Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 8 articles for you...
100
security advisorycriticalsystem patchSUSE Linux Micro 6.0 critical update: systemd patch 2025:20041-1
* bsc#1200723 * bsc#1204968 * bsc#1213873 * bsc#1218110 * bsc#1221906 . # Security update for systemd Announcement ID: SUSE-SU-2025:20041-1 Release Date: 2025-02-03T08:54:03Z Rating: critical References: * bsc#1200723 * bsc#1204968 * bsc#1213873 * bsc#1218110 * bsc#1221906 * bsc#1226414 * bsc#1226415 * bsc#1228091 * bsc#1228223 * bsc#1228809 * bsc#1229518 * jsc#PED-5659 Cross-References: * CVE-2022-3821 CVSS scores: * CVE-2022-3821 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-3821 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-3821 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves one vulnerability, contains one feature and has 10 fixes can now be installed. ## Description: This update for systemd fixes the following issues: * Import commit 0512d0d1fc0b54a84964281708036a46ab39c153 0512d0d1fc cgroup: Rename effective limits internal table (jsc#PED-5659) 765846b70b cgroup: Restrict effective limits with global resource provision (jsc#PED-5659) e29909088b test: Add effective cgroup limits testing (jsc#PED-5659) beacac6df0 test: Convert rlimit test to subtest of generic limit testing (jsc#PED-5659) e3b789e512 cgroup: Add EffectiveMemoryMax=, EffectiveMemoryHigh= and EffectiveTasksMax= properties (jsc#PED-5659) 5aa063ae16 bus-print-properties: prettify more unset properties a53122c9bd bus-print-properties: ignore CGROUP_LIMIT_MAX for Memory*{Current, Peak} 8418791441 cgroup: rename TasksMax structure to CGroupTasksMax * Don't try to restart the udev socket units anymore (bsc#1228809) There's currently no way to restart a socket activable service and its socket units "atomically" and safely. * Make the 32bit version of libudev.so available again (bsc#1228223) The symlink for building 32bit applications was mistakenly dropped when the content oflibudev-devel was merged into systemd-devel. Provide the 32bit flavor of systemd-devel again, which should restore the plug and play support in Wine for 32bit windows applications. * Import commit up to 5aa182660dff86fe9d5cba61b0c6542bb2f2db23 (merge of v254.17) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-73=1 * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-73=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * systemd-experimental-254.18-1.1 * systemd-debuginfo-254.18-1.1 * systemd-coredump-254.18-1.1 * libudev1-254.18-1.1 * libudev1-debuginfo-254.18-1.1 * systemd-journal-remote-debuginfo-254.18-1.1 * systemd-coredump-debuginfo-254.18-1.1 * systemd-container-254.18-1.1 * libsystemd0-254.18-1.1 * systemd-journal-remote-254.18-1.1 * udev-254.18-1.1 * udev-debuginfo-254.18-1.1 * systemd-debugsource-254.18-1.1 * systemd-experimental-debuginfo-254.18-1.1 * libsystemd0-debuginfo-254.18-1.1 * systemd-254.18-1.1 * systemd-container-debuginfo-254.18-1.1 * systemd-portable-debuginfo-254.18-1.1 * systemd-portable-254.18-1.1 * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * systemd-devel-254.18-1.1 * systemd-debugsource-254.18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2022-3821.html * https://bugzilla.suse.com/show_bug.cgi?id=1200723 * https://bugzilla.suse.com/show_bug.cgi?id=1204968 * https://bugzilla.suse.com/show_bug.cgi?id=1213873 * https://bugzilla.suse.com/show_bug.cgi?id=1218110 * https://bugzilla.suse.com/show_bug.cgi?id=1221906 * https://bugzilla.suse.com/show_bug.cgi?id=1226414 *https://bugzilla.suse.com/show_bug.cgi?id=1226415 * https://bugzilla.suse.com/show_bug.cgi?id=1228091 * https://bugzilla.suse.com/show_bug.cgi?id=1228223 * https://bugzilla.suse.com/show_bug.cgi?id=1228809 * https://bugzilla.suse.com/show_bug.cgi?id=1229518 * https://jira.suse.com/login.jsp?permissionViolation=true&os_destination=%2Fbrowse%2FPED-5659&page_caps=&user_role= . Critical patch released for systemd addresses multiple security flaws. Restart required post-update for CentOS machines.. SUSE security update, systemd critical fix, system patch instructions, SUSE Linux Micro. . Severity: Critical. LinuxSecurity.com Team
Jun 04, 2025
•Critical
SuSE
100
security advisorygcc updatepython securitySUSE: Recommended Updates for Crypto-Policies, GCC, Python Security
