Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1838-1

Опубликовано: 29 мая 2024
Источник: suse-cvrf

Описание

Security update for warewulf4

This update for warewulf4 fixes the following issues:

  • fixed wwctl configure --all doesn't configure ssh (bsc#1225402)

  • update to 4.5.2 with following changes:

    • Reorder dnsmasq config to put iPXE last
    • Update go-digest dependency to fix CVE-2024-3727: digest values not always validated (bsc#1224124)

  • updated to version 4.5.1 with following changes

    • wwctl [profile|node] list -a handles now slices correclty
    • Fix a locking issue with concurrent read/writes for node status

  • Remove API package as use of this wasn't documented

  • use tftp.socket for activation (bsc#1216994)

Список пакетов

SUSE Linux Enterprise Module for HPC 15 SP5
warewulf4-4.5.2-150500.6.13.1
warewulf4-man-4.5.2-150500.6.13.1
warewulf4-overlay-4.5.2-150500.6.13.1
warewulf4-overlay-slurm-4.5.2-150500.6.13.1
SUSE Linux Enterprise Module for HPC 15 SP6
warewulf4-4.5.2-150500.6.13.1
warewulf4-man-4.5.2-150500.6.13.1
warewulf4-overlay-4.5.2-150500.6.13.1
warewulf4-overlay-slurm-4.5.2-150500.6.13.1
openSUSE Leap 15.5
warewulf4-4.5.2-150500.6.13.1
warewulf4-man-4.5.2-150500.6.13.1
warewulf4-overlay-4.5.2-150500.6.13.1
warewulf4-overlay-slurm-4.5.2-150500.6.13.1
openSUSE Leap 15.6
warewulf4-4.5.2-150500.6.13.1
warewulf4-man-4.5.2-150500.6.13.1
warewulf4-overlay-4.5.2-150500.6.13.1
warewulf4-overlay-slurm-4.5.2-150500.6.13.1

Ссылки

Описание

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Затронутые продукты
SUSE Linux Enterprise Module for HPC 15 SP5:warewulf4-4.5.2-150500.6.13.1
SUSE Linux Enterprise Module for HPC 15 SP5:warewulf4-man-4.5.2-150500.6.13.1
SUSE Linux Enterprise Module for HPC 15 SP5:warewulf4-overlay-4.5.2-150500.6.13.1
SUSE Linux Enterprise Module for HPC 15 SP5:warewulf4-overlay-slurm-4.5.2-150500.6.13.1
Ссылки