SUSE-SU-2025:20042-1
Security update for selinux-policy
No scoreFix available
SUSE-SU-2025:20042-1 is a vulnerability with no CVSS score yet in selinux-policy, published February 3, 2025. No source lists public exploit code. Fixed in selinux-policy 20230523+git25.ad22dd7f-1.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
20230523+git25.ad22dd7f-1.1selinux-policy
Description
This update for selinux-policy fixes the following issues:
Update to version 20230523+git25.ad22dd7f:
- Backport wtmpdb label change to have the same wtmpdb label as in SL Micro 6.1 (bsc#1229132)
- Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records
- Add auth_rw_wtmpdb_login_records to modules
- Allow xdm_t to read-write to wtmpdb (bsc#1225984)
- Introduce types for wtmpdb and rw interface
- Introduce wtmp_file_type attribute
- Revert "Add policy for wtmpdb (bsc#1210717)"
Update to version 20230523+git18.f44daf8a:
- Provide type for sysstat lock files (bsc#1228247)
Update to version 20230523+git16.0849f54c:
- allow firewalld access to /dev/random and write HW acceleration logs (bsc#1215405, bsc#1227930)
Affected packages
| Package | Affected | Fixed |
|---|---|---|
selinux-policySUSE:Linux Micro 6.0 | before 20230523+git25.ad22dd7f-1.1 | 20230523+git25.ad22dd7f-1.1 |
What each source reports
OSVNo score
Security update for selinux-policy
This update for selinux-policy fixes the following issues:
Update to version 20230523+git25.ad22dd7f:
- Backport wtmpdb label change to have the same wtmpdb label as in SL Micro 6.1 (bsc#1229132)
- Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records
- Add auth_rw_wtmpdb_login_records to modules
- Allow xdm_t to read-write to wtmpdb (bsc#1225984)
- Introduce types for wtmpdb and rw interface
- Introduce wtmp_file_type attribute
- Revert "Add policy for wtmpdb (bsc#1210717)"
Update to version 20230523+git18.f44daf8a:
- Provide type for sysstat lock files (bsc#1228247)
Update to version 20230523+git16.0849f54c:
- allow firewalld access to /dev/random and write HW acceleration logs (bsc#1215405, bsc#1227930)
- Record
SUSE-SU-2025:20042-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.