SUSE-SU-2020:2900-1

Опубликовано: 13 окт. 2020

Источник: suse-cvrf

Описание

Security update for libproxy

This update for libproxy fixes the following issues:

CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).

Список пакетов

Container caasp/v4/nginx-ingress-controller:beta1

libproxy1-0.4.13-18.3.1

Container suse/ltss/sle12.5/sles12sp5:latest

libproxy1-0.4.13-18.3.1

Container suse/sles12sp3:latest

libproxy1-0.4.13-18.3.1

Container suse/sles12sp4:latest

libproxy1-0.4.13-18.3.1

Container suse/sles12sp5:latest

libproxy1-0.4.13-18.3.1

HPE Helion OpenStack 8

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

Image SLES12-SP4-Azure-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-EC2-HVM-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-GCE-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-OCI-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-Azure

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-Azure-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-EC2-HVM

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-EC2-HVM-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-GCE

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-GCE-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP4-SAP-OCI-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-Azure-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-Azure-Basic-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-Azure-HPC-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-Azure-HPC-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-Azure-SAP-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-Azure-SAP-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-Azure-Standard-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-EC2-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-EC2-ECS-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-EC2-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-EC2-SAP-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-EC2-SAP-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-GCE-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-GCE-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-GCE-SAP-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-GCE-SAP-On-Demand

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-OCI-BYOS-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

libproxy1-0.4.13-18.3.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

libproxy1-0.4.13-18.3.1

SUSE Enterprise Storage 5

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server 12 SP2-BCL

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server 12 SP2-LTSS

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server 12 SP3-BCL

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server 12 SP3-LTSS

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server 12 SP4-LTSS

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server 12 SP5

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP2

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP3

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE Linux Enterprise Software Development Kit 12 SP5

libproxy-devel-0.4.13-18.3.1

SUSE Linux Enterprise Workstation Extension 12 SP5

libproxy1-networkmanager-32bit-0.4.13-18.3.1

SUSE OpenStack Cloud 7

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE OpenStack Cloud 8

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE OpenStack Cloud 9

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE OpenStack Cloud Crowbar 8

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

SUSE OpenStack Cloud Crowbar 9

libproxy1-0.4.13-18.3.1

libproxy1-32bit-0.4.13-18.3.1

libproxy1-config-gnome3-0.4.13-18.3.1

libproxy1-config-gnome3-32bit-0.4.13-18.3.1

libproxy1-networkmanager-0.4.13-18.3.1

libproxy1-pacrunner-webkit-0.4.13-18.3.1

Ссылки

https://www.suse.com/support/update/announcement/2020/suse-su-20202900-1/
Link for SUSE-SU-2020:2900-1
https://lists.suse.com/pipermail/sle-security-updates/2020-October/007543.html
E-Mail link for SUSE-SU-2020:2900-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1176410
SUSE Bug 1176410
https://bugzilla.suse.com/1177143
SUSE Bug 1177143
https://www.suse.com/security/cve/CVE-2020-25219/
SUSE CVE CVE-2020-25219 page
https://www.suse.com/security/cve/CVE-2020-26154/
SUSE CVE CVE-2020-26154 page

Описание

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.

Затронутые продукты

Container caasp/v4/nginx-ingress-controller:beta1:libproxy1-0.4.13-18.3.1

Container suse/ltss/sle12.5/sles12sp5:latest:libproxy1-0.4.13-18.3.1

Container suse/sles12sp3:latest:libproxy1-0.4.13-18.3.1

Container suse/sles12sp4:latest:libproxy1-0.4.13-18.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-25219.html
CVE-2020-25219
https://bugzilla.suse.com/1176410
SUSE Bug 1176410

Описание

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

Затронутые продукты

Container caasp/v4/nginx-ingress-controller:beta1:libproxy1-0.4.13-18.3.1

Container suse/ltss/sle12.5/sles12sp5:latest:libproxy1-0.4.13-18.3.1

Container suse/sles12sp3:latest:libproxy1-0.4.13-18.3.1

Container suse/sles12sp4:latest:libproxy1-0.4.13-18.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-26154.html
CVE-2020-26154
https://bugzilla.suse.com/1177143
SUSE Bug 1177143

SUSE-SU-2020:2900-1

Описание

Список пакетов

Container caasp/v4/nginx-ingress-controller:beta1

Container suse/ltss/sle12.5/sles12sp5:latest

Container suse/sles12sp3:latest

Container suse/sles12sp4:latest

Container suse/sles12sp5:latest

HPE Helion OpenStack 8

Image SLES12-SP4-Azure-BYOS

Image SLES12-SP4-EC2-HVM-BYOS

Image SLES12-SP4-GCE-BYOS

Image SLES12-SP4-OCI-BYOS

Image SLES12-SP4-SAP-Azure

Image SLES12-SP4-SAP-Azure-BYOS

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES12-SP4-SAP-EC2-HVM

Image SLES12-SP4-SAP-EC2-HVM-BYOS

Image SLES12-SP4-SAP-GCE

Image SLES12-SP4-SAP-GCE-BYOS

Image SLES12-SP4-SAP-OCI-BYOS

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-OCI-BYOS-BYOS

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Enterprise Storage 5

SUSE Linux Enterprise Server 12 SP2-BCL

SUSE Linux Enterprise Server 12 SP2-LTSS

SUSE Linux Enterprise Server 12 SP3-BCL

SUSE Linux Enterprise Server 12 SP3-LTSS

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP2

SUSE Linux Enterprise Server for SAP Applications 12 SP3

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

SUSE Linux Enterprise Workstation Extension 12 SP5

SUSE OpenStack Cloud 7

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2020-25219

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2020-26154

Описание

Затронутые продукты

Ссылки