SUSE-SU-2022:1040-3

Опубликовано: 06 окт. 2022

Источник: suse-cvrf

Описание

Security update for protobuf

This update for protobuf fixes the following issues:

CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258).

Список пакетов

Container bci/bci-init:15.3

libprotobuf-lite20-3.9.2-4.12.1

Container bci/golang:1.16

libprotobuf-lite20-3.9.2-4.12.1

Container bci/golang:1.17

libprotobuf-lite20-3.9.2-4.12.1

Container bci/golang:latest

libprotobuf-lite20-3.9.2-4.12.1

Container bci/node:12

libprotobuf-lite20-3.9.2-4.12.1

Container bci/node:14

libprotobuf-lite20-3.9.2-4.12.1

Container bci/nodejs:latest

libprotobuf-lite20-3.9.2-4.12.1

Container bci/openjdk-devel:11

libprotobuf-lite20-3.9.2-4.12.1

Container bci/openjdk:latest

libprotobuf-lite20-3.9.2-4.12.1

Container bci/python:3

libprotobuf-lite20-3.9.2-4.12.1

Container bci/ruby:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/ceph/grafana:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/ceph/haproxy:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/ceph/keepalived:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/ceph/prometheus-alertmanager:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/ceph/prometheus-node-exporter:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/ceph/prometheus-server:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/ceph/prometheus-snmp_notifier:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/cephcsi/cephcsi:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/cephcsi/csi-attacher:v4.1.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/cephcsi/csi-provisioner:v3.4.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/cephcsi/csi-resizer:v1.7.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7.1/rook/ceph:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/ceph/grafana:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/ceph/prometheus-alertmanager:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/ceph/prometheus-node-exporter:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/ceph/prometheus-server:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/cephcsi/cephcsi:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/cephcsi/csi-attacher:v3.3.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/cephcsi/csi-livenessprobe:v1.1.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/cephcsi/csi-provisioner:v3.0.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/cephcsi/csi-resizer:v1.3.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/cephcsi/csi-snapshotter:v4.2.0

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/prometheus-webhook-snmp:latest

libprotobuf-lite20-3.9.2-4.12.1

Container ses/7/rook/ceph:latest

libprotobuf-lite20-3.9.2-4.12.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

libprotobuf-lite20-3.9.2-4.12.1

Container suse/sle15:15.3

libprotobuf-lite20-3.9.2-4.12.1

Container suse/sle15:15.4

libprotobuf-lite20-3.9.2-4.12.1

Container suse/sles/15.4/libguestfs-tools:0.49.0

libprotobuf-lite20-3.9.2-4.12.1

Container suse/sles/15.5/libguestfs-tools:0.58.0

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-BYOS-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-BYOS-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-BYOS-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-CHOST-BYOS-Aliyun

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-CHOST-BYOS-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-CHOST-BYOS-EC2

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-CHOST-BYOS-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-HPC-BYOS-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-HPC-BYOS-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

libprotobuf-lite20-3.9.2-4.12.1

protobuf-java-3.9.2-4.12.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

protobuf-java-3.9.2-4.12.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

libprotobuf-lite20-3.9.2-4.12.1

protobuf-java-3.9.2-4.12.1

Image SLES15-SP2-SAP-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-SAP-BYOS-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-SAP-BYOS-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-SAP-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP2-SAP-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-BYOS-Azure

python3-protobuf-3.9.2-4.12.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-EC2-ECS-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-HPC-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-HPC-BYOS-Azure

python3-protobuf-3.9.2-4.12.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libprotobuf-lite20-3.9.2-4.12.1

protobuf-java-3.9.2-4.12.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

protobuf-java-3.9.2-4.12.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libprotobuf-lite20-3.9.2-4.12.1

protobuf-java-3.9.2-4.12.1

Image SLES15-SP3-SAP-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-SAP-BYOS-Azure

python3-protobuf-3.9.2-4.12.1

Image SLES15-SP3-SAP-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-SAP-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP3-SAPCAL-Azure

python3-protobuf-3.9.2-4.12.1

Image SLES15-SP4

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-Azure-Basic

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-Azure-Standard

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-EC2

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-EC2-ECS-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-HPC

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-HPC-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-Micro-5-3-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-Micro-5-3-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-Micro-5-4-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-SAP-Hardened-EC2

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP5-EC2-ECS-HVM

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP5-HPC-EC2

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP5-HPC-GCE

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP5-SAP-Azure

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP5-SAP-EC2

libprotobuf-lite20-3.9.2-4.12.1

Image SLES15-SP5-SAP-GCE

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20221040-3/
Link for SUSE-SU-2022:1040-3
https://lists.suse.com/pipermail/sle-security-updates/2022-October/012505.html
E-Mail link for SUSE-SU-2022:1040-3
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1195258
SUSE Bug 1195258
https://www.suse.com/security/cve/CVE-2021-22570/
SUSE CVE CVE-2021-22570 page

Описание

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.

Затронутые продукты

Container bci/bci-init:15.3:libprotobuf-lite20-3.9.2-4.12.1

Container bci/golang:1.16:libprotobuf-lite20-3.9.2-4.12.1

Container bci/golang:1.17:libprotobuf-lite20-3.9.2-4.12.1

Container bci/golang:latest:libprotobuf-lite20-3.9.2-4.12.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-22570.html
CVE-2021-22570
https://bugzilla.suse.com/1195258
SUSE Bug 1195258