The container sles-15-sp5-chost-byos-v20231213-arm64 was updated. The following patches have been included in this update:. SUSE Image Update Advisory: sles-15-sp5-chost-byos-v20231213-arm64 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2023:873-1 Image Tags : sles-15-sp5-chost-byos-v20231213-arm64:20231213 Image Release : Severity : important Type : security References : 1041742 1111622 1170175 1176785 1184753 1199282 1200528 1203760 1206480 1206667 1206684 1207325 1209998 1210286 1210557 1210660 1211427 1212101 1212418 1212422 1212759 1213639 1213915 1214052 1214460 1214546 1214572 1215427 1215947 1215979 1216091 1216377 1216410 1216419 1216576 1216664 1216862 1217212 1217215 1217573 1217574 CVE-2022-1996 CVE-2022-40897 CVE-2023-2137 CVE-2023-22745 CVE-2023-38470 CVE-2023-38473 CVE-2023-4039 CVE-2023-45803 CVE-2023-46218 CVE-2023-46219 ----------------------------------------------------------------- The container sles-15-sp5-chost-byos-v20231213-arm64 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:526-1 Released: Mon Feb 27 13:52:39 2023 Summary: Security update for tpm2-0-tss Type: security Severity: moderate References: 1207325,CVE-2023-22745 This update for tpm2-0-tss fixes the following issues: - CVE-2023-22745: Fixed a memory safety issue that could be exploited by local attackers with TPM access (bsc#1207325). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4450-1 Released: Wed Nov 15 10:55:20 2023 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: 1209998 This update for crypto-policies fixes thefollowing issues: - Enable setting the kernel FIPS mode with the fips-mode-setup and fips-finish-install commands (jsc#PED-5041) - Adapt fips-mode-setup to use the pbl command from the perl-Bootloader package instead of grubby and add a note for transactional systems - Ship the man pages for fips-mode-setup and fips-finish-install - Make the supported versions change in the update-crypto-policies(8) man page persistent (bsc#1209998) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4458-1 Released: Thu Nov 16 14:38:48 2023 Summary: Security update for gcc13 Type: security Severity: important References: 1206480,1206684,1210557,1211427,1212101,1213915,1214052,1214460,1215427,1216664,CVE-2023-4039 This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module. The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories. To use gcc13 compilers use: - install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages. - override your Makefile to use CC=gcc-13, CXX=g++-13 and similar overrides for the other languages. For a full changelog with all new GCC13 features, check out https://gcc.gnu.org/gcc-13/changes.html Detailed changes: * CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052) - Work around third party app crash during C++ standard library initialization. [bsc#1216664] - Fixed that GCC13 fails to compile some packages with error: unrecognizable insn (bsc#1215427) - Bump included newlib to version 4.3.0. - Update to GCC trunk head (r13-5254-g05b9868b182bb9) -Redo floatn fixinclude pick-up to simply keep what is there. - Turn cross compiler to s390x to a glibc cross. [bsc#1214460] - Also handle -static-pie in the default-PIE specs - Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101] - Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427] - Add new x86-related intrinsics (amxcomplexintrin.h). - RISC-V: Add support for inlining subword atomic operations - Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver. - Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC. - Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing. - Bump included newlib to version 4.3.0. - Also package libhwasan_preinit.o on aarch64. - Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite. - Package libhwasan_preinit.o on x86_64. - Fixed unwinding on aarch64 with pointer signing. [bsc#1206684] - Enable PRU flavour for gcc13 - update floatn fixinclude pickup to check each header separately (bsc#1206480) - Redo floatn fixinclude pick-up to simply keep what is there. - Bump libgo SONAME to libgo22. - Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers. - Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15. - Depend on at least LLVM 13 for GCN cross compiler. - Update embedded newlib to version 4.2.0 - Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the samebuild. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4460-1 Released: Thu Nov 16 15:00:20 2023 Summary: Recommended update for rsyslog Type: recommended Severity: moderate References: 1210286 This update for rsyslog fixes the following issue: - fix rsyslog crash in imrelp (bsc#1210286) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4467-1 Released: Thu Nov 16 17:57:51 2023 Summary: Security update for python-urllib3 Type: security Severity: moderate References: 1216377,CVE-2023-45803 This update for python-urllib3 fixes the following issues: - CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4503-1 Released: Tue Nov 21 13:25:12 2023 Summary: Security update for avahi Type: security Severity: moderate References: 1215947,1216419,CVE-2023-38470,CVE-2023-38473 