SUSE-SU-2024:1814-1: moderate: Security Beta update for SUSE Manager Client Tools and Salt
SLE-SECURITY-UPDATES
null at suse.de
Wed May 29 12:30:38 UTC 2024
# Security Beta update for SUSE Manager Client Tools and Salt
Announcement ID: SUSE-SU-2024:1814-1
Rating: moderate
References:
* bsc#1221465
* bsc#1222155
* bsc#1222277
* bsc#1222731
* jsc#MSQA-775
Cross-References:
* CVE-2024-1313
CVSS scores:
* CVE-2024-1313 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected Products:
* openSUSE Leap 15.3
* openSUSE Leap 15.4
* openSUSE Leap 15.5
* openSUSE Leap 15.6
* SUSE Linux Enterprise Desktop 15
* SUSE Linux Enterprise Desktop 15 SP1
* SUSE Linux Enterprise Desktop 15 SP2
* SUSE Linux Enterprise Desktop 15 SP3
* SUSE Linux Enterprise Desktop 15 SP4
* SUSE Linux Enterprise Desktop 15 SP5
* SUSE Linux Enterprise Desktop 15 SP6
* SUSE Linux Enterprise High Performance Computing 15
* SUSE Linux Enterprise High Performance Computing 15 SP1
* SUSE Linux Enterprise High Performance Computing 15 SP2
* SUSE Linux Enterprise High Performance Computing 15 SP3
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise Micro 5.0
* SUSE Linux Enterprise Micro 5.1
* SUSE Linux Enterprise Micro 5.2
* SUSE Linux Enterprise Micro 5.3
* SUSE Linux Enterprise Micro 5.4
* SUSE Linux Enterprise Micro 5.5
* SUSE Linux Enterprise Real Time 15 SP1
* SUSE Linux Enterprise Real Time 15 SP2
* SUSE Linux Enterprise Real Time 15 SP3
* SUSE Linux Enterprise Real Time 15 SP4
* SUSE Linux Enterprise Real Time 15 SP5
* SUSE Linux Enterprise Real Time 15 SP6
* SUSE Linux Enterprise Server 15
* SUSE Linux Enterprise Server 15 SP1
* SUSE Linux Enterprise Server 15 SP2
* SUSE Linux Enterprise Server 15 SP3
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15
* SUSE Linux Enterprise Server for SAP Applications 15 SP1
* SUSE Linux Enterprise Server for SAP Applications 15 SP2
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
* SUSE Manager Client Tools Beta for SLE 15
* SUSE Manager Client Tools Beta for SLE Micro 5
An update that solves one vulnerability, contains one feature and has three
security fixes can now be installed.
## Description:
This update fixes the following issues:
golang-github-prometheus-node_exporter:
* Add `device_error` label for filesystem metrics.
* Update rtnetlink library to fix errors during ARP metrics collection.
* update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
* [FEATURE] Add ZFS freebsd per dataset stats #2753
* [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
* [ENHANCEMENT] Parallelize stat calls in Linux filesystem collector #1772
* [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
* [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric #2778
* [ENHANCEMENT] Improve qdisc collector performance #2779
* [ENHANCEMENT] Add include and exclude filter for hwmon collector #2699
* [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead of procfs
#2777
* [BUGFIX] Fallback to 32-bit stats in netdev #2757
* [BUGFIX] Close btrfs.FS handle after use #2780
* [BUGFIX] Move RO status before error return #2807
* [BUFFIX] Fix promhttp_metric_handler_errors_total being always active #2808
* [BUGFIX] Fix nfsd v4 index miss #2824
* update to 1.6.1:
* Rebuild with updated Go version, no source code changes in this release.
