Every CVESearch/Get API key

SUSE-SU-2022:2547-1

Security update for logrotate

No scoreFix available

SUSE-SU-2022:2547-1 is a vulnerability with no CVSS score yet in logrotate, published July 25, 2022. No source lists public exploit code. Fixed in logrotate 3.13.0-150000.4.7.1.

Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
3.13.0-150000.4.7.1logrotate +22 more

Description

This update for logrotate fixes the following issues:

Security issues fixed:

  • Improved coredump handing for SUID binaries (bsc#1192449).

Non-security issues fixed:

  • Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' (bsc#1200278, bsc#1200802).

Affected packages

Affected packages
PackageAffectedFixed
logrotate
SUSE:Linux Enterprise Module for Basesystem 15 SP3
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise High Performance Computing 15-LTSS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Server 15-LTSS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Server 15 SP1-BCL
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Server 15 SP1-LTSS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
Show 13 moreShow less
Affected packages
PackageAffectedFixed
logrotate
SUSE:Linux Enterprise Server 15 SP2-BCL
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Server 15 SP2-LTSS
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Server for SAP Applications 15
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Manager Proxy 4.1
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Manager Retail Branch Server 4.1
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Manager Server 4.1
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Micro 5.1
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Linux Enterprise Micro 5.2
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Enterprise Storage 6
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
SUSE:Enterprise Storage 7
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1
logrotate
openSUSE:Leap 15.3
before 3.13.0-150000.4.7.1
3.13.0-150000.4.7.1

What each source reports

OSVNo score

Security update for logrotate

This update for logrotate fixes the following issues:

Security issues fixed:

  • Improved coredump handing for SUID binaries (bsc#1192449).

Non-security issues fixed:

  • Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' (bsc#1200278, bsc#1200802).
Record
SUSE-SU-2022:2547-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open