Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2024:4010-1 moderate: CVE-2023-3978 fixed in Manager Tools

suse
Calendar Grey November 18, 2024
Dist Suse Esm H88
SUSE Manager Client Tools receives a vital security patch; addressing CVE-2023-3978 along with numerous improvements and upgrades. Keep your system safe!
* bsc#1213933 * bsc#1223142 * bsc#1226759 * bsc#1227341 * bsc#1227578

Summary

## This update fixes the following issues: golang-github-lusitaniae-apache_exporter: * Security issues fixed: * CVE-2023-3978: Fixed security bug in x/net dependency (bsc#1213933) * Other changes and issues fixed: * Delete unpackaged debug files for RHEL * Do not include source files in the package for RHEL 9 * Require Go 1.20 when building for RedHat derivatives * Drop EnvironmentFile from the service definition * Explicitly unset $ARGS environment variable. Setting environment variables should be done in drop-in systemd configuration files. * Drop go_nostrip macro. It is not needed with current binutils and Go. * Migrate from `disabled` to `manual` source service type * Drop BuildRequires: golang-packaging * Upgrade to version 1.0.8 (bsc#1227341) * Update prometheus/client_golang to version 1.19.1

Topics%20covered

Topics Covered

security advisory moderate update software patch bug fix SUSE client tools

References

* bsc#1213933

* bsc#1223142

* bsc#1226759

* bsc#1227341

* bsc#1227578

* bsc#1227606

* bsc#1228424

* bsc#1228685

* bsc#1229108

* bsc#1229260

* bsc#1229432

* bsc#1229437

* bsc#1229501

* bsc#1230136

* bsc#1230139

* bsc#1230285

* bsc#1230288

* bsc#1230623

* bsc#1230745

* bsc#1231157

* bsc#1231206

* jsc#MSQA-863

Cross-

* CVE-2023-3978

CVSS scores:

* CVE-2023-3978 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

* CVE-2023-3978 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products:

* SUSE Linux Enterprise Desktop 12

* SUSE Linux Enterprise Desktop 12 SP1

* SUSE Linux Enterprise Desktop 12 SP2

* SUSE Linux Enterprise Desktop 12 SP3

* SUSE Linux Enterprise Desktop 12 SP4

* SUSE Linux Enterprise High Performance Computing 12 SP2

Announcement ID: SUSE-SU-2024:4010-1
Release Date: 2024-11-18T13:22:18Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update software patch bug fix SUSE client tools

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here