This update for avahi fixes the following issues: - CVE-2023-38470: Ensure each label is at least one byte long (bsc#1215947). - CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4517-1 Released: Tue Nov 21 17:30:27 2023 Summary: Security update for python3-setuptools Type: security Severity: moderate References: 1206667,CVE-2022-40897 This update for python3-setuptools fixes the following issues: - CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4534-1 Released: Thu Nov 23 08:13:57 2023 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate References: 1041742,1203760,1212422,1215979,1216091 This update for libzypp, zypperfixes the following issues: - Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091) - Fix comment typo on zypp.conf (bsc#1215979) - Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742) - Make sure the old target is deleted before a new one is created (bsc#1203760) - Return 104 also if info suggests near matches - Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422) - commit: Insert a headline to separate output of different rpm scripts (bsc#1041742) ----------------------------------------------------------------- Advisory ID: SUSE-feature-2023:4583-1 Released: Mon Nov 27 10:16:11 2023 Summary: Feature update for python-psutil Type: feature Severity: moderate References: 1111622,1170175,1176785,1184753,1199282 This update for python-psutil, python-requests fixes the following issues: - update python-psutil to 5.9.1 (bsc#1199282, bsc#1184753, jsc#SLE-24629, jsc#PM-3243, gh#giampaolo/psutil#2043) - Fix tests: setuptools changed the builddir library path and does not find the module from it. Use the installed platlib instead and exclude psutil.tests only later. - remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS - Update python-requests to 2.25.1 (bsc#1176785, bsc#1170175, jsc#ECO-3105, jsc#PM-2352, jsc#PED-7192) - Fixed bug with unintended Authorization header stripping for redirects using default ports (bsc#1111622). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4610-1 Released: Wed Nov 29 14:04:12 2023 Summary: Recommended update for google-guest-configs Type: recommended Severity: moderate References: 1212418,1212759,1214546,1214572 This update for google-guest-configs fixes the following issues: - Update to version 20230808.00 (bsc#1214546, bsc#1214572, bsc#1212418, bsc#1212759) - Replace xxd with dd for google_nvme_id - Setup irq binding for a3 8g vm - dracut: Add a new dracut module for gcpudev rules - src/lib/udev: only create symlinks for GCP devices - Set hostname: consider fully qualified static hostname - Support multiple local SSD controllers - Update OWNERS file - DHCP hostname: don't reset hostname if the hostname hasn't changed ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4619-1 Released: Thu Nov 30 10:13:52 2023 Summary: Security update for sqlite3 Type: security Severity: important References: 1210660,CVE-2023-2137 This update for sqlite3 fixes the following issues: - CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4620-1 Released: Thu Nov 30 11:13:43 2023 Summary: Recommended update for libhugetlbfs Type: recommended Severity: moderate References: 1213639,1216576 This update for libhugetlbfs fixes the following issue: - Add patch for upstream issue (bsc#1216576, bsc#1213639) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4659-1 Released: Wed Dec 6 13:04:57 2023 Summary: Security update for curl Type: security Severity: moderate References: 1217573,1217574,CVE-2023-46218,CVE-2023-46219 This update for curl fixes the following issues: - CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573). - CVE-2023-46219: HSTS long file name clears contents (bsc#1217574). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4671-1 Released: Wed Dec 6 14:33:41 2023 Summary: Recommended update for man Type: recommended Severity: moderate References: This update of man fixes the following problem: - The 'man' commands is delivered to SUSE Linux Enterprise Micro to allow browsing man pages. