SUSE-SU-2022:2663-1

Опубликовано: 04 авг. 2022

Источник: suse-cvrf

Описание

Security update for harfbuzz

This update for harfbuzz fixes the following issues:

CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900).

Список пакетов

Image SLES15-SP2-SAP-Azure

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-BYOS-Azure

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-BYOS-GCE

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-EC2-HVM

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-GCE

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP3-SAP-BYOS-Azure

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP3-SAP-BYOS-GCE

libharfbuzz0-2.6.4-150200.3.3.1

SUSE Enterprise Storage 7

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Linux Enterprise Micro 5.2

libharfbuzz0-2.6.4-150200.3.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Linux Enterprise Server 15 SP2-BCL

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Linux Enterprise Server 15 SP2-LTSS

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Manager Proxy 4.1

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Manager Retail Branch Server 4.1

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

SUSE Manager Server 4.1

harfbuzz-devel-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

openSUSE Leap 15.3

harfbuzz-devel-2.6.4-150200.3.3.1

harfbuzz-tools-2.6.4-150200.3.3.1

libharfbuzz-gobject0-2.6.4-150200.3.3.1

libharfbuzz-gobject0-32bit-2.6.4-150200.3.3.1

libharfbuzz-icu0-2.6.4-150200.3.3.1

libharfbuzz-icu0-32bit-2.6.4-150200.3.3.1

libharfbuzz-subset0-2.6.4-150200.3.3.1

libharfbuzz-subset0-32bit-2.6.4-150200.3.3.1

libharfbuzz0-2.6.4-150200.3.3.1

libharfbuzz0-32bit-2.6.4-150200.3.3.1

typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.3.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20222663-1/
Link for SUSE-SU-2022:2663-1
https://lists.suse.com/pipermail/sle-security-updates/2022-August/011800.html
E-Mail link for SUSE-SU-2022:2663-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1200900
SUSE Bug 1200900
https://www.suse.com/security/cve/CVE-2022-33068/
SUSE CVE CVE-2022-33068 page

Описание

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Затронутые продукты

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-Azure:libharfbuzz0-2.6.4-150200.3.3.1

Image SLES15-SP2-SAP-BYOS-Azure:libharfbuzz0-2.6.4-150200.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-33068.html
CVE-2022-33068
https://bugzilla.suse.com/1200900
SUSE Bug 1200900

SUSE-SU-2022:2663-1

Описание

Список пакетов

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

SUSE Enterprise Storage 7

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

SUSE Linux Enterprise Server 15 SP2-BCL

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Manager Proxy 4.1

SUSE Manager Retail Branch Server 4.1

SUSE Manager Server 4.1

openSUSE Leap 15.3

Ссылки

Уязвимость: CVE-2022-33068

Описание

Затронутые продукты

Ссылки