* update to 1.6.0:
* [CHANGE] Fix cpustat when some cpus are offline #2318
* [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
* [CHANGE] Deprecate ntp collector #2603
* [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
* [CHANGE] Deprecate supervisord collector #2685
* [FEATURE] Add softirqs collector #2669
* [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
* [ENHANCEMENT] Add administrative state of Linux network interfaces #2515
* [ENHANCEMENT] Log current value of GOMAXPROCS #2537
* [ENHANCEMENT] Add profiler options for perf collector #2542
* [ENHANCEMENT] Allow root path as metrics path #2590
* [ENHANCEMENT] Add cpu frequency governor metrics #2569
* [ENHANCEMENT] Add new landing page #2622
* [ENHANCEMENT] Reduce privileges needed for btrfs device stats #2634
* [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
* [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats #2612
* [ENHANCEMENT] Read missing from netlink netclass attributes from sysfs #2669
* [BUGFIX] perf: fixes for automatically detecting the correct tracefs
mountpoints #2553
* [BUGFIX] Fix `thermal_zone` collector noise #2554
* [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
* [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
grafana:
* Packaging improvements:
* Changed deprecated `disabled` service mode to `manual`
* Drop golang-packaging macros
* Drop explicit mod=vendor as it is enabled automatically
* Update to version 9.5.18:
* [SECURITY] CVE-2024-1313: Require same organisation when deleting snapshots
(bsc#1222155)
* Update to version 9.5.17:
* [FEATURE] Alerting: Backport use Alertmanager API v2
mgr-push:
* Version 5.0.2-0
* Remove unused code from the traditional stack
* Use bundle CA certificate in rhnpush (bsc#1222731)
spacecmd:
* Version 5.0.6-0
* Update translations
uyuni-common-libs:
* Version 5.0.3-0
* Add support for package signature type V4 RSA/SHA384
* Add support for package signature type V4 RSA/SHA512 (bsc#1221465)
uyuni-tools:
* Version 0.1.9-0
* Redact passwords from the API payload in traces
* Fix build on Ubuntu 20.04 due to version change
* Version 0.1.8-0
* Add 'mgradm support sql' command
* Improve GPG help
* podman-mount* flag should be used only on Server installation and migration
* Add flag groups in help text
* Attach Proxy pod to our Podman network
* Create support ptf commands
* Create mgrpxy upgrade command
* Add domain for internal container network
* Stop the Server if first user creation failed
* Add localization support
* Require Podman 4.5.0 for its --shm-size-systemd parameter
* Add --podman-mount-www flag for install and migration
* Only colorize output if outputting to a terminal
* Fix output missing newlines due to the spinner
* Add product version and commit id to the version output
* Add missing whitespace between podman common arguments and additional ones
* Bump the push tag to 5.0.0-RC
* Add gpg command to mgradm
* Hide message in stdout if SCCcredentials is missing (bsc#1222277)
* Redact password in stdout and uyuni-tools.log
* Rework distribution mapping to work with distros without .treeinfo data
* Add initial installation support for Confidental Computing attestation
container
* Allow PAM and LDAP authentication using SSSD
* Change pull policy default to Always during upgrade
* Allow migration with non-root user on source server
## Special Instructions and Notes:
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Manager Client Tools Beta for SLE Micro 5
zypper in -t patch SUSE-SLE-Manager-Tools-Beta-For-Micro-5-2024-1814=1
* SUSE Manager Client Tools Beta for SLE 15
zypper in -t patch SUSE-SLE-Manager-Tools-15-BETA-2024-1814=1
## Package List:
* SUSE Manager Client Tools Beta for SLE Micro 5 (aarch64 s390x x86_64)
* golang-github-prometheus-node_exporter-1.7.0-159000.6.5.5
* mgrctl-0.1.9-159000.3.11.5
* SUSE Manager Client Tools Beta for SLE Micro 5 (noarch)
* mgrctl-bash-completion-0.1.9-159000.3.11.5
* mgrctl-zsh-completion-0.1.9-159000.3.11.5
* mgrctl-lang-0.1.9-159000.3.11.5
* SUSE Manager Client Tools Beta for SLE 15 (aarch64 ppc64le s390x x86_64)
* python3-uyuni-common-libs-5.0.3-159000.3.39.3
* mgrctl-0.1.9-159000.3.11.5
* grafana-debuginfo-9.5.18-159000.4.33.4
* grafana-9.5.18-159000.4.33.4
* SUSE Manager Client Tools Beta for SLE 15 (noarch)
* python3-mgr-push-5.0.2-159000.4.24.5
* mgrctl-lang-0.1.9-159000.3.11.5
* mgrctl-bash-completion-0.1.9-159000.3.11.5
* spacecmd-5.0.6-159000.6.51.4
* mgrctl-zsh-completion-0.1.9-159000.3.11.5
* mgr-push-5.0.2-159000.4.24.5
## References:
* https://www.suse.com/security/cve/CVE-2024-1313.html
* https://bugzilla.suse.com/show_bug.cgi?id=1221465
* https://bugzilla.suse.com/show_bug.cgi?id=1222155
* https://bugzilla.suse.com/show_bug.cgi?id=1222277
* https://bugzilla.suse.com/show_bug.cgi?id=1222731
* https://jira.suse.com/browse/MSQA-775
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20240529/8d060663/attachment.htm>
More information about the sle-security-updates
mailing list