Every CVESearch/Get API key

SUSE-SU-2025:20042-1

Security update for selinux-policy

No scoreFix available

SUSE-SU-2025:20042-1 is a vulnerability with no CVSS score yet in selinux-policy, published February 3, 2025. No source lists public exploit code. Fixed in selinux-policy 20230523+git25.ad22dd7f-1.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
20230523+git25.ad22dd7f-1.1selinux-policy

Description

This update for selinux-policy fixes the following issues:

Update to version 20230523+git25.ad22dd7f:

  • Backport wtmpdb label change to have the same wtmpdb label as in SL Micro 6.1 (bsc#1229132)
  • Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records
  • Add auth_rw_wtmpdb_login_records to modules
  • Allow xdm_t to read-write to wtmpdb (bsc#1225984)
  • Introduce types for wtmpdb and rw interface
  • Introduce wtmp_file_type attribute
  • Revert "Add policy for wtmpdb (bsc#1210717)"

Update to version 20230523+git18.f44daf8a:

  • Provide type for sysstat lock files (bsc#1228247)

Update to version 20230523+git16.0849f54c:

  • allow firewalld access to /dev/random and write HW acceleration logs (bsc#1215405, bsc#1227930)

Affected packages

Affected packages
PackageAffectedFixed
selinux-policy
SUSE:Linux Micro 6.0
before 20230523+git25.ad22dd7f-1.1
20230523+git25.ad22dd7f-1.1

What each source reports

OSVNo score

Security update for selinux-policy

This update for selinux-policy fixes the following issues:

Update to version 20230523+git25.ad22dd7f:

  • Backport wtmpdb label change to have the same wtmpdb label as in SL Micro 6.1 (bsc#1229132)
  • Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records
  • Add auth_rw_wtmpdb_login_records to modules
  • Allow xdm_t to read-write to wtmpdb (bsc#1225984)
  • Introduce types for wtmpdb and rw interface
  • Introduce wtmp_file_type attribute
  • Revert "Add policy for wtmpdb (bsc#1210717)"

Update to version 20230523+git18.f44daf8a:

  • Provide type for sysstat lock files (bsc#1228247)

Update to version 20230523+git16.0849f54c:

  • allow firewalld access to /dev/random and write HW acceleration logs (bsc#1215405, bsc#1227930)
Record
SUSE-SU-2025:20042-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open