SUSE-SU-2024:0444-1
Security update for suse-build-key
SUSE-SU-2024:0444-1 is a vulnerability with no CVSS score yet in suse-build-key, published February 9, 2024. No source lists public exploit code. Fixed in suse-build-key 12.0-150000.8.40.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
12.0-150000.8.40.1suse-build-key +21 more
Description
This update for suse-build-key fixes the following issues:
This update runs a import-suse-build-key script.
The previous libzypp-post-script based installation is replaced with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777).
- suse-build-key-import.service
- suse-build-key-import.timer
It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys. After successful import the timer is disabled.
To manually import them you can also run:
rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc
rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc
Bugfix added since last update:
- run rpm commands in import script only when libzypp is not active. bsc#1219189 bsc#1219123
Affected packages
| Package | Affected | Fixed |
|---|---|---|
suse-build-keySUSE:Linux Enterprise Micro 5.3 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Micro 5.4 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Micro 5.5 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Module for Basesystem 15 SP5 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Server 15 SP2-LTSS | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Server 15 SP3-LTSS | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
suse-build-keySUSE:Linux Enterprise Server 15 SP4-LTSS | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Server for SAP Applications 15 SP2 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Server for SAP Applications 15 SP3 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Server for SAP Applications 15 SP4 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Manager Proxy 4.3 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Manager Server 4.3 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Micro 5.1 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Linux Enterprise Micro 5.2 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keySUSE:Enterprise Storage 7.1 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keyopenSUSE:Leap Micro 5.3 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keyopenSUSE:Leap Micro 5.4 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
suse-build-keyopenSUSE:Leap 15.5 | before 12.0-150000.8.40.1 | 12.0-150000.8.40.1 |
What each source reports
OSVNo score
Security update for suse-build-key
This update for suse-build-key fixes the following issues:
This update runs a import-suse-build-key script.
The previous libzypp-post-script based installation is replaced with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777).
- suse-build-key-import.service
- suse-build-key-import.timer
It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys. After successful import the timer is disabled.
To manually import them you can also run:
rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc
rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc
Bugfix added since last update:
- run rpm commands in import script only when libzypp is not active. bsc#1219189 bsc#1219123
- Record
SUSE-SU-2024:0444-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.