SUSE-SU-2023:4101-1: Security update for conmon

Q: Which systems are covered by this update?

The update applies to conmon and conmon-debuginfo on SUSE Enterprise Storage 7.1, SUSE Linux Enterprise Micro 5.1 and 5.2, SUSE Linux Enterprise Micro for Rancher 5.2, openSUSE Leap 15.3, and SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3. Supported architectures vary by product and include aarch64, x86_64, s390x, ppc64le, and i586.

Q: What security issue does the update address?

The provided advisory states that conmon is rebuilt with the current stable Go 1.21 release. It does not identify a specific vulnerability, exploitation method, affected default configuration, or workaround.

Published Oct 17, 2023

Updated

This update for conmon fixes the following issues: conmon is rebuilt with the current stable release go1.21 (bsc#1215806)

Affected Software

27 affected componentsFixes available

All of the following

SUSE SUSE Enterprise Storage 7.1 (aarch64 x86_64)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

All of the following

SUSE SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

All of the following

SUSE SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

All of the following

SUSE SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

All of the following

SUSE openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)

Any of the following

suse/conmon-debuginfo<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

suse/conmon<2.1.5-150300.8.14.1

2.1.5-150300.8.14.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/conmon-debuginfo to a version that resolves this vulnerability.
Fixed in 2.1.5-150300.8.14.1
Upgrade
Upgrade suse/conmon to a version that resolves this vulnerability.
Fixed in 2.1.5-150300.8.14.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-4101
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4101
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4101
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4101
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4101
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2023-4101
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2023-4101
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-4101

Event History

Oct 17, 2023

Advisory Published

04:30 PM

Frequently Asked Questions

Which systems are covered by this update?

The update applies to conmon and conmon-debuginfo on SUSE Enterprise Storage 7.1, SUSE Linux Enterprise Micro 5.1 and 5.2, SUSE Linux Enterprise Micro for Rancher 5.2, openSUSE Leap 15.3, and SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3. Supported architectures vary by product and include aarch64, x86_64, s390x, ppc64le, and i586.

What security issue does the update address?

The provided advisory states that conmon is rebuilt with the current stable Go 1.21 release. It does not identify a specific vulnerability, exploitation method, affected default configuration, or workaround.

SUSE-SU-2023:4101-1: Security update for conmon

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are covered by this update?

What security issue does the update address?

Company

Resources

Contact

Frequently Asked Questions

Which systems are covered by this update?

What security issue does the update address?