SUSE-SU-2024:0155-1: Security update for suse-module-tools
Published Jan 18, 2024
·Updated
This update for suse-module-tools fixes the following issues: Updated to version 15.2.19: Added a symlink for /boot/.vmlinuz.hmac (bsc#1217775). Updated to version 15.2.18: CVE-2023-23559: Blacklisted RNDIS modules (bsc#1205767, jsc#PED-5731). CVE-2023-1829: Blacklisted the clstcindex module (bsc#1210335).
Affected Software
6 affected componentsFixes available
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64)
suse/suse-module-tools<15.2.19-150200.4.18.1
15.2.19-150200.4.18.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)
suse/suse-module-tools<15.2.19-150200.4.18.1
15.2.19-150200.4.18.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)
suse/suse-module-tools<15.2.19-150200.4.18.1
15.2.19-150200.4.18.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/suse-module-toolsto a version that resolves this vulnerability.Fixed in 15.2.19-150200.4.18.1 - Upgrade
Upgrade
suse-module-toolsto a version that resolves this vulnerability.Fixed in 15.2.19 - Configuration
Blacklist the cls_tcindex module and RNDIS modules.
Linux kernel modules module blacklist = cls_tcindex and RNDIS modules
Event History
Jan 18, 2024
Advisory Published
via SUSE·08:30 PM