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4672-1 Released: Wed Dec 6 14:37:37 2023 Summary: Security update for suse-build-key Type: security Severity: important References: 1216410,1217215 This update for suse-build-key fixes the following issues: This update runs a import-suse-build-key script. The previous libzypp-post-script based installation is replaced with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777). - suse-build-key-import.service - suse-build-key-import.timer It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys. After successful import the timer is disabled. To manually import them you can also run: # rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc # rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4699-1 Released: Mon Dec 11 07:02:10 2023 Summary: Recommended update for gpg2 Type: recommended Severity: moderate References: 1217212 This update for gpg2 fixes the following issues: - `dirmngr-client --validate` is broken for DER-encoded files (bsc#1217212) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4723-1 Released: Tue Dec 12 09:57:51 2023 Summary: Recommended update for libtirpc Type: recommended Severity: moderate References: 1216862 This update for libtirpc fixes the following issue: - fix sed parsing in specfile (bsc#1216862) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4727-1 Released: Tue Dec 12 12:27:39 2023 Summary: Security update for catatonit, containerd, runc Type: security Severity: important References: 1200528,CVE-2022-1996 This update of runc and containerd fixes the following issues: containerd: - Update to containerd v1.7.8. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.8 * CVE-2022-1996: Fixed CORS bypass in go-restful (bsc#1200528) catatonit: - Update to catatonit v0.2.0. * Change license toGPL-2.0-or-later. - Update to catatont v0.1.7 * This release adds the ability for catatonit to be used as the only process in a pause container, by passing the -P flag (in this mode no subprocess is spawned and thus no signal forwarding is done). - Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to socket activation or features somewhat adjacent to socket activation (such as passing file descriptors). runc: - Update to runc v1.1.10. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.10 The following package changes have been done: - containerd-ctr-1.7.8-150000.103.1 updated - containerd-1.7.8-150000.103.1 updated - crypto-policies-20210917.c9d86d1-150400.3.6.1 updated - curl-8.0.1-150400.5.36.1 updated - dracut-055+suse.375.g1167ed75-150500.3.15.1 updated - google-guest-configs-20230808.00-150400.13.6.1 updated - gpg2-2.2.27-150300.3.8.1 updated - grub2-i386-pc-2.06-150500.29.11.1 updated - grub2-x86_64-efi-2.06-150500.29.11.1 updated - grub2-2.06-150500.29.11.1 updated - kernel-default-5.14.21-150500.55.39.1 updated - libavahi-client3-0.8-150400.7.10.1 updated - libavahi-common3-0.8-150400.7.10.1 updated - libcurl4-8.0.1-150400.5.36.1 updated - libdevmapper1_03-2.03.22_1.02.196-150500.7.9.1 updated - libgcc_s1-13.2.1+git7813-150000.1.6.1 updated - libhugetlbfs-2.20-150000.3.8.1 updated - libopeniscsiusr0-0.2.0-150500.46.3.1 updated - libopenssl1_1-1.1.1l-150500.17.22.1 updated - libp11-kit0-0.23.22-150500.8.3.1 updated - libsqlite3-0-3.44.0-150000.3.23.1 updated - libstdc++6-13.2.1+git7813-150000.1.6.1 updated - libtirpc-netconfig-1.3.4-150300.3.23.1 updated - libtirpc3-1.3.4-150300.3.23.1 updated - libtss2-esys0-3.1.0-150400.3.3.1 added - libtss2-fapi1-3.1.0-150400.3.3.1 added - libtss2-mu0-3.1.0-150400.3.3.1 added - libtss2-rc0-3.1.0-150400.3.3.1 added - libtss2-sys1-3.1.0-150400.3.3.1 added - libtss2-tctildr0-3.1.0-150400.3.3.1 added - libxml2-2-2.10.3-150500.5.11.1 updated - libzypp-17.31.22-150400.3.43.1 updated -nvme-cli-2.4+31.gf7ec09-150500.4.12.1 updated - open-iscsi-2.1.9-150500.46.3.1 updated - openssl-1_1-1.1.1l-150500.17.22.1 updated - p11-kit-tools-0.23.22-150500.8.3.1 updated - p11-kit-0.23.22-150500.8.3.1 updated - python3-requests-2.25.1-150300.3.6.1 updated - python3-setuptools-44.1.1-150400.9.6.1 updated - python3-urllib3-1.25.10-150300.4.9.1 updated - rsyslog-module-relp-8.2306.0-150400.5.21.1 updated - rsyslog-8.2306.0-150400.5.21.1 updated - runc-1.1.10-150000.55.1 updated - samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 updated - suse-build-key-12.0-150000.8.37.1 updated - suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 updated - system-group-hardware-20170617-150400.24.2.1 updated - system-group-kvm-20170617-150400.24.2.1 updated - system-group-wheel-20170617-150400.24.2.1 updated - system-user-nobody-20170617-150400.24.2.1 updated - tpm2.0-tools-5.2-150400.4.6 added - vim-data-common-9.0.2103-150500.20.6.1 updated - vim-9.0.2103-150500.20.6.1 updated - xen-libs-4.17.2_08-150500.3.15.1 updated - zypper-1.14.66-150400.3.35.1 updated . Recent SUSE security enhancements and advised updates addressing diverse packages and significant vulnerabilities.. SUSE Security Update,SUSE Advisory,SUSE Packages,Recommended Patches. . Severity: Important. LinuxSecurity.com Team
Dec 15, 2023
•Important
SuSE
100
security advisoryimportantsuseSUSE: 2023:1624-1 Important: suse/389-ds Security Update Summary
