Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

SUSE: 2024:4011-1 moderate: security update for Client Tools

suse
Calendar Grey November 18, 2024
Dist Suse Esm H88
Update notice for SUSE Manager Client Tools, security advisory 2024-4011-1 focuses on resolving various security vulnerabilities and enhancing overall functionality.
* bsc#1213933 * bsc#1223142 * bsc#1226759 * bsc#1227341 * bsc#1227578

Summary

## This update fixes the following issues: golang-github-lusitaniae-apache_exporter: * Security issues fixed: * CVE-2023-3978: Fixed security bug in x/net dependency (bsc#1213933) * Other changes and issues fixed: * Delete unpackaged debug files for RHEL * Do not include source files in the package for RHEL 9 * Require Go 1.20 when building for RedHat derivatives * Drop EnvironmentFile from the service definition * Explicitly unset $ARGS environment variable. Setting environment variables should be done in drop-in systemd configuration files. * Drop go_nostrip macro. It is not needed with current binutils and Go. * Migrate from `disabled` to `manual` source service type * Drop BuildRequires: golang-packaging * Upgrade to version 1.0.8 (bsc#1227341) * Update prometheus/client_golang to version 1.19.1

References

* bsc#1213933

* bsc#1223142

* bsc#1226759

* bsc#1227341

* bsc#1227578

* bsc#1227606

* bsc#1228424

* bsc#1228685

* bsc#1229108

* bsc#1229260

* bsc#1229432

* bsc#1229437

* bsc#1229501

* bsc#1230136

* bsc#1230139

* bsc#1230285

* bsc#1230288

* bsc#1230745

* bsc#1231157

* bsc#1231206

* jsc#MSQA-863

Cross-

* CVE-2023-3978

CVSS scores:

* CVE-2023-3978 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

* CVE-2023-3978 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products:

* openSUSE Leap 15.3

* openSUSE Leap 15.4

* openSUSE Leap 15.5

* openSUSE Leap 15.6

* SUSE Linux Enterprise Desktop 15

* SUSE Linux Enterprise Desktop 15 SP1

* SUSE Linux Enterprise Desktop 15 SP2

* SUSE Linux Enterprise Desktop 15 SP3

* SUSE Linux Enterprise Desktop 15 SP4

* SUSE Linux Enterprise Desktop 15 SP5

Announcement ID: SUSE-SU-2024:4011-1
Release Date: 2024-11-18T13:23:33Z
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here