SUSE-SU-2024:0444-1

    Dashboard / Vulnerabilities / SUSE-SU-2024:0444-1

    SUSE-SU-2024:0444-1

    Published: 9 Feb 2024Last Modified: 9 Feb 2024

    Summary: Security update for suse-build-key

    Details: This update for suse-build-key fixes the following issues: This update runs a import-suse-build-key script. The previous libzypp-post-script based installation is replaced with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777). - suse-build-key-import.service - suse-build-key-import.timer It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys. After successful import the timer is disabled. To manually import them you can also run: # rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc # rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc Bugfix added since last update: - run rpm commands in import script only when libzypp is not active. bsc#1219189 bsc#1219123

    References: https://www.suse.com/support/update/announcement/2024/suse-su-20240444-1/, https://bugzilla.suse.com/1219123, https://bugzilla.suse.com/1219189

    Affected packages

    Package

    Name: suse-build-key

    Purl: pkg:rpm/suse/suse-build-key&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -12.0-150000.8.40.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High