The container suse/389-ds was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/389-ds ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:1624-1 Container Tags : suse/389-ds:2.0 , suse/389-ds:2.0-21.38 , suse/389-ds:latest Container Release : 21.38 Severity : important Type : security References : 1203141 1207410 1211230 1211231 1211232 1211233 CVE-2023-28319 CVE-2023-28320 CVE-2023-28321 CVE-2023-28322 ----------------------------------------------------------------- The container suse/389-ds was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2224-1 Released: Wed May 17 09:53:54 2023 Summary: Security update for curl Type: security Severity: important References: 1211230,1211231,1211232,1211233,CVE-2023-28319,CVE-2023-28320,CVE-2023-28321,CVE-2023-28322 This update for curl adds the following feature: Update to version 8.0.1 (jsc#PED-2580) - CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230). - CVE-2023-28320: siglongjmp race condition (bsc#1211231). - CVE-2023-28321: IDN wildcard matching (bsc#1211232). - CVE-2023-28322: POST-after-PUT confusion (bsc#1211233). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2240-1 Released: Wed May 17 19:56:54 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate References: 1203141,1207410 This update for systemd fixes the following issues: - udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410) - Optimize when hundred workers claim the same symlink with the same priority (bsc#1203141) - Add nss-resolve and systemd-network to Packagehub-Subpackages (MSC-626) The following package changes have been done: -libsystemd0-249.16-150400.8.28.3 updated - libcurl4-8.0.1-150400.5.23.1 updated - container:sles15-image-15.0.0-27.14.63 updated . The SUSE Container Update Notification for suse/389-ds comes with crucial updates and security enhancements. Discover further details here.. SUSE Container Update, SUSE Security Advisory, Open Source Fixes. . Severity: Important. LinuxSecurity.com Team
May 25, 2023
•Important
SuSE
217
security advisorysecurity issuemoderate severityOracle Linux 9 ELSA-2023-0954 Moderate: Systemd Security Fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-0954 https://linux.oracle.com/errata/ELSA-2023-0954.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: systemd-250-12.0.2.el9_1.3.i686.rpm systemd-250-12.0.2.el9_1.3.x86_64.rpm systemd-container-250-12.0.2.el9_1.3.i686.rpm systemd-container-250-12.0.2.el9_1.3.x86_64.rpm systemd-devel-250-12.0.2.el9_1.3.i686.rpm systemd-devel-250-12.0.2.el9_1.3.x86_64.rpm systemd-journal-remote-250-12.0.2.el9_1.3.x86_64.rpm systemd-libs-250-12.0.2.el9_1.3.i686.rpm systemd-libs-250-12.0.2.el9_1.3.x86_64.rpm systemd-oomd-250-12.0.2.el9_1.3.x86_64.rpm systemd-pam-250-12.0.2.el9_1.3.x86_64.rpm systemd-resolved-250-12.0.2.el9_1.3.x86_64.rpm systemd-rpm-macros-250-12.0.2.el9_1.3.noarch.rpm systemd-udev-250-12.0.2.el9_1.3.x86_64.rpm aarch64: systemd-250-12.0.2.el9_1.3.aarch64.rpm systemd-container-250-12.0.2.el9_1.3.aarch64.rpm systemd-devel-250-12.0.2.el9_1.3.aarch64.rpm systemd-journal-remote-250-12.0.2.el9_1.3.aarch64.rpm systemd-libs-250-12.0.2.el9_1.3.aarch64.rpm systemd-oomd-250-12.0.2.el9_1.3.aarch64.rpm systemd-pam-250-12.0.2.el9_1.3.aarch64.rpm systemd-resolved-250-12.0.2.el9_1.3.aarch64.rpm systemd-rpm-macros-250-12.0.2.el9_1.3.noarch.rpm systemd-udev-250-12.0.2.el9_1.3.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol9/SRPMS-updates//systemd-250-12.0.2.el9_1.3.src.rpm Related CVEs: CVE-2022-4415 CVE-2022-45873 Description of changes: [250-12.0.2.3] - Backport upstream pstore dmesg fix [Orabug: 34868110] - Remove upstream references [Orabug: 33995357] - Disable unprivileged BPF by default [Orabug: 32870980] - udev rules: fix memory hot add and remove [Orabug: 31310273] - set "RemoveIPC=no" in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469] - fix _netdev is missing for iscsi entry in /etc/fstab (
Mar 01, 2023
Oracle
100
security advisorymoderate severitysuseSUSE: 2023:427-1 Moderate: Multiple Security Updates for Toolbox
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sle-micro/5.4/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:427-1 Container Tags : suse/sle-micro/5.4/toolbox:12.1 , suse/sle-micro/5.4/toolbox:12.1-3.2.59 , suse/sle-micro/5.4/toolbox:latest Container Release : 3.2.59 Severity : moderate Type : security References : 1202436 1207753 CVE-2022-48303 ----------------------------------------------------------------- The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:463-1 Released: Mon Feb 20 16:33:39 2023 Summary: Security update for tar Type: security Severity: moderate References: 1202436,1207753,CVE-2022-48303 This update for tar fixes the following issues: - CVE-2022-48303: Fixed a one-byte out-of-bounds read that resulted in use of uninitialized memory for a conditional jump (bsc#1207753). Bug fixes: - Fix hang when unpacking test tarball (bsc#1202436). