SUSE-RU-2024:0720-1: Recommended update for SAPHanaSR

Q: Which deployments should apply this update?

Systems using the SAPHanaSR or SAPHanaSR documentation packages on openSUSE Leap 15.5 or SUSE SAP Applications Module 15-SP2 through 15-SP5 are listed as affected by this update.

Q: What operational problems does the update address?

It fixes hexdump logging for empty node states, changes monitor handling for non-cloned resources so they are reported as unsupported rather than producing a "command not found" error, and corrects the scope of the site variable. It also relocates logTimestamp() in susChkSrv.py and updates related manual pages.

Q: Is there evidence in the provided advisory that this issue is remotely exploitable or requires a particular attacker capability?

No. The provided information describes a recommended SAPHanaSR update and its functional fixes, but does not state an attack vector, required privileges, exploit conditions, or mitigation other than applying the update.

Published Feb 29, 2024

Updated

This update for SAPHanaSR fixes the following issues: SAPHanaSR was updated to version 0.162.3: Fixed the hexdump log for empty node states Catch monitor calls for non-cloned resources and report them as unsupported instead of 'command not found' (bsc#1218333) Fixed the scope of variable 'site' to be global (bsc#1219194) susChkSrv.py - relocate function logTimestamp() Updated man pages: SAPHanaSR.7 ocfsuseSAPHana.7 SAPHanaSRmaintenanceexamples.7 SAPHanaSR.py.7 SAPHanaSR-showAttr.8

Affected Software

15 affected componentsFixes available

All of the following

SUSE openSUSE Leap 15.5 (noarch)

Any of the following

suse/saphanasr-doc<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

suse/saphanasr<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

All of the following

SUSE SAP Applications Module 15-SP2 (noarch)

Any of the following

suse/saphanasr-doc<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

suse/saphanasr<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

All of the following

SUSE SAP Applications Module 15-SP3 (noarch)

Any of the following

suse/saphanasr-doc<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

suse/saphanasr<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

All of the following

SUSE SAP Applications Module 15-SP4 (noarch)

Any of the following

suse/saphanasr-doc<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

suse/saphanasr<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

All of the following

SUSE SAP Applications Module 15-SP5 (noarch)

Any of the following

suse/saphanasr-doc<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

suse/saphanasr<0.162.3-150000.4.41.1

0.162.3-150000.4.41.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/SAPHanaSR-doc to a version that resolves this vulnerability.
Fixed in 0.162.3-150000.4.41.1
Upgrade
Upgrade suse/SAPHanaSR to a version that resolves this vulnerability.
Fixed in 0.162.3-150000.4.41.1
Upgrade
Upgrade SAPHanaSR to a version that resolves this vulnerability.
Fixed in 0.162.3
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-720=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-720=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-720=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-720=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-720=1

Event History

Feb 29, 2024

Advisory Published

via SUSE·12:30 PM

Frequently Asked Questions

Which deployments should apply this update?

Systems using the SAPHanaSR or SAPHanaSR documentation packages on openSUSE Leap 15.5 or SUSE SAP Applications Module 15-SP2 through 15-SP5 are listed as affected by this update.

What operational problems does the update address?

It fixes hexdump logging for empty node states, changes monitor handling for non-cloned resources so they are reported as unsupported rather than producing a "command not found" error, and corrects the scope of the site variable. It also relocates logTimestamp() in susChkSrv.py and updates related manual pages.

Is there evidence in the provided advisory that this issue is remotely exploitable or requires a particular attacker capability?

No. The provided information describes a recommended SAPHanaSR update and its functional fixes, but does not state an attack vector, required privileges, exploit conditions, or mitigation other than applying the update.

SUSE-RU-2024:0720-1: Recommended update for SAPHanaSR

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments should apply this update?

What operational problems does the update address?

Is there evidence in the provided advisory that this issue is remotely exploitable or requires a particular attacker capability?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should apply this update?

What operational problems does the update address?

Is there evidence in the provided advisory that this issue is remotely exploitable or requires a particular attacker capability?