SUSE-SU-2022:2562-1

Опубликовано: 27 июл. 2022

Источник: suse-cvrf

Описание

Security update for python-M2Crypto

This update for python-M2Crypto fixes the following issues:

CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).

Список пакетов

Image SLES15-SP1-SAPCAL-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP1-SAPCAL-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP1-SAPCAL-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-BYOS-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-HPC-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-HPC-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-SAP-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-SAP-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-SAP-BYOS-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-SAP-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-SAP-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-BYOS-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-HPC-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-HPC-BYOS-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-SAP-BYOS-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-SAP-BYOS-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-SAPCAL-Azure

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-SAPCAL-EC2-HVM

python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP3-SAPCAL-GCE

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Enterprise Storage 6

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Enterprise Storage 7

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15-ESPOS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15-LTSS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Micro 5.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Micro 5.2

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Module for Public Cloud 15

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Module for Python 2 15 SP3

python2-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Server 15 SP1-BCL

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Server 15 SP1-LTSS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Server 15 SP2-BCL

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Server 15 SP2-LTSS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Server 15-LTSS

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Server for SAP Applications 15

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Manager Proxy 4.1

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Manager Retail Branch Server 4.1

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

SUSE Manager Server 4.1

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

openSUSE Leap 15.3

python-M2Crypto-doc-0.35.2-150000.3.14.1

python2-M2Crypto-0.35.2-150000.3.14.1

python3-M2Crypto-0.35.2-150000.3.14.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20222562-1/
Link for SUSE-SU-2022:2562-1
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011682.html
E-Mail link for SUSE-SU-2022:2562-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1178829
SUSE Bug 1178829
https://www.suse.com/security/cve/CVE-2020-25657/
SUSE CVE CVE-2020-25657 page

Описание

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.

Затронутые продукты

Image SLES15-SP1-SAPCAL-Azure:python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP1-SAPCAL-EC2-HVM:python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP1-SAPCAL-GCE:python3-M2Crypto-0.35.2-150000.3.14.1

Image SLES15-SP2-BYOS-Azure:python3-M2Crypto-0.35.2-150000.3.14.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-25657.html
CVE-2020-25657
https://bugzilla.suse.com/1178829
SUSE Bug 1178829
https://bugzilla.suse.com/1218044
SUSE Bug 1218044

SUSE-SU-2022:2562-1

Описание

Список пакетов

Image SLES15-SP1-SAPCAL-Azure

Image SLES15-SP1-SAPCAL-EC2-HVM

Image SLES15-SP1-SAPCAL-GCE

Image SLES15-SP2-BYOS-Azure

Image SLES15-SP2-BYOS-EC2-HVM

Image SLES15-SP2-BYOS-GCE

Image SLES15-SP2-HPC-BYOS-Azure

Image SLES15-SP2-HPC-BYOS-EC2-HVM

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-Micro-5-1-BYOS-Azure

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-1-BYOS-GCE

Image SLES15-SP3-Micro-5-2-BYOS-Azure

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-2-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Enterprise Storage 6

SUSE Enterprise Storage 7

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15-ESPOS

SUSE Linux Enterprise High Performance Computing 15-LTSS

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

SUSE Linux Enterprise Module for Public Cloud 15

SUSE Linux Enterprise Module for Python 2 15 SP3

SUSE Linux Enterprise Server 15 SP1-BCL

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server 15 SP2-BCL

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise Server for SAP Applications 15

SUSE Linux Enterprise Server for SAP Applications 15 SP1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Manager Proxy 4.1

SUSE Manager Retail Branch Server 4.1

SUSE Manager Server 4.1

openSUSE Leap 15.3

Ссылки

Уязвимость: CVE-2020-25657

Описание

Затронутые продукты

Ссылки