SUSE-SU-2020:3939-1

Опубликовано: 28 дек. 2020

Источник: suse-cvrf

Описание

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues:

CVE-2019-19906: Fixed an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet (bsc#1159635).

Список пакетов

Container suse/sles12sp3:latest

libsasl2-3-2.1.26-8.13.1

HPE Helion OpenStack 8

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

Image SLES12-SP4-OCI-BYOS

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

Image SLES12-SP4-SAP-OCI-BYOS

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

SUSE Enterprise Storage 5

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server 12 SP2-BCL

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server 12 SP2-LTSS

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server 12 SP3-BCL

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server 12 SP3-LTSS

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server 12 SP4-LTSS

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server 12 SP5

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server for SAP Applications 12 SP2

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server for SAP Applications 12 SP3

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE Linux Enterprise Software Development Kit 12 SP5

cyrus-sasl-devel-2.1.26-8.13.1

SUSE Linux Enterprise Workstation Extension 12 SP5

cyrus-sasl-digestmd5-32bit-2.1.26-8.13.1

SUSE OpenStack Cloud 7

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE OpenStack Cloud 8

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE OpenStack Cloud 9

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE OpenStack Cloud Crowbar 8

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

SUSE OpenStack Cloud Crowbar 9

cyrus-sasl-2.1.26-8.13.1

cyrus-sasl-32bit-2.1.26-8.13.1

cyrus-sasl-crammd5-2.1.26-8.13.1

cyrus-sasl-crammd5-32bit-2.1.26-8.13.1

cyrus-sasl-digestmd5-2.1.26-8.13.1

cyrus-sasl-gssapi-2.1.26-8.13.1

cyrus-sasl-gssapi-32bit-2.1.26-8.13.1

cyrus-sasl-otp-2.1.26-8.13.1

cyrus-sasl-otp-32bit-2.1.26-8.13.1

cyrus-sasl-plain-2.1.26-8.13.1

cyrus-sasl-plain-32bit-2.1.26-8.13.1

libsasl2-3-2.1.26-8.13.1

libsasl2-3-32bit-2.1.26-8.13.1

Ссылки

https://www.suse.com/support/update/announcement/2020/suse-su-20203939-1/
Link for SUSE-SU-2020:3939-1
https://lists.suse.com/pipermail/sle-security-updates/2020-December/008123.html
E-Mail link for SUSE-SU-2020:3939-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1159635
SUSE Bug 1159635
https://www.suse.com/security/cve/CVE-2019-19906/
SUSE CVE CVE-2019-19906 page

Описание

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

Затронутые продукты

Container suse/sles12sp3:latest:libsasl2-3-2.1.26-8.13.1

HPE Helion OpenStack 8:cyrus-sasl-2.1.26-8.13.1

HPE Helion OpenStack 8:cyrus-sasl-32bit-2.1.26-8.13.1

HPE Helion OpenStack 8:cyrus-sasl-crammd5-2.1.26-8.13.1

Ссылки

https://www.suse.com/security/cve/CVE-2019-19906.html
CVE-2019-19906
https://bugzilla.suse.com/1159635
SUSE Bug 1159635

SUSE-SU-2020:3939-1

Описание

Список пакетов

Container suse/sles12sp3:latest

HPE Helion OpenStack 8

Image SLES12-SP4-OCI-BYOS

Image SLES12-SP4-SAP-OCI-BYOS

SUSE Enterprise Storage 5

SUSE Linux Enterprise Server 12 SP2-BCL

SUSE Linux Enterprise Server 12 SP2-LTSS

SUSE Linux Enterprise Server 12 SP3-BCL

SUSE Linux Enterprise Server 12 SP3-LTSS

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP2

SUSE Linux Enterprise Server for SAP Applications 12 SP3

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

SUSE Linux Enterprise Workstation Extension 12 SP5

SUSE OpenStack Cloud 7

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2019-19906

Описание

Затронутые продукты

Ссылки