Security update for chrony SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:3794-1 Final 1 1 2025-10-24T15:36:39Z current 2025-10-24T15:36:39Z 2025-10-24T15:36:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for chrony This update for chrony fixes the following issues: - Race condition during socket creation by chronyc allows privilege escalation from user chrony to root (bsc#1246544). This update also ships chrony-pool-empty to SLE Micro 5.x (jsc#SMO-587) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP4-Micro-5-3-2025-3794,Image SLES15-SP4-Micro-5-3-BYOS-2025-3794,Image SLES15-SP4-Micro-5-3-BYOS-Azure-2025-3794,Image SLES15-SP4-Micro-5-3-BYOS-EC2-2025-3794,Image SLES15-SP4-Micro-5-3-BYOS-GCE-2025-3794,Image SLES15-SP4-Micro-5-3-EC2-2025-3794,Image SLES15-SP4-Micro-5-4-BYOS-2025-3794,Image SLES15-SP4-Micro-5-4-BYOS-Azure-2025-3794,Image SLES15-SP4-Micro-5-4-BYOS-EC2-2025-3794,Image SLES15-SP4-Micro-5-4-BYOS-GCE-2025-3794,Image SLES15-SP4-Micro-5-4-GCE-2025-3794,Image SLES15-SP5-Micro-5-5-2025-3794,Image SLES15-SP5-Micro-5-5-Azure-2025-3794,Image SLES15-SP5-Micro-5-5-BYOS-2025-3794,Image SLES15-SP5-Micro-5-5-BYOS-Azure-2025-3794,Image SLES15-SP5-Micro-5-5-BYOS-EC2-2025-3794,Image SLES15-SP5-Micro-5-5-EC2-2025-3794,SUSE-2025-3794,SUSE-SLE-Micro-5.3-2025-3794,SUSE-SLE-Micro-5.4-2025-3794,SUSE-SLE-Micro-5.5-2025-3794,SUSE-SLE-Module-Basesystem-15-SP6-2025-3794,SUSE-SLE-Module-Basesystem-15-SP7-2025-3794,openSUSE-SLE-15.6-2025-3794 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20253794-1/ Link for SUSE-SU-2025:3794-1 https://lists.suse.com/pipermail/sle-updates/2025-October/042294.html E-Mail link for SUSE-SU-2025:3794-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1246544 SUSE Bug 1246544 Image SLES15-SP4-Micro-5-3 Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-3-BYOS-EC2 Image SLES15-SP4-Micro-5-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-EC2 Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-EC2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 openSUSE Leap 15.6 chrony-4.1-150400.21.8.1 chrony-pool-suse-4.1-150400.21.8.1 chrony-pool-empty-4.1-150400.21.8.1 chrony-pool-openSUSE-4.1-150400.21.8.1 chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3 chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3 chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-Azure chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-Azure chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-EC2 chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-EC2 chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-GCE chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-GCE chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-EC2 chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-3-EC2 chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-Azure chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-Azure chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-EC2 chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-EC2 chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-GCE chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-GCE chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-GCE chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP4-Micro-5-4-GCE chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5 chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5 chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-Azure chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-Azure chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 chrony-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 chrony-pool-suse-4.1-150400.21.8.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 chrony-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.3 chrony-pool-empty-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.3 chrony-pool-suse-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.3 chrony-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.4 chrony-pool-empty-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.4 chrony-pool-suse-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.4 chrony-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.5 chrony-pool-empty-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.5 chrony-pool-suse-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Micro 5.5 chrony-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 chrony-pool-empty-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 chrony-pool-suse-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 chrony-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 chrony-pool-empty-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 chrony-pool-suse-4.1-150400.21.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 chrony-4.1-150400.21.8.1 as a component of openSUSE Leap 15.6 chrony-pool-empty-4.1-150400.21.8.1 as a component of openSUSE Leap 15.6 chrony-pool-openSUSE-4.1-150400.21.8.1 as a component of openSUSE Leap 15.6 chrony-pool-suse-4.1-150400.21.8.1 as a component of openSUSE Leap 15.6