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:464-1 Released: Mon Feb 20 18:11:37 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate References: This update for systemd fixes the following issues: - Merge of v249.15 - Drop workaround related to systemd-timesyncd that addressed a Factory issue. - Conditionalize the use of /lib/modprobe.d only on systems with split usr support enabled (i.e. SLE). - Make use of the %systemd_* rpm macros consistently. Using the upstream variants will ease the backports of Factory changes to SLE since Factory systemd uses the upstream variants exclusively. - machines.target belongs to systemd-container, do its init/cleanup steps from thescriptlets of this sub-package. - Make sure we apply the presets on units shipped by systemd package. - systemd-testsuite: move the integration tests in a dedicated sub directory. - Move systemd-cryptenroll into udev package. The following package changes have been done: - systemd-249.15-150400.8.22.1 updated - tar-1.34-150000.3.31.1 updated . This notice outlines the security enhancements for the SUSE container suse/sle-micro/5.4/toolbox, encompassing essential fixes.. SUSE, Container Updates, Toolbox Patches, Security Advisory. . LinuxSecurity.com Team
Feb 22, 2023
SuSE
100
security advisoryupdateimportantSUSE: 2023:230-1 Important: bci/dotnet-aspnet Container Security Fix
The container bci/dotnet-aspnet was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/dotnet-aspnet ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:230-1 Container Tags : bci/dotnet-aspnet:5.0 , bci/dotnet-aspnet:5.0-27.85 , bci/dotnet-aspnet:5.0.17 , bci/dotnet-aspnet:5.0.17-27.85 Container Release : 27.85 Severity : important Type : security References : 1203652 1204944 1205000 1207264 CVE-2022-4415 ----------------------------------------------------------------- The container bci/dotnet-aspnet was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:188-1 Released: Fri Jan 27 12:07:19 2023 Summary: Recommended update for zlib Type: recommended Severity: important References: 1203652 This update for zlib fixes the following issues: - Follow up fix for bug bsc#1203652 due to libxml2 issues ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:201-1 Released: Fri Jan 27 15:24:15 2023 Summary: Security update for systemd Type: security Severity: moderate References: 1204944,1205000,1207264,CVE-2022-4415 This update for systemd fixes the following issues: - CVE-2022-4415: Fixed an issue where users could access coredumps with changed uid, gid or capabilities (bsc#1205000). Non-security fixes: - Enabled the pstore service (jsc#PED-2663). - Fixed an issue accessing TPM when secure boot is enabled (bsc#1204944). - Fixed an issue where a pamd file could get accidentally overwritten after an update (bsc#1207264). The following package changes have been done: - libz1-1.2.11-150000.3.39.1 updated - libsystemd0-249.14-150400.8.19.1 updated - container:sles15-image-15.0.0-27.14.33 updated . Important SUSE upgrade for bci/dotnet-aspnet image tackling securityvulnerabilities and updates for systemd and zlib.. SUSE Update Advisory, container security update, bci/dotnet-aspnet. . Severity: Important. LinuxSecurity.com Team
Jan 28, 2023
•Important
SuSE
100
security advisoryimportant updatelinux patchSUSE 12-SP5: 2022:4627-1 Critical: Resolution for Systemd Issue
An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4627-1 Rating: important References: #1204423 #1205000 Cross-References: CVE-2022-4415 CVSS scores: CVE-2022-4415 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Restrict cpu rule to x86_64, and also update the rule files to make use of the "CONST{arch}" syntax (bsc#1204423). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-4627=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-4627=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): libudev-devel-228-157.46.1 systemd-debuginfo-228-157.46.1 systemd-debugsource-228-157.46.1 systemd-devel-228-157.46.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libsystemd0-228-157.46.1 libsystemd0-debuginfo-228-157.46.1 libudev-devel-228-157.46.1 libudev1-228-157.46.1 libudev1-debuginfo-228-157.46.1 systemd-228-157.46.1 systemd-debuginfo-228-157.46.1 systemd-debugsource-228-157.46.1 systemd-devel-228-157.46.1 systemd-sysvinit-228-157.46.1 udev-228-157.46.1 udev-debuginfo-228-157.46.1 - SUSE Linux Enterprise Server 12-SP5 (s390x x86_64): libsystemd0-32bit-228-157.46.1 libsystemd0-debuginfo-32bit-228-157.46.1 libudev1-32bit-228-157.46.1 libudev1-debuginfo-32bit-228-157.46.1 systemd-32bit-228-157.46.1 systemd-debuginfo-32bit-228-157.46.1 - SUSE Linux Enterprise Server 12-SP5 (noarch): systemd-bash-completion-228-157.46.1 References: https://www.suse.com/security/cve/CVE-2022-4415.html https://bugzilla.suse.com/1204423 https://bugzilla.suse.com/1205000 . A vital patch for systemd tackles a critical security risk, improving the robustness of openSUSE. Discover the details!. SUSE Update, Systemd Security, Linux Patch. . Severity: Critical. LinuxSecurity.com Team
