Security update for EternalTerminal (important)

An update that fixes four vulnerabilities is now available.

Description:

This update for EternalTerminal fixes the following issues:

Update to 6.2.1:

• CVE-2022-24949: Fixed race condition allows local attacker to hijack IPC
  socket (boo#1202435)
• CVE-2022-24950: Fixed privilege escalation to root (boo#1202434)
• CVE-2022-24951: Fixed DoS triggered remotely by invalid sequence numbers
  (boo#1202433)
• CVE-2022-24952: Fixed race condition allows authenticated attacker to
  hijack other users’ SSH authorization socket (boo#1202432)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Backports SLE-15-SP3:

  zypper in -t patch openSUSE-2022-10187=1