.5.25.1 * tomcat10-jsp-3_1-api-10.1.25-150200.5.25.1 * tomcat10-jsvc-10.1.25-150200.5.25.1 * tomcat10-embed-10.1.25-150200.5.25.1 * tomcat10-webapps-10.1.25-150200.5.25.1 * tomcat10-el-5_0-api-10.1.25-150200.5.25.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat10-admin-webapps-10.1.25-150200.5.25.1 * tomcat10-servlet-6_0-api-10.1.25-150200.5.25.1 * tomcat10-10.1.25-150200.5.25.1 * tomcat10-lib-10.1.25-150200.5.25.1 * tomcat10-jsp-3_1-api-10.1.25-150200.5.25.1 * tomcat10-webapps-10.1.25-150200.5.25.1 * tomcat10-el-5_0-api-10.1.25-150200.5.25.1 * Web and Scripting Module 15-SP6 (noarch) * tomcat10-admin-webapps-10.1.25-150200.5.25.1 * tomcat10-servlet-6_0-api-10.1.25-150200.5.25.1 * tomcat10-10.1.25-150200.5.25.1 * tomcat10-lib-10.1.25-150200.5.25.1 * tomcat10-jsp-3_1-api-10.1.25-150200.5.25.1 * tomcat10-webapps-10.1.25-150200.5.25.1 * tomcat10-el-5_0-api-10.1.25-150200.5.25.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34750.html * https://bugzilla.suse.com/show_bug.cgi?id=1227399 . Important new tomcat10 release tackles vulnerabilities on openSUSE systems, promoting enhanced security for server administration and workflows.. openSUSE Security Update, tomcat10 Patch, Server Maintenance. . Severity: Important. LinuxSecurity.com Team
Jul 11, 2024
•Important
SuSE
100
security advisorykernel updatecriticalSUSE: 2024:1787-1 Important: Kernel Security Fixes Overview
* bsc#1223858 * bsc#1224169 * bsc#1224340 Affected Products: . # Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:1787-1 Rating: important References: * bsc#1223858 * bsc#1224169 * bsc#1224340 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * Legacy Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that has three security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. This update fixes a regression with kerberized nfs4 shares in the previous update (bsc#1223858). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1787=1 openSUSE-SLE-15.5-2024-1787=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1787=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1787=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1787=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-1787=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1787=1 Please note that this is the initialkernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-1787=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1787=1 ## Package List: * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (noarch) * kernel-source-vanilla-5.14.21-150500.55.65.1 * kernel-macros-5.14.21-150500.55.65.1 * kernel-docs-html-5.14.21-150500.55.65.1 * kernel-source-5.14.21-150500.55.65.1 * kernel-devel-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (ppc64le x86_64) * kernel-debug-devel-5.14.21-150500.55.65.1 * kernel-debug-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-debug-debugsource-5.14.21-150500.55.65.1 * kernel-debug-debuginfo-5.14.21-150500.55.65.1 * kernel-debug-livepatch-devel-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (x86_64) * kernel-debug-vdso-5.14.21-150500.55.65.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.65.1 * kernel-default-vdso-5.14.21-150500.55.65.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.65.1 * kernel-debug-vdso-debuginfo-5.14.21-150500.55.65.1 * kernel-default-vdso-debuginfo-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-5.14.21-150500.55.65.1 * kernel-kvmsmall-debugsource-5.14.21-150500.55.65.1 * kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1 * kernel-kvmsmall-livepatch-devel-5.14.21-150500.55.65.1 * kernel-kvmsmall-devel-5.14.21-150500.55.65.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-default-base-rebuild-5.14.21-150500.55.65.1.150500.6.29.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-obs-qa-5.14.21-150500.55.65.1 *cluster-md-kmp-default-debuginfo-5.14.21-150500.55.65.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.65.