Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2022:3896-1 Moderate Security Update for Conmon Released

suse
Calendar Grey November 8, 2022
Dist Suse Esm H88
SUSE Security Update fixes conmon vulnerabilities with moderate severity. Stay secure with the latest software update.
An update that fixes one vulnerability is now available

Summary

This update for conmon fixes the following issues: conmon was updated to 2.1.3: * Stop using g_unix_signal_add() to avoid threads * Rename CLI optionlog-size-global-max to log-global-size-max Update to version 2.1.2: * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285) * journald: print tag and name if both are specified * drop some logs to debug level Update to version 2.1.0 * logging: buffer partial messages to journald * exit: close all fds >= 3 * fix: cgroup: Free memory_cgroup_file_path if open fails. Call g_free instead of free. Update to version 2.0.32 * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor. * exit_command: Fix: unset subreaper attribute before running exit command Update to version 2.0.31 * logging: new mode -l passthrough

Topics%20covered

Topics Covered

security advisory security issue moderate severity system patch SUSE CaaS Platform container runtime Conmon update

References

#1200285

Cross- CVE-2022-1708

CVSS scores:

CVE-2022-1708 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2022-1708 (SUSE): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

Affected Products:

SUSE CaaS Platform 4.0

SUSE Enterprise Storage 6

SUSE Enterprise Storage 7

SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS

SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS

SUSE Linux Enterprise Server 15-SP1-BCL

SUSE Linux Enterprise Server 15-SP1-LTSS

SUSE Linux Enterprise Server 15-SP2-BCL

SUSE Linux Enterprise Server 15-SP2-LTSS

SUSE Linux Enterprise Server for SA...

Read the Full Advisory

Announcement ID: SUSE-SU-2022:3896-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory security issue moderate severity system patch SUSE CaaS Platform container runtime Conmon update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here