Security update for SUSE Manager Client Tools Beta SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:1629-1 Final 1 1 2024-05-14T02:28:49Z current 2024-05-14T02:28:49Z 2024-05-14T02:28:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for SUSE Manager Client Tools Beta This update for SUSE Manager Client Tools Beta fixes the following issues: - Changed codestream origin of SUSE Manager Client Tools Beta (no source changes) icinga in SUSE Manager Client Tools Beta also received the following security fixes: - CVE-2016-9566: Fixed root privilege escalation (bsc#1014637) - CVE-2019-3698 : Symbolic Link (Symlink) following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges by winning a race (bsc#1156309) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2024-1629,Image SLES12-SP5-Azure-Basic-On-Demand-2024-1629,Image SLES12-SP5-Azure-HPC-BYOS-2024-1629,Image SLES12-SP5-Azure-SAP-BYOS-2024-1629,Image SLES12-SP5-Azure-Standard-On-Demand-2024-1629,Image SLES12-SP5-EC2-BYOS-2024-1629,Image SLES12-SP5-EC2-ECS-On-Demand-2024-1629,Image SLES12-SP5-EC2-On-Demand-2024-1629,Image SLES12-SP5-EC2-SAP-BYOS-2024-1629,Image SLES12-SP5-GCE-BYOS-2024-1629,Image SLES12-SP5-GCE-On-Demand-2024-1629,Image SLES12-SP5-GCE-SAP-BYOS-2024-1629,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2024-1629,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2024-1629,SUSE-2024-1629,SUSE-SLE-Manager-Tools-12-2024-1629,SUSE-SLE-Manager-Tools-12-BETA-2024-1629,SUSE-SLE-Module-Adv-Systems-Management-12-2024-1629,SUSE-SLE-Module-Containers-12-2024-1629,SUSE-SLE-SDK-12-SP5-2024-1629,SUSE-SLE-SERVER-12-SP5-2024-1629,SUSE-SLE-WE-12-SP5-2024-1629 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20241629-1/ Link for SUSE-SU-2024:1629-1 https://lists.suse.com/pipermail/sle-updates/2024-May/035252.html E-Mail link for SUSE-SU-2024:1629-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1014637 SUSE Bug 1014637 https://bugzilla.suse.com/1156309 SUSE Bug 1156309 https://www.suse.com/security/cve/CVE-2016-9566/ SUSE CVE CVE-2016-9566 page https://www.suse.com/security/cve/CVE-2019-3698/ SUSE CVE CVE-2019-3698 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Manager Client Tools 12 SUSE Manager Client Tools 12-BETA libzmq3-4.0.4-15.8.1 sysuser-shadow-2.0-1.9.1 grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 grafana-sap-providers-1.1-1.7.1 grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 hwdata-0.314-10.14.1 icinga-1.13.3-12.8.1 icinga-devel-1.13.3-12.8.1 icinga-doc-1.13.3-12.8.1 icinga-idoutils-1.13.3-12.8.1 icinga-idoutils-mysql-1.13.3-12.8.1 icinga-idoutils-oracle-1.13.3-12.8.1 icinga-idoutils-pgsql-1.13.3-12.8.1 icinga-plugins-downtimes-1.13.3-12.8.1 icinga-plugins-eventhandlers-1.13.3-12.8.1 icinga-www-1.13.3-12.8.1 icinga-www-config-1.13.3-12.8.1 monitoring-tools-1.13.3-12.8.1 sysuser-tools-2.0-1.9.1 zeromq-devel-4.0.4-15.8.1 libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-Azure-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-EC2-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-EC2-On-Demand libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-GCE-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-GCE-On-Demand libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libzmq3-4.0.4-15.8.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 sysuser-shadow-2.0-1.9.1 as a component of SUSE Linux Enterprise Module for Containers 12 sysuser-shadow-2.0-1.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 sysuser-tools-2.0-1.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 sysuser-shadow-2.0-1.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 sysuser-tools-2.0-1.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libzmq3-4.0.4-15.8.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 zeromq-devel-4.0.4-15.8.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libzmq3-4.0.4-15.8.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Manager Client Tools 12 grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 as a component of SUSE Manager Client Tools 12 grafana-sap-providers-1.1-1.7.1 as a component of SUSE Manager Client Tools 12 grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Manager Client Tools 12 hwdata-0.314-10.14.1 as a component of SUSE Manager Client Tools 12 icinga-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-devel-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-doc-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-idoutils-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-idoutils-mysql-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-idoutils-oracle-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-idoutils-pgsql-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-plugins-downtimes-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-plugins-eventhandlers-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-www-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-www-config-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 libzmq3-4.0.4-15.8.1 as a component of SUSE Manager Client Tools 12 monitoring-tools-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 sysuser-shadow-2.0-1.9.1 as a component of SUSE Manager Client Tools 12 grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Manager Client Tools 12-BETA grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 as a component of SUSE Manager Client Tools 12-BETA grafana-sap-providers-1.1-1.7.1 as a component of SUSE Manager Client Tools 12-BETA grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Manager Client Tools 12-BETA icinga-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-devel-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-doc-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-idoutils-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-idoutils-mysql-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-idoutils-oracle-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-idoutils-pgsql-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-plugins-downtimes-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-plugins-eventhandlers-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-www-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-www-config-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA libzmq3-4.0.4-15.8.1 as a component of SUSE Manager Client Tools 12-BETA monitoring-tools-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA sysuser-shadow-2.0-1.9.1 as a component of SUSE Manager Client Tools 12-BETA base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565. CVE-2016-9566 Image SLES12-SP5-Azure-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-Basic-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-Azure-HPC-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-Standard-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-EC2-ECS-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-GCE-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-GCE-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-GCE-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1 SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1 SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1 SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1 SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1 SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12:hwdata-0.314-10.14.1 SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1 SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1 SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1 important 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20241629-1/ https://www.suse.com/security/cve/CVE-2016-9566.html CVE-2016-9566 https://bugzilla.suse.com/1014637 SUSE Bug 1014637 UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions. CVE-2019-3698 Image SLES12-SP5-Azure-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-Basic-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-Azure-HPC-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-Standard-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-EC2-ECS-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-GCE-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-GCE-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-GCE-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1 SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1 SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1 SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1 SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1 SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12:hwdata-0.314-10.14.1 SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1 SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1 SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20241629-1/ https://www.suse.com/security/cve/CVE-2019-3698.html CVE-2019-3698 https://bugzilla.suse.com/1150550 SUSE Bug 1150550 https://bugzilla.suse.com/1156309 SUSE Bug 1156309