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-livepatch-devel-5.14.21-150500.55.65.1 * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.65.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.65.1 * kernel-obs-build-debugsource-5.14.21-150500.55.65.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.65.1 * gfs2-kmp-default-5.14.21-150500.55.65.1 * reiserfs-kmp-default-5.14.21-150500.55.65.1 * kernel-default-extra-5.14.21-150500.55.65.1 * dlm-kmp-default-5.14.21-150500.55.65.1 * kernel-default-devel-5.14.21-150500.55.65.1 * kselftests-kmp-default-5.14.21-150500.55.65.1 * kernel-obs-build-5.14.21-150500.55.65.1 * kernel-default-livepatch-5.14.21-150500.55.65.1 * kernel-default-optional-5.14.21-150500.55.65.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.65.1 * cluster-md-kmp-default-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.65.1 * ocfs2-kmp-default-5.14.21-150500.55.65.1 * kernel-syms-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_65-default-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_55_65-default-debuginfo-1-150500.11.3.1 * kernel-livepatch-SLE15-SP5_Update_14-debugsource-1-150500.11.3.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.65.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.65.1 * openSUSELeap 15.5 (nosrc) * dtb-aarch64-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64) * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * kernel-64kb-extra-5.14.21-150500.55.65.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * kernel-64kb-debugsource-5.14.21-150500.55.65.1 * dtb-amd-5.14.21-150500.55.65.1 * dtb-exynos-5.14.21-150500.55.65.1 * dtb-apple-5.14.21-150500.55.65.1 * dtb-broadcom-5.14.21-150500.55.65.1 * kernel-64kb-debuginfo-5.14.21-150500.55.65.1 * dtb-marvell-5.14.21-150500.55.65.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * reiserfs-kmp-64kb-5.14.21-150500.55.65.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.65.1 * ocfs2-kmp-64kb-5.14.21-150500.55.65.1 * dlm-kmp-64kb-5.14.21-150500.55.65.1 * kernel-64kb-optional-5.14.21-150500.55.65.1 * dtb-nvidia-5.14.21-150500.55.65.1 * dtb-sprd-5.14.21-150500.55.65.1 * kernel-64kb-devel-5.14.21-150500.55.65.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * dtb-xilinx-5.14.21-150500.55.65.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.65.1 * dtb-amazon-5.14.21-150500.55.65.1 * dtb-mediatek-5.14.21-150500.55.65.1 * dtb-lg-5.14.21-150500.55.65.1 * dtb-amlogic-5.14.21-150500.55.65.1 * dtb-rockchip-5.14.21-150500.55.65.1 * cluster-md-kmp-64kb-5.14.21-150500.55.65.1 * dtb-allwinner-5.14.21-150500.55.65.1 * kselftests-kmp-64kb-5.14.21-150500.55.65.1 * dtb-hisilicon-5.14.21-150500.55.65.1 * dtb-freescale-5.14.21-150500.55.65.1 * gfs2-kmp-64kb-5.14.21-150500.55.65.1 * dtb-socionext-5.14.21-150500.55.65.1 * dtb-altera-5.14.21-150500.55.65.1 * dtb-renesas-5.14.21-150500.55.65.1 * dtb-arm-5.14.21-150500.55.65.1 * dtb-apm-5.14.21-150500.55.65.1 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.65.1 * dtb-qcom-5.14.21-150500.55.65.1 *kernel-64kb-livepatch-devel-5.14.21-150500.55.65.1 * dtb-cavium-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-64kb-devel-5.14.21-150500.55.65.1 * kernel-64kb-debuginfo-5.14.21-150500.55.65.1 * kernel-64kb-debugsource-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-devel-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (noarch) * kernel-macros-5.14.21-150500.55.65.1 * kernel-devel-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.65.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.65.1 * Development Tools Module 15-SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.65.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-5.14.21-150500.55.65.1 * kernel-obs-build-debugsource-5.14.21-150500.55.65.1 *kernel-syms-5.14.21-150500.55.65.1 * Development Tools Module 15-SP5 (noarch) * kernel-source-5.14.21-150500.55.65.1 * Legacy Module 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.65.