Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2024:1629-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2024:1629-1

UNKNOWN

Security update for SUSE Manager Client Tools Beta

Published May 14, 2024

Modified 1 years ago

Fix available

Details

This update for SUSE Manager Client Tools Beta fixes the following issues:

Changed codestream origin of SUSE Manager Client Tools Beta (no source changes)

icinga in SUSE Manager Client Tools Beta also received the following security fixes:

CVE-2016-9566: Fixed root privilege escalation (bsc#1014637)
CVE-2019-3698 : Symbolic Link (Symlink) following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges by winning a race (bsc#1156309)

Affected Packages

SUSE:Linux Enterprise Module for Advanced Systems Management 12libzmq3

Fixed in:

4.0.4-15.8.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12zeromq

Fixed in:

4.0.4-15.8.1

SUSE:Linux Enterprise Module for Containers 12sysuser-shadow

Fixed in:

2.0-1.9.1

SUSE:Linux Enterprise Module for Containers 12sysuser-tools

Fixed in:

2.0-1.9.1

SUSE:Linux Enterprise Server 12 SP5sysuser-shadow

Fixed in:

2.0-1.9.1

SUSE:Linux Enterprise Server 12 SP5sysuser-tools

Fixed in:

2.0-1.9.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5sysuser-shadow

Fixed in:

2.0-1.9.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5sysuser-tools

Fixed in:

2.0-1.9.1

SUSE:Linux Enterprise Software Development Kit 12 SP5libzmq3

Fixed in:

4.0.4-15.8.1

SUSE:Linux Enterprise Software Development Kit 12 SP5zeromq

Fixed in:

4.0.4-15.8.1

SUSE:Linux Enterprise Software Development Kit 12 SP5zeromq-devel

Fixed in:

4.0.4-15.8.1

SUSE:Linux Enterprise Workstation Extension 12 SP5libzmq3

Fixed in:

4.0.4-15.8.1

SUSE:Linux Enterprise Workstation Extension 12 SP5zeromq

Fixed in:

4.0.4-15.8.1

SUSE:Manager Client Tools 12grafana-ha-cluster-dashboards

Fixed in:

1.1.0+git.1605027022.a84d536-1.10.1

SUSE:Manager Client Tools 12grafana-sap-netweaver-dashboards

Fixed in:

1.0.3+git.1601889366.9f71957-1.10.1

SUSE:Manager Client Tools 12grafana-sap-providers

Fixed in:

1.1-1.7.1

SUSE:Manager Client Tools 12grafana-sleha-provider

Fixed in:

1.1.0+git.1605027022.a84d536-1.10.1

SUSE:Manager Client Tools 12hwdata

Fixed in:

0.314-10.14.1

SUSE:Manager Client Tools 12icinga

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-devel

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-doc

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-idoutils

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-idoutils-mysql

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-idoutils-oracle

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-idoutils-pgsql

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-plugins-downtimes

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-plugins-eventhandlers

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-www

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12icinga-www-config

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12libzmq3

Fixed in:

4.0.4-15.8.1

SUSE:Manager Client Tools 12monitoring-tools

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12sysuser-shadow

Fixed in:

2.0-1.9.1

SUSE:Manager Client Tools 12sysuser-tools

Fixed in:

2.0-1.9.1

SUSE:Manager Client Tools 12zeromq

Fixed in:

4.0.4-15.8.1

SUSE:Manager Client Tools 12-BETAgrafana-ha-cluster-dashboards

Fixed in:

1.1.0+git.1605027022.a84d536-1.10.1

SUSE:Manager Client Tools 12-BETAgrafana-sap-netweaver-dashboards

Fixed in:

1.0.3+git.1601889366.9f71957-1.10.1

SUSE:Manager Client Tools 12-BETAgrafana-sap-providers

Fixed in:

1.1-1.7.1

SUSE:Manager Client Tools 12-BETAgrafana-sleha-provider

Fixed in:

1.1.0+git.1605027022.a84d536-1.10.1

SUSE:Manager Client Tools 12-BETAicinga

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-devel

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-doc

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-idoutils

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-idoutils-mysql

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-idoutils-oracle

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-idoutils-pgsql

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-plugins-downtimes

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-plugins-eventhandlers

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-www

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAicinga-www-config

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAlibzmq3

Fixed in:

4.0.4-15.8.1

SUSE:Manager Client Tools 12-BETAmonitoring-tools

Fixed in:

1.13.3-12.8.1

SUSE:Manager Client Tools 12-BETAsysuser-shadow

Fixed in:

2.0-1.9.1

SUSE:Manager Client Tools 12-BETAsysuser-tools

Fixed in:

2.0-1.9.1

SUSE:Manager Client Tools 12-BETAzeromq

Fixed in:

4.0.4-15.8.1

References

REPORThttps://bugzilla.suse.com/1014637 REPORThttps://bugzilla.suse.com/1156309 WEBhttps://www.suse.com/security/cve/CVE-2016-9566 WEBhttps://www.suse.com/security/cve/CVE-2019-3698 ADVISORYhttps://www.suse.com/support/update/announcement/2024/suse-su-20241629-1/

Upstream

CVE-2016-9566 CVE-2019-3698

Related

CVE-2016-9566 CVE-2019-3698

Ecosystems

SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Manager Client Tools 12 SUSE Manager Client Tools 12-BETA

Timeline

PublishedMay 14, 2024

ModifiedMay 14, 2024