SUSE-RU-2024:0261-1: Recommended update for conmon
This update for conmon fixes the following issues: New upstream release 2.1.10 Bug fixes: Fix incorrect free in connsock
logging: Respect log-size-max immediately after open
Add patch for fixing regression in v2.1.9 (https://github.com/containers/conmon/issues/475 and https://github.com/containers/conmon/issues/477)
New upstream release 2.1.9 ### Bug fixes
fix some issues flagged by SAST scan src: fix write after end of buffer src: open all files with OCLOEXEC oom-score: restore oom score before running exit command ### Features Forward more messages on the sd-notify socket
logging: -l passthrough accepts TTYs
[bsc#1215806]
Update to version 2.1.8:
stdio: ignore EIO for terminals (bsc#1217773) ensure console socket buffers are properly sized conmon: drop return after pexit() ctrl: make accept4 failures fatal logging: avoid opening /dev/null for each write oom: restore old OOM score Use default umask 0022 cli: log parsing errors to stderr Changes to build conmon for riscv64 Changes to build conmon for ppc64le Fix closeotherfds on FreeBSD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/conmonto a version that resolves this vulnerability.Fixed in 2.1.10-150400.3.17.1 - Upgrade
Upgrade
suse/conmon-debuginfoto a version that resolves this vulnerability.Fixed in 2.1.10-150400.3.17.1 - Upgrade
Upgrade
conmonto a version that resolves this vulnerability.Fixed in 2.1.8
Event History
Frequently Asked Questions
Which systems are covered by this update?
The update applies to conmon and conmon-debuginfo on openSUSE Leap Micro 5.4, SUSE Linux Enterprise Micro 5.3 and 5.4, SUSE Linux Enterprise Micro for Rancher 5.3 and 5.4, and the SUSE Containers Module 15-SP4. Listed architectures include aarch64, s390x, x86_64, and, for Containers Module 15-SP4, ppc64le.
What version does this update provide?
The update includes conmon upstream release 2.1.10. It also incorporates changes from versions 2.1.9 and 2.1.8.
What issues does the update address besides the incorrect free?
It fixes SAST-identified write-after-end-of-buffer issues, restores the OOM score before running an exit command, and fixes regressions reported for version 2.1.9. It also includes logging, terminal I/O, console socket buffer, file-descriptor handling, and build-related fixes.