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.65.1 * reiserfs-kmp-default-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_65-default-1-150500.11.3.1 * kernel-default-livepatch-devel-5.14.21-150500.55.65.1 * kernel-livepatch-SLE15-SP5_Update_14-debugsource-1-150500.11.3.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-livepatch-5_14_21-150500_55_65-default-debuginfo-1-150500.11.3.1 * kernel-default-livepatch-5.14.21-150500.55.65.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-debugsource-5.14.21-150500.55.65.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.65.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.65.1 * gfs2-kmp-default-5.14.21-150500.55.65.1 * ocfs2-kmp-default-5.14.21-150500.55.65.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.65.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.65.1 * dlm-kmp-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) *kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-default-extra-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.65.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223858 * https://bugzilla.suse.com/show_bug.cgi?id=1224169 * https://bugzilla.suse.com/show_bug.cgi?id=1224340 . Essential kernel security patches for openSUSE offer solutions and setup instructions for various components. Ensure your system's safety!. SUSE Linux Kernel Update, Security Announcement, Critical Patching. . Severity: Important. LinuxSecurity.com Team
May 27, 2024
•Important
SuSE
100
security advisoryimportantSUSESUSE: 2024:1262-2 critical: kernel vulnerabilities addressed
* bsc#1222309 * bsc#1222310 * bsc#1222311 * bsc#1222312 * bsc#1222442 . # Security update for xorg-x11-server Announcement ID: SUSE-SU-2024:1261-1 Rating: important References: * bsc#1222309 * bsc#1222310 * bsc#1222311 * bsc#1222312 * bsc#1222442 Cross-References: * CVE-2024-31080 * CVE-2024-31081 * CVE-2024-31082 * CVE-2024-31083 CVSS scores: * CVE-2024-31080 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-31081 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-31082 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2024-31083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves four vulnerabilities and has one security fix can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length (bsc#1222309). * CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply (bsc#1222310). * CVE-2024-31082: FixedProcAppleDRICreatePixmap to use unswapped length to send reply (bsc#1222311). * CVE-2024-31083: Fixed refcounting of glyphs during ProcRenderAddGlyphs (bsc#1222312). Other fixes: \- Fixed regression for security fix for CVE-2024-31083 when using Android Studio (bnc#1222442) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1261=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1261=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1261=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1261=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1261=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1261=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1261=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1261=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1261=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * xorg-x11-server-sdk-1.20.3-150200.22.5.96.1 * xorg-x11-server-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 *xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.96.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * xorg-x11-server-sdk-1.20.3-150200.22.5.96.1 * xorg-x11-server-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.96.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-wayland-1.20.3-150200.22.5.96.1 * xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.96.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-sdk-1.20.3-150200.22.5.96.1 * xorg-x11-server-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.96.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-sdk-1.20.3-150200.22.5.96.1 * xorg-x11-server-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.96.