Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0239-1

Опубликовано: 26 янв. 2024
Источник: suse-cvrf

Описание

Security update for rear23a

This update for rear23a fixes the following issues:

  • CVE-2024-23301: Corrected world-readable permissions for initrd, which could be an issue if it contains sensitive information (bsc#1218728).

Список пакетов

SUSE Linux Enterprise High Availability Extension 15 SP1
rear23a-2.3.a-150000.9.9.1
SUSE Linux Enterprise High Availability Extension 15 SP2
rear23a-2.3.a-150000.9.9.1

Ссылки

Описание

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP1:rear23a-2.3.a-150000.9.9.1
SUSE Linux Enterprise High Availability Extension 15 SP2:rear23a-2.3.a-150000.9.9.1
Ссылки