{"id":"SUSE-SU-2022:2866-2","summary":"Security update for systemd-presets-common-SUSE","details":"This update for systemd-presets-common-SUSE fixes the following issues:\n\n- CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products (bsc#1199524).\n\nThe following non-security bugs were fixed:\n\n- Modify branding-preset-states to fix systemd-presets-common-SUSE\n  not enabling new user systemd service preset configuration just\n  as it handles system service presets. By passing an (optional)\n  second parameter 'user', the save/apply-changes commands now\n  work with user services instead of system ones (bsc#1200485)\n\n- Add the wireplumber user service preset to enable it by default\n  in SLE15-SP4 where it replaced pipewire-media-session, but keep\n  pipewire-media-session preset so we don't have to branch the\n  systemd-presets-common-SUSE package for SP4 (bsc#1200485)\n","modified":"2026-03-11T07:20:38.240130Z","published":"2022-08-22T13:36:48Z","related":["CVE-2022-1706"],"upstream":["CVE-2022-1706"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222866-2/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1199524"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200485"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-1706"}],"affected":[{"package":{"name":"systemd-presets-common-SUSE","ecosystem":"openSUSE:Leap Micro 5.2","purl":"pkg:rpm/opensuse/systemd-presets-common-SUSE&distro=openSUSE%20Leap%20Micro%205.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15-150100.8.17.1"}]}],"ecosystem_specific":{"binaries":[{"systemd-presets-common-SUSE":"15-150100.8.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2866-2.json"}}],"schema_version":"1.7.5"}