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * xorg-x11-server-sdk-1.20.3-150200.22.5.96.1 * xorg-x11-server-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.96.1 * SUSE Linux EnterpriseServer for SAP Applications 15 SP3 (ppc64le x86_64) * xorg-x11-server-sdk-1.20.3-150200.22.5.96.1 * xorg-x11-server-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.96.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-wayland-1.20.3-150200.22.5.96.1 * xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.96.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * xorg-x11-server-sdk-1.20.3-150200.22.5.96.1 * xorg-x11-server-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-1.20.3-150200.22.5.96.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.96.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.96.1 * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.96.1 ## References: * https://www.suse.com/security/cve/CVE-2024-31080.html * https://www.suse.com/security/cve/CVE-2024-31081.html * https://www.suse.com/security/cve/CVE-2024-31082.html * https://www.suse.com/security/cve/CVE-2024-31083.html * https://bugzilla.suse.com/show_bug.cgi?id=1222309 * https://bugzilla.suse.com/show_bug.cgi?id=1222310 * https://bugzilla.suse.com/show_bug.cgi?id=1222311 * https://bugzilla.suse.com/show_bug.cgi?id=1222312 * https://bugzilla.suse.com/show_bug.cgi?id=1222442 . Essential xorg-x11-server patch addresses various significant vulnerabilities to uphold system security. SUSE Update, Xorg Security, Software Patch, System Integrity. . Severity: Important. LinuxSecurity.com Team
Apr 12, 2024
•Important
SuSE
100
security advisorycritical issuesoftware updateSUSE Linux Enterprise 12 SP5: 2024:1263-1 critical: Xorg DoS issue
* bsc#1222312 * bsc#1222442 Cross-References: * CVE-2024-31083 . # Security update for xorg-x11-server Announcement ID: SUSE-SU-2024:1263-1 Rating: important References: * bsc#1222312 * bsc#1222442 Cross-References: * CVE-2024-31083 CVSS scores: * CVE-2024-31083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Software Development Kit 12 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * Fixed regression for security fix (bsc#1222312) for CVE-2024-31083 when using Android Studio (bsc#1222442) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1263=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1263=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1263=1 * SUSE Linux Enterprise Software Development Kit 12 SP5 zypper in -t patch SUSE-SLE-SDK-12-SP5-2024-1263=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.19.6-10.74.1 * xorg-x11-server-1.19.6-10.74.1 * xorg-x11-server-debuginfo-1.19.6-10.74.1 * xorg-x11-server-extra-1.19.6-10.74.1 * xorg-x11-server-debugsource-1.19.6-10.74.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) *xorg-x11-server-extra-debuginfo-1.19.6-10.74.1 * xorg-x11-server-1.19.6-10.74.1 * xorg-x11-server-debuginfo-1.19.6-10.74.1 * xorg-x11-server-extra-1.19.6-10.74.1 * xorg-x11-server-debugsource-1.19.6-10.74.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-1.19.6-10.74.1 * xorg-x11-server-1.19.6-10.74.1 * xorg-x11-server-debuginfo-1.19.6-10.74.1 * xorg-x11-server-extra-1.19.6-10.74.1 * xorg-x11-server-debugsource-1.19.6-10.74.1 * SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-sdk-1.19.6-10.74.1 * xorg-x11-server-debuginfo-1.19.6-10.74.1 * xorg-x11-server-debugsource-1.19.6-10.74.1 ## References: * https://www.suse.com/security/cve/CVE-2024-31083.html * https://bugzilla.suse.com/show_bug.cgi?id=1222312 * https://bugzilla.suse.com/show_bug.cgi?id=1222442 . This patch for xorg-x11-server resolves critical security issues for SUSE. Further information below.. SUSE Linux Enterprise, Xorg update, important security advisory. . Severity: Critical. LinuxSecurity.com Team
Apr 12, 2024
•Critical
SuSE
100
security advisorymoderateserver patchSUSE: 2024:0264-1 Moderate: Xen Security Patch CVE-2023-46839
