Security update for permissions SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0141-1 Final 1 1 2022-01-20T12:47:28Z current 2022-01-20T12:47:28Z 2022-01-20T12:47:28Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for permissions This update for permissions fixes the following issues: - Update to version 20181225: setuid bit for cockpit session binary (bsc#1169614). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-init:15.3-2022-141,Container bci/dotnet-aspnet:3.1-2022-141,Container bci/dotnet-aspnet:5.0-2022-141,Container bci/dotnet-aspnet:latest-2022-141,Container bci/dotnet-runtime:3.1-2022-141,Container bci/dotnet-runtime:5.0-2022-141,Container bci/dotnet-runtime:latest-2022-141,Container bci/dotnet-sdk:3.1-2022-141,Container bci/dotnet-sdk:5.0-2022-141,Container bci/dotnet-sdk:latest-2022-141,Container bci/golang:1.16-2022-141,Container bci/golang:1.17-2022-141,Container bci/golang:latest-2022-141,Container bci/node:12-2022-141,Container bci/node:14-2022-141,Container bci/nodejs:latest-2022-141,Container bci/openjdk-devel:11-2022-141,Container bci/openjdk:latest-2022-141,Container bci/python:3-2022-141,Container bci/ruby:latest-2022-141,Container ses/7.1/ceph/grafana:latest-2022-141,Container ses/7.1/ceph/haproxy:latest-2022-141,Container ses/7.1/ceph/keepalived:latest-2022-141,Container ses/7.1/ceph/prometheus-alertmanager:latest-2022-141,Container ses/7.1/ceph/prometheus-node-exporter:latest-2022-141,Container ses/7.1/ceph/prometheus-server:latest-2022-141,Container ses/7.1/ceph/prometheus-snmp_notifier:latest-2022-141,Container ses/7.1/cephcsi/cephcsi:latest-2022-141,Container ses/7.1/cephcsi/csi-attacher:v4.1.0-2022-141,Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0-2022-141,Container ses/7.1/cephcsi/csi-provisioner:v3.4.0-2022-141,Container ses/7.1/cephcsi/csi-resizer:v1.7.0-2022-141,Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1-2022-141,Container ses/7.1/rook/ceph:latest-2022-141,Container ses/7/ceph/grafana:latest-2022-141,Container ses/7/ceph/prometheus-alertmanager:latest-2022-141,Container ses/7/ceph/prometheus-node-exporter:latest-2022-141,Container ses/7/ceph/prometheus-server:latest-2022-141,Container ses/7/cephcsi/cephcsi:latest-2022-141,Container ses/7/cephcsi/csi-attacher:v3.3.0-2022-141,Container ses/7/cephcsi/csi-livenessprobe:v1.1.0-2022-141,Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0-2022-141,Container ses/7/cephcsi/csi-provisioner:v3.0.0-2022-141,Container ses/7/cephcsi/csi-resizer:v1.3.0-2022-141,Container ses/7/cephcsi/csi-snapshotter:v4.2.0-2022-141,Container ses/7/prometheus-webhook-snmp:latest-2022-141,Container ses/7/rook/ceph:latest-2022-141,Container suse/pcp:latest-2022-141,Container suse/rmt-mariadb-client:latest-2022-141,Container suse/rmt-mariadb:latest-2022-141,Container suse/rmt-nginx:latest-2022-141,Container suse/rmt-server:latest-2022-141,Container suse/sle-micro-rancher/5.2:latest-2022-141,Container suse/sle-micro/5.1/toolbox:latest-2022-141,Container suse/sle-micro/5.2/toolbox:latest-2022-141,Container suse/sle15:15.2-2022-141,Container suse/sle15:15.3-2022-141,Container trento/trento-db:latest-2022-141,Container trento/trento-runner:latest-2022-141,Image SLES15-SP3-BYOS-Azure-2022-141,Image SLES15-SP3-BYOS-EC2-HVM-2022-141,Image SLES15-SP3-BYOS-GCE-2022-141,Image SLES15-SP3-CHOST-BYOS-Aliyun-2022-141,Image SLES15-SP3-CHOST-BYOS-Azure-2022-141,Image SLES15-SP3-CHOST-BYOS-EC2-2022-141,Image SLES15-SP3-CHOST-BYOS-GCE-2022-141,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2022-141,Image SLES15-SP3-EC2-ECS-HVM-2022-141,Image SLES15-SP3-EC2-HVM-2022-141,Image SLES15-SP3-GCE-2022-141,Image SLES15-SP3-HPC-Azure-2022-141,Image SLES15-SP3-HPC-BYOS-Azure-2022-141,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2022-141,Image SLES15-SP3-HPC-BYOS-GCE-2022-141,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2022-141,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2022-141,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2022-141,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2022-141,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2022-141,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2022-141,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2022-141,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2022-141,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2022-141,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2022-141,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2022-141,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2022-141,Image