SUSE-SU-2023:0021-1

Details

Description of the patch:

This update for rmt-server fixes the following issues:

Update to version 2.10:

Add option to turn off system token support (bsc#1205089)
Update the last_seen_at column on zypper service refresh
Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).

Affected Packages

rmt-server

SUSE Linux Enterprise High Performance Computing 15SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Server 15SUSE Linux Enterprise Server 15-LTSS

Fixed in:

2.10-150000.3.61.1

rmt-server-config

SUSE Linux Enterprise High Performance Computing 15SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Server 15SUSE Linux Enterprise Server 15-LTSS

Fixed in:

2.10-150000.3.61.1

References

ADVISORY

https://bugzilla.suse.com/1204285

ADVISORY

https://bugzilla.suse.com/1204769

ADVISORY

https://bugzilla.suse.com/1205089

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2023-January/013418.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-31254/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230021-1/