* bsc#1218851 Cross-References: * CVE-2023-46839 . # Security update for xen Announcement ID: SUSE-SU-2024:0264-1 Rating: moderate References: * bsc#1218851 Cross-References: * CVE-2023-46839 CVSS scores: * CVE-2023-46839 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-264=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-264=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-264=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-264=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-264=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-264=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patchSUSE-SUSE-MicroOS-5.2-2024-264=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-264=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * xen-tools-domU-debuginfo-4.14.6_10-150300.3.63.1 * xen-libs-4.14.6_10-150300.3.63.1 * xen-tools-domU-4.14.6_10-150300.3.63.1 * xen-debugsource-4.14.6_10-150300.3.63.1 * xen-devel-4.14.6_10-150300.3.63.1 * xen-libs-debuginfo-4.14.6_10-150300.3.63.1 * openSUSE Leap 15.3 (x86_64) * xen-libs-32bit-debuginfo-4.14.6_10-150300.3.63.1 * xen-libs-32bit-4.14.6_10-150300.3.63.1 * openSUSE Leap 15.3 (aarch64 x86_64) * xen-tools-4.14.6_10-150300.3.63.1 * xen-tools-debuginfo-4.14.6_10-150300.3.63.1 * xen-doc-html-4.14.6_10-150300.3.63.1 * xen-4.14.6_10-150300.3.63.1 * openSUSE Leap 15.3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_10-150300.3.63.1 * openSUSE Leap 15.3 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.14.6_10-150300.3.63.1 * xen-libs-64bit-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * xen-tools-domU-debuginfo-4.14.6_10-150300.3.63.1 * xen-libs-4.14.6_10-150300.3.63.1 * xen-tools-4.14.6_10-150300.3.63.1 * xen-tools-domU-4.14.6_10-150300.3.63.1 * xen-debugsource-4.14.6_10-150300.3.63.1 * xen-4.14.6_10-150300.3.63.1 * xen-devel-4.14.6_10-150300.3.63.1 * xen-libs-debuginfo-4.14.6_10-150300.3.63.1 * xen-tools-debuginfo-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * xen-tools-domU-debuginfo-4.14.6_10-150300.3.63.1 * xen-libs-4.14.6_10-150300.3.63.1 * xen-tools-4.14.6_10-150300.3.63.1 * xen-tools-domU-4.14.6_10-150300.3.63.1 * xen-debugsource-4.14.6_10-150300.3.63.1 * xen-4.14.6_10-150300.3.63.1 * xen-devel-4.14.6_10-150300.3.63.1 *xen-libs-debuginfo-4.14.6_10-150300.3.63.1 * xen-tools-debuginfo-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * xen-tools-domU-debuginfo-4.14.6_10-150300.3.63.1 * xen-libs-4.14.6_10-150300.3.63.1 * xen-tools-4.14.6_10-150300.3.63.1 * xen-tools-domU-4.14.6_10-150300.3.63.1 * xen-debugsource-4.14.6_10-150300.3.63.1 * xen-4.14.6_10-150300.3.63.1 * xen-devel-4.14.6_10-150300.3.63.1 * xen-libs-debuginfo-4.14.6_10-150300.3.63.1 * xen-tools-debuginfo-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_10-150300.3.63.1 * SUSE Enterprise Storage 7.1 (x86_64) * xen-tools-domU-debuginfo-4.14.6_10-150300.3.63.1 * xen-libs-4.14.6_10-150300.3.63.1 * xen-tools-4.14.6_10-150300.3.63.1 * xen-tools-domU-4.14.6_10-150300.3.63.1 * xen-debugsource-4.14.6_10-150300.3.63.1 * xen-4.14.6_10-150300.3.63.1 * xen-devel-4.14.6_10-150300.3.63.1 * xen-libs-debuginfo-4.14.6_10-150300.3.63.1 * xen-tools-debuginfo-4.14.6_10-150300.3.63.1 * SUSE Enterprise Storage 7.1 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * xen-libs-4.14.6_10-150300.3.63.1 * xen-debugsource-4.14.6_10-150300.3.63.1 * xen-libs-debuginfo-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * xen-libs-4.14.6_10-150300.3.63.1 * xen-debugsource-4.14.6_10-150300.3.63.1 * xen-libs-debuginfo-4.14.6_10-150300.3.63.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * xen-libs-4.14.6_10-150300.3.63.1 * xen-debugsource-4.14.6_10-150300.3.63.1 * xen-libs-debuginfo-4.14.6_10-150300.3.63.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46839.html * https://bugzilla.suse.com/show_bug.cgi?id=1218851 . Minorsecurity enhancement for xen addresses problems impacting several SUSE versions. System restart required post-update.. SUSE Update, Xen Patch, Application Fix, SUSE Security Update, OpenSUSE Security. . LinuxSecurity.com Team
Jan 31, 2024
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!