SLES15-SP3-Micro-BYOS-GCE-2022-141,Image SLES15-SP3-SAP-Azure-2022-141,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2022-141,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2022-141,Image SLES15-SP3-SAP-BYOS-Azure-2022-141,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2022-141,Image SLES15-SP3-SAP-BYOS-GCE-2022-141,Image SLES15-SP3-SAP-EC2-HVM-2022-141,Image SLES15-SP3-SAP-GCE-2022-141,Image SLES15-SP3-SAPCAL-Azure-2022-141,Image SLES15-SP3-SAPCAL-EC2-HVM-2022-141,Image SLES15-SP3-SAPCAL-GCE-2022-141,SUSE-2022-141,SUSE-SLE-Module-Basesystem-15-SP3-2022-141,SUSE-SUSE-MicroOS-5.0-2022-141,SUSE-SUSE-MicroOS-5.1-2022-141 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220141-1/ Link for SUSE-SU-2022:0141-1 https://lists.suse.com/pipermail/sle-security-updates/2022-January/010038.html E-Mail link for SUSE-SU-2022:0141-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1169614 SUSE Bug 1169614 Container bci/bci-init:15.3 Container bci/dotnet-aspnet:3.1 Container bci/dotnet-aspnet:5.0 Container bci/dotnet-aspnet:latest Container bci/dotnet-runtime:3.1 Container bci/dotnet-runtime:5.0 Container bci/dotnet-runtime:latest Container bci/dotnet-sdk:3.1 Container bci/dotnet-sdk:5.0 Container bci/dotnet-sdk:latest Container bci/golang:1.16 Container bci/golang:1.17 Container bci/golang:latest Container bci/node:12 Container bci/node:14 Container bci/nodejs:latest Container bci/openjdk-devel:11 Container bci/openjdk:latest Container bci/python:3 Container bci/ruby:latest Container ses/7.1/ceph/grafana:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/ceph/prometheus-alertmanager:latest Container ses/7.1/ceph/prometheus-node-exporter:latest Container ses/7.1/ceph/prometheus-server:latest Container ses/7.1/ceph/prometheus-snmp_notifier:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/cephcsi/csi-attacher:v4.1.0 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 Container ses/7.1/cephcsi/csi-resizer:v1.7.0 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 Container ses/7.1/rook/ceph:latest Container ses/7/ceph/grafana:latest Container ses/7/ceph/prometheus-alertmanager:latest Container ses/7/ceph/prometheus-node-exporter:latest Container ses/7/ceph/prometheus-server:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/cephcsi/csi-attacher:v3.3.0 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 Container ses/7/cephcsi/csi-provisioner:v3.0.0 Container ses/7/cephcsi/csi-resizer:v1.3.0 Container ses/7/cephcsi/csi-snapshotter:v4.2.0 Container ses/7/prometheus-webhook-snmp:latest Container ses/7/rook/ceph:latest Container suse/pcp:latest Container suse/rmt-mariadb-client:latest Container suse/rmt-mariadb:latest Container suse/rmt-nginx:latest Container suse/rmt-server:latest Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Container suse/sle15:15.2 Container suse/sle15:15.3 Container trento/trento-db:latest Container trento/trento-runner:latest Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-EC2-ECS-HVM Image SLES15-SP3-EC2-HVM Image SLES15-SP3-GCE Image SLES15-SP3-HPC-Azure Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-Micro-BYOS-GCE Image SLES15-SP3-SAP-Azure Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAP-EC2-HVM Image SLES15-SP3-SAP-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 permissions-20181225-23.12.1 permissions-zypp-plugin-20181225-23.12.1 rpmlint-mini-1.10-13.9.1 permissions-20181225-23.12.1 as a component of Container bci/bci-init:15.3 permissions-20181225-23.12.1 as a component of Container bci/dotnet-aspnet:3.1 permissions-20181225-23.12.1 as a component of Container bci/dotnet-aspnet:5.0 permissions-20181225-23.12.1 as a component of Container bci/dotnet-aspnet:latest permissions-20181225-23.12.1 as a component of Container bci/dotnet-runtime:3.1 permissions-20181225-23.12.1 as a component of Container bci/dotnet-runtime:5.0 permissions-20181225-23.12.1 as a component of Container bci/dotnet-runtime:latest permissions-20181225-23.12.1 as a component of Container bci/dotnet-sdk:3.1 permissions-20181225-23.12.1 as a component of Container bci/dotnet-sdk:5.0 permissions-20181225-23.12.1 as a component of Container bci/dotnet-sdk:latest permissions-20181225-23.12.1 as a component of Container bci/golang:1.16 permissions-20181225-23.12.1 as a component of Container bci/golang:1.17 permissions-20181225-23.12.1 as a component of Container bci/golang:latest permissions-20181225-23.12.1 as a component of Container bci/node:12 permissions-20181225-23.12.1 as a component of Container bci/node:14 permissions-20181225-23.12.1 as a component of Container bci/nodejs:latest permissions-20181225-23.12.1 as a component of Container bci/openjdk-devel:11 permissions-20181225-23.12.1 as a component of Container bci/openjdk:latest permissions-20181225-23.12.1 as a component of Container bci/python:3 permissions-20181225-23.12.1 as a component of Container bci/ruby:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/ceph/grafana:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/ceph/haproxy:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/ceph/keepalived:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/ceph/prometheus-server:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest permissions-20181225-23.12.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 permissions-20181225-23.12.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 permissions-20181225-23.12.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 permissions-20181225-23.12.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 permissions-20181225-23.12.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 permissions-20181225-23.12.1 as a component of Container ses/7.1/rook/ceph:latest permissions-20181225-23.12.1 as a component of Container ses/7/ceph/grafana:latest permissions-20181225-23.12.1 as a component of Container ses/7/ceph/prometheus-alertmanager:latest permissions-20181225-23.12.1 as a component of Container ses/7/ceph/prometheus-node-exporter:latest permissions-20181225-23.12.1 as a component of Container ses/7/ceph/prometheus-server:latest permissions-20181225-23.12.1 as a component of Container ses/7/cephcsi/cephcsi:latest permissions-20181225-23.12.1 as a component of Container ses/7/cephcsi/csi-attacher:v3.3.0 permissions-20181225-23.12.1 as a component of Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 permissions-20181225-23.12.1 as a component of Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 permissions-20181225-23.12.1 as a component of Container ses/7/cephcsi/csi-provisioner:v3.0.0 permissions-20181225-23.12.1 as a component of Container ses/7/cephcsi/csi-resizer:v1.3.0 permissions-20181225-23.12.1 as a component of Container ses/7/cephcsi/csi-snapshotter:v4.2.0 permissions-20181225-23.12.1 as a component of Container ses/7/prometheus-webhook-snmp:latest permissions-20181225-23.12.1 as a component of Container ses/7/rook/ceph:latest permissions-20181225-23.12.1 as a component of Container suse/pcp:latest permissions-20181225-23.12.1 as a component of Container suse/rmt-mariadb-client:latest permissions-20181225-23.12.1 as a component of Container suse/rmt-mariadb:latest permissions-20181225-23.12.1 as a component of Container suse/rmt-nginx:latest permissions-20181225-23.12.1 as a component of Container suse/rmt-server:latest permissions-20181225-23.12.1 as a component of Container suse/sle-micro-rancher/5.2:latest permissions-20181225-23.12.1 as a component of Container suse/sle-micro/5.1/toolbox:latest permissions-20181225-23.12.1 as a component of Container suse/sle-micro/5.2/toolbox:latest permissions-20181225-23.12.1 as a component of Container suse/sle15:15.2 permissions-20181225-23.12.1 as a component of Container suse/sle15:15.3 permissions-20181225-23.12.1 as a component of Container trento/trento-db:latest permissions-20181225-23.12.1 as a component of Container trento/trento-runner:latest permissions-20181225-23.12.1 as a component of Image SLES15-SP3-BYOS-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun permissions-20181225-23.12.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 permissions-20181225-23.12.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud permissions-20181225-23.12.1 as a component of Image SLES15-SP3-EC2-ECS-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-HPC-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-Micro-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAP-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAP-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAP-GCE permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAPCAL-Azure permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM permissions-20181225-23.12.1 as a component of Image SLES15-SP3-SAPCAL-GCE permissions-20181225-23.12.1 as a component of SUSE Linux Enterprise Micro 5.0 permissions-20181225-23.12.1 as a component of SUSE Linux Enterprise Micro 5.1 permissions-20181225-23.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 permissions-zypp-plugin-20181225-23.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3