Fedora: 2023:0010-2 Critical: Security Vulnerability Patch

opensuse

January 2, 2023

An update that solves one vulnerability and has one errata is now available.

Description

This update for saphanabootstrap-formula fixes the following issues:

- Version bump 0.13.1

* revert changes to spec file to re-enable SLES RPM builds

* CVE-2022-45153: Fixed privilege escalation for arbitrary users in

hana/ha_cluster.sls (bsc#1205990)

- Version bump 0.13.0

* pass sid to sudoers in a SLES12 compatible way

* add location constraint to gcp_stonith

- Version bump 0.12.1

* moved templates dir into hana dir in repository to be gitfs compatible

- Version bump 0.12.0

* add SAPHanaSR takeover blocker

- Version bump 0.11.0

* use check_cmd instead of tmp sudoers file

* make sudoers rules more secure

* migrate sudoers to template file

- Version bump 0.10.1

* fix hook removal conditions

* fix majority_maker code on case grain is empty

- Version bump 0.10.0

* allow to disable shared HANA basepath and rework add_hosts code

(enables HANA scale-out on AWS)

* do not edit...

Read the Full Advisory

Topics Covered

security advisory privilege escalation security fix important openSUSE saphanabootstrap

Patch

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.4:

zypper in -t patch openSUSE-SLE-15.4-2023-9=1

- openSUSE Leap 15.3:

zypper in -t patch openSUSE-SLE-15.3-2023-9=1

- SUSE Linux Enterprise Module for SUSE Manager Server 4.3:

zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-9=1

- SUSE Linux Enterprise Module for SUSE Manager Server 4.2:

zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.2-2023-9=1

- SUSE Linux Enterprise Module for SAP Applications 15-SP4:

zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2023-9=1

- SUSE Linux Enterprise Module for SAP Applications 15-SP3:

zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2023-9=1

- SUSE Linux Enterprise Module for SAP Applications 15-SP2:

zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2023-9=1