SUSE-SU-2023:0022-1

Details

This update for rmt-server fixes the following issues:

Update to version 2.10:

Add option to turn off system token support (bsc#1205089)
Update the last_seen_at column on zypper service refresh
Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).

Affected Packages

SUSE:Enterprise Storage 6rmt-server

Fixed in:

2.10-150100.3.42.1

SUSE:Enterprise Storage 6rmt-server-config

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSrmt-server

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSrmt-server-config

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise Module for Public Cloud 15 SP1rmt-server

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise Module for Public Cloud 15 SP1rmt-server-pubcloud

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise Server 15 SP1-BCLrmt-server

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise Server 15 SP1-BCLrmt-server-config

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise Server 15 SP1-LTSSrmt-server

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise Server 15 SP1-LTSSrmt-server-config

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1rmt-server

Fixed in:

2.10-150100.3.42.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1rmt-server-config

Fixed in:

2.10-150100.3.42.1

References

REPORThttps://bugzilla.suse.com/1204285 REPORThttps://bugzilla.suse.com/1204769 REPORThttps://bugzilla.suse.com/1205089 WEBhttps://www.suse.com/security/cve/CVE-2022-31254 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20230022-1/

SUSE-SU-2023:0022-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline