SUSE-RU-2024:0457-1: Recommended update for python-kiwi
This update for python-kiwi fixes the following issues: Fix overwrite of kiwioemunattended: ensure that the overwrite happens in the early initialize method which provides the environment for all code running in the dracut module
Allow install disk overwrite from cmdline (jsc#PED-7180): add rd.kiwi.oem.installdevice=DEVICE, which configures the disk device that should be used in an OEM installation
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kiwi-man-pagesto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/dracut-kiwi-oem-dumpto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-toolsto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-systemdeps-bootloadersto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-systemdeps-image-validationto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-tools-debuginfoto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/python-kiwi-debugsourceto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/dracut-kiwi-overlayto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/dracut-kiwi-oem-repartto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/dracut-kiwi-libto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/dracut-kiwi-liveto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-systemdeps-iso-mediato a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-systemdeps-coreto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-systemdeps-disk-imagesto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-systemdeps-containersto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/python3-kiwito a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-systemdeps-filesystemsto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-systemdepsto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade
suse/kiwi-pxebootto a version that resolves this vulnerability.Fixed in 9.24.43-150100.3.68.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2024-457=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2024-457=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2024-457=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-457=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2024-457=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2024-457=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2024-457=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2024-457=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-457=1 - Configuration
Add rd.kiwi.oem.installdevice=DEVICE to the command line to configure the disk device used for an OEM installation.
kiwi OEM installation rd.kiwi.oem.installdevice = DEVICE
Event History
Frequently Asked Questions
Which deployments are most likely affected by this update?
The update applies to systems using the listed SUSE KIWI and dracut KIWI OEM packages, particularly OEM installation workflows that run through the dracut module.
What configuration change does this update introduce for OEM installations?
It adds the rd.kiwi.oem.installdevice=DEVICE kernel command-line parameter. This parameter configures which disk device is used for an OEM installation.
What behavior is corrected for kiwi_oemunattended?
The update moves the kiwi_oemunattended overwrite to the early initialization method, so the environment is available to code running in the dracut module.