Dec 27, 2022
•Critical
SuSE
100
security advisorysecurity updateimportantSUSE: 2022:3048-1 Important: bci/python Security Fixes Overview
The container bci/python was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2022:3048-1 Container Tags : bci/python:3 , bci/python:3.10 , bci/python:3.10-7.31 , bci/python:latest Container Release : 7.31 Severity : important Type : security References : 1177460 1199944 1202324 1204179 1204649 1204886 1204968 1205156 1205244 CVE-2022-1664 CVE-2022-3821 CVE-2022-42919 CVE-2022-45061 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3999-1 Released: Tue Nov 15 17:08:04 2022 Summary: Security update for systemd Type: security Severity: moderate References: 1204179,1204968,CVE-2022-3821 This update for systemd fixes the following issues: - CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968). - Import commit 0cd50eedcc0692c1f907b24424215f8db7d3b428 * 0469b9f2bc pstore: do not try to load all known pstore modules * ad05f54439 pstore: Run after modules are loaded * ccad817445 core: Add trigger limit for path units * 281d818fe3 core/mount: also add default before dependency for automount mount units * ffe5b4afa8 logind: fix crash in logind on user-specified message string - Document udev naming scheme (bsc#1204179) - Make 'sle15-sp3' net naming scheme still available for backward compatibility reason ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:4004-1 Released: Tue Nov 15 17:10:13 2022 Summary: Security update for python310 Type: security Severity: important References: 1204886,1205244,CVE-2022-42919,CVE-2022-45061 This update for python310 fixes the followingissues: Security fixes: - CVE-2022-42919: Fixed local privilege escalation via the multiprocessing forkserver start method (bsc#1204886). - CVE-2022-45061: Fixed a quadratic IDNA decoding time (bsc#1205244). Other fixes: - allow building of documentation with the latest Sphinx 5.3.0 (gh#python/cpython#98366). - Update to 3.10.8: - Fix multiplying a list by an integer (list *= int): detect the integer overflow when the new allocated length is close to the maximum size. - Fix a shell code injection vulnerability in the get-remote-certificate.py example script. The script no longer uses a shell to run openssl commands. (originally filed as CVE-2022-37460, later withdrawn) - Fix command line parsing: reject -X int_max_str_digits option with no value (invalid) when the PYTHONINTMAXSTRDIGITS environment variable is set to a valid limit. - When ValueError is raised if an integer is larger than the limit, mention the sys.set_int_max_str_digits() function in the error message. - The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed). - os.sched_yield() now release the GIL while calling sched_yield(2). - Bugfix: PyFunction_GetAnnotations() should return a borrowed reference. It was returning a new reference. - Fixed a missing incref/decref pair in Exception.__setstate__(). - Fix overly-broad source position information for chained comparisons used as branching conditions. - Fix undefined behaviour in _testcapimodule.c. - At Python exit, sometimes a thread holding the GIL can wait forever for a thread (usually a daemon thread) which requested to drop the GIL, whereas the thread already exited. To fix the race condition, the thread which requested the GIL drop now resets its request before exiting. - Fix a possible assertionfailure, fatal error, or SystemError if a line tracing event raises an exception while opcode tracing is enabled. - Fix undefined behaviour in C code of null pointer arithmetic. - Do not expose KeyWrapper in _functools. - When loading a file with invalid UTF-8 inside a multi-line string, a correct SyntaxError is emitted. - Disable incorrect pickling of the C implemented classmethod descriptors. - Fix AttributeError missing name and obj attributes in . object.