SUSE-SU-2020:0751-1

Опубликовано: 23 мар. 2020

Источник: suse-cvrf

Описание

Security update for cloud-init

This update for cloud-init fixes the following security issues:

CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG (bsc#1162937).
CVE-2020-8632: Increased the default random password length from 9 to 20 (bsc#1162936).

Список пакетов

Image SLES15-SP3-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-BYOS-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-CHOST-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-CHOST-BYOS-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-EC2-ECS-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-HPC-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-HPC-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-SAP-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-SAP-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-SAP-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-SAPCAL-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-SAPCAL-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Azure-Basic

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Azure-Standard

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-EC2-ECS-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-HPC

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-HPC-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Server-4-3

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-SAP-Hardened-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-EC2-ECS-HVM

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-HPC-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Server-5-0

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-SAP-Azure

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-SAP-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP5-SAP-Hardened-EC2

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

SUSE Linux Enterprise Module for Public Cloud 15 SP1

cloud-init-19.4-8.17.1

cloud-init-config-suse-19.4-8.17.1

Ссылки

https://www.suse.com/support/update/announcement/2020/suse-su-20200751-1/
Link for SUSE-SU-2020:0751-1
https://lists.suse.com/pipermail/sle-security-updates/2020-March/006634.html
E-Mail link for SUSE-SU-2020:0751-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1162936
SUSE Bug 1162936
https://bugzilla.suse.com/1162937
SUSE Bug 1162937
https://bugzilla.suse.com/1163178
SUSE Bug 1163178
https://www.suse.com/security/cve/CVE-2020-8631/
SUSE CVE CVE-2020-8631 page
https://www.suse.com/security/cve/CVE-2020-8632/
SUSE CVE CVE-2020-8632 page

Описание

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.

Затронутые продукты

Image SLES15-SP3-BYOS-Azure:cloud-init-19.4-8.17.1

Image SLES15-SP3-BYOS-Azure:cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-BYOS-EC2-HVM:cloud-init-19.4-8.17.1

Image SLES15-SP3-BYOS-EC2-HVM:cloud-init-config-suse-19.4-8.17.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-8631.html
CVE-2020-8631
https://bugzilla.suse.com/1162937
SUSE Bug 1162937

Описание

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.

Затронутые продукты

Image SLES15-SP3-BYOS-Azure:cloud-init-19.4-8.17.1

Image SLES15-SP3-BYOS-Azure:cloud-init-config-suse-19.4-8.17.1

Image SLES15-SP3-BYOS-EC2-HVM:cloud-init-19.4-8.17.1

Image SLES15-SP3-BYOS-EC2-HVM:cloud-init-config-suse-19.4-8.17.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-8632.html
CVE-2020-8632
https://bugzilla.suse.com/1162936
SUSE Bug 1162936

SUSE-SU-2020:0751-1

Описание

Список пакетов

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-EC2-ECS-HVM

Image SLES15-SP3-EC2-HVM

Image SLES15-SP3-HPC-Azure

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-SAP-Azure

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-EC2-HVM

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP4-Azure-Basic

Image SLES15-SP4-Azure-Standard

Image SLES15-SP4-EC2

Image SLES15-SP4-EC2-ECS-HVM

Image SLES15-SP4-HPC

Image SLES15-SP4-HPC-Azure

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

Image SLES15-SP4-Manager-Server-4-3-BYOS

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

Image SLES15-SP4-SAP-Hardened-EC2

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2-HVM

Image SLES15-SP5-EC2-ECS-HVM

Image SLES15-SP5-HPC-EC2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

Image SLES15-SP5-Manager-Server-5-0

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

Image SLES15-SP5-Manager-Server-5-0-BYOS

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

Image SLES15-SP5-SAP-Azure

Image SLES15-SP5-SAP-EC2

Image SLES15-SP5-SAP-Hardened-EC2

SUSE Linux Enterprise Module for Public Cloud 15 SP1

Ссылки

Уязвимость: CVE-2020-8631

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2020-8632

Описание

Затронутые продукты

Ссылки