CVE-2022-1706

Se ha encontrado una vulnerabilidad en Ignition en la que las configuraciones de encendido son accesibles desde contenedores no privilegiados en máquinas virtuales que son ejecutados en productos VMware. Este problema sólo es relevante en entornos de usuario en los que la configuración de Ignition contiene secretos. La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos. Una posible mitigación es no poner secretos en la configuración de Ignition

A vulnerability was found in Ignition, where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets.

An update that solves one vulnerability and has one errata is now available. This update for systemd-presets-common-SUSE fixes the following issues. Fixed accessible configs from unprivileged containers in VMs running on VMware products. The following non-security bugs were fixed. Enabling new user systemd service preset configuration just as it handles system service presets. By passing an second parameter "user", the save/apply-changes commands now work with user services instead of system ones SLE15-SP4 where it replaced pipewire-media-session, but keep pipewire-media-session preset so we don't have to branch the systemd-presets-common-SUSE package for SP4.