SUSE-RU-2024:0255-1: Recommended update for multipath-tools
This update for multipath-tools fixes the following issues: Fixed ANA prioritizer enablement logic (bsc#1218326)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libmpath0to a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade
suse/multipath-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade
suse/multipath-toolsto a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade
suse/multipath-tools-debugsourceto a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade
suse/multipath-tools-develto a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade
suse/kpartx-debuginfoto a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade
suse/libdmmp-develto a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade
suse/libmpath0-debuginfoto a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade
suse/kpartxto a version that resolves this vulnerability.Fixed in 0.9.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2024-255=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-255=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2024-255=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2024-255=1
Event History
Frequently Asked Questions
Which systems should prioritize this update?
Systems using SUSE multipath-tools components, including multipath-tools, kpartx, libmpath0, and their associated development or debug packages, should review and apply the update.
What functional area is addressed by this update?
The update fixes ANA prioritizer enablement logic in multipath-tools. The provided information does not specify affected configurations, exploitation requirements, or temporary mitigations.