SUSE-RU-2024:0527-1: Recommended update for conmon
This update for conmon fixes the following issues: New upstream release 2.1.10 Bug fixes: Fix incorrect free in connsock
logging: Respect log-size-max immediately after open
New upstream release 2.1.9 Bug fixes: fix some issues flagged by SAST scan src: fix write after end of buffer src: open all files with OCLOEXEC oom-score: restore oom score before running exit command Features: Forward more messages on the sd-notify socket
logging: -l passthrough accepts TTYs
[bsc#1215806] Update to version 2.1.8: stdio: ignore EIO for terminals (bsc#1217773) ensure console socket buffers are properly sized conmon: drop return after pexit() ctrl: make accept4 failures fatal logging: avoid opening /dev/null for each write oom: restore old OOM score Use default umask 0022 cli: log parsing errors to stderr Changes to build conmon for riscv64 Changes to build conmon for ppc64le Fix closeotherfds on FreeBSD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/conmon-debuginfoto a version that resolves this vulnerability.Fixed in 2.1.10-150500.9.9.1 - Upgrade
Upgrade
suse/conmonto a version that resolves this vulnerability.Fixed in 2.1.10-150500.9.9.1 - Upgrade
Upgrade
conmonto a version that resolves this vulnerability.Fixed in 2.1.8 - Upgrade
Upgrade
conmonto a version that resolves this vulnerability.Patch SUSE-2024-527=1 - Upgrade
Upgrade
conmonto a version that resolves this vulnerability.Patch openSUSE-SLE-15.5-2024-527=1 - Upgrade
Upgrade
conmonto a version that resolves this vulnerability.Patch SUSE-SLE-Micro-5.5-2024-527=1 - Upgrade
Upgrade
conmonto a version that resolves this vulnerability.Patch SUSE-SLE-Module-Containers-15-SP5-2024-527=1
Event History
Frequently Asked Questions
Which SUSE environments are covered by this update?
The update applies to conmon and conmon-debuginfo on openSUSE Leap 15.5 for aarch64, ppc64le, s390x, x86_64, and i586. It also applies to SUSE Containers Module 15-SP5 for aarch64, ppc64le, s390x, and x86_64.
What areas of conmon behavior are addressed by the update?
The update includes fixes affecting logging, file handling, buffer safety, terminal I/O, console socket buffers, OOM-score restoration, and control-socket error handling. It also includes sd-notify message forwarding and support for passthrough logging with TTYs.