__getattribute__() bpo-42316: Document some places . where an assignment expression needs parentheses . - Wrap network errors consistently in urllib FTP support, so the test suite doesnât fail when a network is available but the public internet is not reachable. - Fixes AttributeError when subprocess.check_output() is used with argument input=None and either of the arguments encoding or errors are used. - Avoid spurious tracebacks from asyncio when default executor cleanup is delayed until after the event loop is closed (e.g. as the result of a keyboard interrupt). - Avoid a crash in the C version of asyncio.Future.remove_done_callback() when an evil argument is passed. - Remove tokenize.NL check from tabnanny. - Make Semaphore run faster. - Fix generation of the default name of tkinter.Checkbutton. Previously, checkbuttons in different parent widgets could have the same short name and share the same state if arguments ânameâ and âvariableâ are not specified. Now they are globally unique. - Update bundled libexpat to 2.4.9 - Fix race condition in asyncio where process_exited() called before the pipe_data_received() leading to inconsistent output. - Fixed check in multiprocessing.resource_tracker that guarantees that the length of a write to a pipe is not greater than PIPE_BUF. - Corrected type annotation for dataclass attribute pstats.FunctionProfile.ncalls to be str. - Fix the faulthandlerimplementation of faulthandler.register(signal, chain=True) if the sigaction() function is not available: donât call the previous signal handler if itâs NULL. - In inspect, fix overeager replacement of âtyping.â in formatting annotations. - Fix asyncio.streams.StreamReaderProtocol to keep a strong reference to the created task, so that itâs not garbage collected - Fix handling compiler warnings (SyntaxWarning and DeprecationWarning) in codeop.compile_command() when checking for incomplete input. Previously it emitted warnings and raised a SyntaxError. Now it always returns None for incomplete input without emitting any warnings. - Fixed flickering of the turtle window when the tracer is turned off. - Allow asyncio.StreamWriter.drain() to be awaited concurrently by multiple tasks. - Fix broken asyncio.Semaphore when acquire is cancelled. - Fix ast.unparse() when ImportFrom.level is None - Improve performance of urllib.request.getproxies_environment when there are many environment variables - Fix ! in c domain ref target syntax via a conf.py patch, so it works as intended to disable ref target resolution. - Clarified the conflicting advice given in the ast documentation about ast.literal_eval() being âsafeâ for use on untrusted input while at the same time warning that it can crash the process. The latter statement is true and is deemed unfixable without a large amount of work unsuitable for a bugfix. So we keep the warning and no longer claim that literal_eval is safe. - Update tutorial introduction output to use 3.10+ SyntaxError invalid range. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:4066-1 Released: Fri Nov 18 10:43:00 2022 Summary: Recommended update for timezone Type: recommended Severity: important References: 1177460,1202324,1204649,1205156 This update for timezone fixes the followingissues: Update timezone version from 2022a to 2022f (bsc#1177460, bsc#1204649, bsc#1205156): - Mexico will no longer observe DST except near the US border - Chihuahua moves to year-round -06 on 2022-10-30 - Fiji no longer observes DST - In vanguard form, GMT is now a Zone and Etc/GMT a link - zic now supports links to links, and vanguard form uses this - Simplify four Ontario zones - Fix a Y2438 bug when reading TZif data - Enable 64-bit time_t on 32-bit glibc platforms - Omit large-file support when no longer needed - Jordan and Syria switch from +02/+03 with DST to year-round +03 - Palestine transitions are now Saturdays at 02:00 - Simplify three Ukraine zones into one - Improve tzselect on intercontinental Zones - Chile's DST is delayed by a week in September 2022 (bsc#1202324) - Iran no longer observes DST after 2022 - Rename Europe/Kiev to Europe/Kyiv - New `zic -R` command option - Vanguard form now uses %z ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:4081-1 Released: Fri Nov 18 15:40:46 2022 Summary: Security update for dpkg Type: security Severity: low References: 1199944,CVE-2022-1664 This update for dpkg fixes the following issues: - CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944). The following package changes have been done: - libudev1-249.12-150400.8.13.1 updated - libsystemd0-249.12-150400.8.13.1 updated - timezone-2022f-150000.75.15.1 updated - update-alternatives-1.19.0.4-150000.4.4.1 updated - libpython3_10-1_0-3.10.8-150400.4.15.1 updated - python310-base-3.10.8-150400.4.15.1 updated - python310-3.10.8-150400.4.15.1 updated - container:sles15-image-15.0.0-27.14.16 updated . Crucial news regarding bci/python has been released, highlighting security patches that address vulnerabilities linked to systemd and dpkg in SUSE.. bci-python, security-update, systemd-fix, dpkg-security-update. . Severity: Important. LinuxSecurity.com Team
Nov 19, 2022
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!